Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e382e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e382e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          Vov9cFsi28OF0lwLDRNqU34SaCESJr0LIX8VctVWKdg=
Subject key identifier:   B8:59:D7:8E:FA:A1:3B:75:70:2A:74:40:8C:28:05:41:06:D7:9C:5D
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       2A7CF7C4ABC828E69D45685D25CBA0E57C1741EA
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e382e302f32342d3234203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:44 +0000
ROA not before:           Wed 03 Apr 2024 18:25:44 +0000
ROA not after:            Wed 02 Apr 2025 18:30:44 +0000
asID:                     262713
IP address blocks:        186.208.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7c:f7:c4:ab:c8:28:e6:9d:45:68:5d:25:cb:a0:e5:7c:17:41:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:44 2024 GMT
            Not After : Apr  2 18:30:44 2025 GMT
        Subject: CN=3082010A0282010100BBFD2256DEB584461F23C9199CAA9B4FF128E141DC9E2EE9F7830A1AF0D5AD2C4AFEDB1329795E594D9C2891B350A8AF445E1971495869A052E3748CD94B14A7F38CF5F5F8C868EAA50563198EBB8360405CCF5E4E7758BEF33B1E40008FD6A1AEFF6A6B6C9F40D2C77889108C95D6E0A234042167CA1CDE6DCFFE3B791FC7B665C3CB25FEB06B336E7BBB1BFE006C1677078BE2F7B50A97DC534329DF96EB8ED5BE75E58910BEC333BE0DC4DC57CFA0AABD495516AF4DF21B0AB04DF61DE9C0E6A207C7DCF220C30AEB9D24FE647C4469A5ECDE7E74D323EBE701E841812FC3AB13E4D9B8C1A9FA52BB34D3FF9D56B6C6688BA1F2816B4FCAE430687C813C2D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:22:56:de:b5:84:46:1f:23:c9:19:9c:aa:
                    9b:4f:f1:28:e1:41:dc:9e:2e:e9:f7:83:0a:1a:f0:
                    d5:ad:2c:4a:fe:db:13:29:79:5e:59:4d:9c:28:91:
                    b3:50:a8:af:44:5e:19:71:49:58:69:a0:52:e3:74:
                    8c:d9:4b:14:a7:f3:8c:f5:f5:f8:c8:68:ea:a5:05:
                    63:19:8e:bb:83:60:40:5c:cf:5e:4e:77:58:be:f3:
                    3b:1e:40:00:8f:d6:a1:ae:ff:6a:6b:6c:9f:40:d2:
                    c7:78:89:10:8c:95:d6:e0:a2:34:04:21:67:ca:1c:
                    de:6d:cf:fe:3b:79:1f:c7:b6:65:c3:cb:25:fe:b0:
                    6b:33:6e:7b:bb:1b:fe:00:6c:16:77:07:8b:e2:f7:
                    b5:0a:97:dc:53:43:29:df:96:eb:8e:d5:be:75:e5:
                    89:10:be:c3:33:be:0d:c4:dc:57:cf:a0:aa:bd:49:
                    55:16:af:4d:f2:1b:0a:b0:4d:f6:1d:e9:c0:e6:a2:
                    07:c7:dc:f2:20:c3:0a:eb:9d:24:fe:64:7c:44:69:
                    a5:ec:de:7e:74:d3:23:eb:e7:01:e8:41:81:2f:c3:
                    ab:13:e4:d9:b8:c1:a9:fa:52:bb:34:d3:ff:9d:56:
                    b6:c6:68:8b:a1:f2:81:6b:4f:ca:e4:30:68:7c:81:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:59:D7:8E:FA:A1:3B:75:70:2A:74:40:8C:28:05:41:06:D7:9C:5D
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e382e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:ad:db:bd:b8:df:03:f0:b1:bc:f1:16:fd:bf:b6:2f:bc:39:
         f7:09:4a:97:a2:37:cf:d7:75:8c:65:b6:d3:ff:9d:a1:31:0f:
         25:c2:14:ec:99:52:ad:90:cc:a9:e1:9f:d9:8e:f4:09:f5:96:
         a5:de:86:d8:e3:c9:c3:49:6f:a1:77:a2:77:41:c1:20:73:c8:
         e4:3e:3f:6f:b3:3b:cc:c3:d9:3d:75:90:18:1f:91:b6:73:ee:
         51:65:b2:bd:82:92:11:7b:64:59:d7:ee:ee:5a:ea:1e:ff:de:
         4c:c7:98:12:2a:b7:3f:f4:a5:d8:b0:99:28:74:a9:33:5c:22:
         34:d2:f8:4d:7c:f7:51:b5:a9:e9:da:68:f5:8b:d4:b3:28:bc:
         7b:61:8c:3b:9c:73:ea:cc:83:e9:d1:af:8f:64:37:53:a2:78:
         27:80:7f:5d:b1:4d:4a:d6:05:d0:de:a0:4b:bc:1e:f2:d6:2e:
         ab:09:97:04:c1:46:a9:e3:a4:5b:d2:ba:71:fc:6b:bd:01:06:
         32:c6:68:26:c4:b1:e9:bf:a3:23:c3:58:47:2e:2b:d8:0e:d3:
         a8:c0:ea:42:9e:87:20:a1:94:0e:4d:2e:cb:fb:05:8c:40:d3:
         bf:05:eb:eb:ac:4d:ab:8a:76:65:38:d8:ba:32:db:9d:cd:32:
         92:12:9c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 18:20:04 2024 by rpki-client on console-fra.rpki-client.org