Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e392e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e392e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          OeRrDbEzb8qbP597nDzkrUcdclbiLwzwZuYUlrL3Bfc=
Subject key identifier:   0D:E9:84:8F:78:00:24:FB:70:63:42:75:32:D1:D4:C7:43:CA:9D:E3
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       208E425BBB6810BC1B15D8E5E2FCFAE1503F69B7
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e392e302f32342d3234203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:49 +0000
ROA not before:           Wed 03 Apr 2024 18:25:49 +0000
ROA not after:            Wed 02 Apr 2025 18:30:49 +0000
asID:                     262713
IP address blocks:        186.208.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8e:42:5b:bb:68:10:bc:1b:15:d8:e5:e2:fc:fa:e1:50:3f:69:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:49 2024 GMT
            Not After : Apr  2 18:30:49 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:03:dd:40:26:c8:b1:ea:64:6d:95:72:88:
                    2e:d0:37:ff:00:98:26:2d:8b:52:25:85:61:e3:07:
                    27:e2:e7:ee:7d:67:ed:b2:ff:63:04:75:6d:b4:24:
                    25:3a:1c:14:9d:70:b6:cf:ac:12:06:f3:a8:33:dc:
                    9c:b7:42:5d:a9:ce:82:d4:b3:e6:f7:db:ae:06:65:
                    c8:23:da:cb:98:0f:ae:e9:e0:f5:c5:4c:71:1f:4a:
                    18:43:c5:55:e1:fc:20:1f:4d:b3:5a:f0:50:9c:f4:
                    b4:22:3e:eb:6e:04:56:09:f0:dc:21:a0:f7:27:8a:
                    c2:13:27:9a:b2:7d:34:87:54:09:a8:16:cd:23:2a:
                    4a:fc:e7:f1:ef:9f:15:02:f2:7a:a8:0c:9a:a2:59:
                    09:35:e1:d4:1b:33:01:f6:a4:f4:65:3d:8e:cb:ae:
                    27:5b:63:75:cc:e2:39:ee:59:77:b3:55:70:63:69:
                    8d:6c:87:cb:0e:12:69:e9:6d:3f:67:ff:df:c2:49:
                    e3:4b:3c:b9:94:17:fc:69:f6:8b:66:d4:49:14:ad:
                    5a:e8:6a:79:33:96:36:26:68:bd:d6:63:02:75:68:
                    92:a7:51:d4:fd:45:58:41:e5:97:62:41:cb:aa:6b:
                    21:bb:5d:1d:48:bb:06:f8:af:97:0d:1e:6f:77:69:
                    1b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E9:84:8F:78:00:24:FB:70:63:42:75:32:D1:D4:C7:43:CA:9D:E3
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e392e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:57:0f:33:ba:0b:7d:7b:80:04:6f:0d:75:84:0c:3e:d1:44:
         cf:4c:a9:45:0a:12:37:af:af:de:ee:86:57:fe:7b:8c:51:bf:
         98:3e:6d:9c:ce:0e:b8:a4:87:df:af:88:a4:d9:d0:07:f9:ff:
         c2:a5:7d:84:0b:02:70:43:66:8d:ea:74:aa:91:14:df:4d:f8:
         6f:6d:90:a3:d7:c8:6e:75:a6:2f:ca:6b:6f:9d:70:39:f8:b1:
         84:62:e0:4a:9f:07:23:47:ef:83:a6:53:18:64:26:ee:a5:4c:
         4f:2a:89:7b:d4:86:90:b8:6f:45:cb:19:32:26:fc:d7:b8:8f:
         7d:ae:f6:53:d3:8d:b6:37:77:4f:b9:a4:54:fc:15:a0:cf:ec:
         4c:2e:7d:b2:4e:51:17:34:cc:9f:b9:24:3a:2a:2f:7d:c7:5c:
         1b:9c:e5:66:08:ef:e4:ca:37:19:20:fd:e1:85:76:a3:77:3e:
         43:b1:bf:c9:98:c6:38:7a:fe:f4:2e:7e:36:9c:15:ad:6a:7e:
         f6:53:59:33:5e:49:8c:df:0c:31:e8:a2:5c:5f:65:59:72:6c:
         cf:6e:bd:40:85:d4:a5:6f:ea:f9:5c:de:76:48:c8:59:78:37:
         b8:16:2e:15:0e:b3:e8:41:50:71:5c:8c:e5:c9:3f:8d:8f:d9:
         18:5e:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:33 2024 by rpki-client on console-ams.rpki-client.org