Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/0/3138362e3230392e3136342e302f32322d3234203d3e20323731343330.roa
File:                     3138362e3230392e3136342e302f32322d3234203d3e20323731343330.roa (raw, json)
Hash identifier:          72TFEZFUq92gtUfX/01iJWuYQsLjMaGbAxCmR5vCvkU=
Subject key identifier:   A9:1C:9E:18:5D:39:56:40:03:1A:F2:75:38:90:96:1E:04:FD:BA:80
Certificate issuer:       /CN=9CB06154825E1486A23172E298744A3EA86F88E8
Certificate serial:       1E821E9D4D87CB1DE71831EFA206AD34B94D054A
Authority key identifier: 9C:B0:61:54:82:5E:14:86:A2:31:72:E2:98:74:4A:3E:A8:6F:88:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CB06154825E1486A23172E298744A3EA86F88E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/0/3138362e3230392e3136342e302f32322d3234203d3e20323731343330.roa
Signing time:             Mon 25 Mar 2024 19:11:50 +0000
ROA not before:           Mon 25 Mar 2024 19:06:50 +0000
ROA not after:            Mon 24 Mar 2025 19:11:50 +0000
asID:                     271430
IP address blocks:        186.209.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:82:1e:9d:4d:87:cb:1d:e7:18:31:ef:a2:06:ad:34:b9:4d:05:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB06154825E1486A23172E298744A3EA86F88E8
        Validity
            Not Before: Mar 25 19:06:50 2024 GMT
            Not After : Mar 24 19:11:50 2025 GMT
        Subject: CN=A91C9E185D395640031AF2753890961E04FDBA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1b:f5:4c:0b:8c:b9:bb:ce:6c:6b:68:83:b6:
                    8f:bc:ba:70:99:c1:02:a2:bc:94:27:db:ff:65:62:
                    ca:30:cf:08:83:ea:66:f6:18:51:e9:83:09:c1:79:
                    08:e3:c6:95:ca:2b:a3:3a:70:9a:f8:dc:0d:39:26:
                    6f:92:4f:03:27:1d:d8:54:8f:20:87:d7:8b:a8:bf:
                    f3:79:67:da:89:99:4c:38:e8:29:0f:91:af:13:83:
                    c8:5f:00:f4:e4:24:a7:04:50:59:8a:5b:20:91:15:
                    1c:50:da:c5:c6:41:ff:84:94:ec:97:3e:7c:f4:f9:
                    2d:15:c6:db:3e:fd:6a:ff:10:98:3a:7d:4e:eb:d3:
                    6e:36:ae:7d:21:15:2f:83:f7:83:25:cb:2a:a2:4b:
                    5a:2e:95:33:a7:41:8b:bf:87:8e:75:0b:ba:6e:17:
                    a2:50:07:4a:9d:f3:26:d9:e4:b9:ca:32:75:b6:15:
                    ca:8a:52:2d:7b:55:23:26:78:57:1b:b3:35:25:c6:
                    dc:2b:74:32:0f:ab:d2:a4:2e:44:68:2d:b6:f6:58:
                    8c:99:ff:1f:03:95:3b:71:a6:90:32:46:c7:6f:02:
                    94:0d:eb:cc:9a:90:d5:de:e5:60:94:46:2e:ff:6b:
                    11:00:f6:d0:48:c0:e2:f4:22:0f:d6:74:40:2d:a6:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1C:9E:18:5D:39:56:40:03:1A:F2:75:38:90:96:1E:04:FD:BA:80
            X509v3 Authority Key Identifier:
                keyid:9C:B0:61:54:82:5E:14:86:A2:31:72:E2:98:74:4A:3E:A8:6F:88:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/0/9CB06154825E1486A23172E298744A3EA86F88E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CB06154825E1486A23172E298744A3EA86F88E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/0/3138362e3230392e3136342e302f32322d3234203d3e20323731343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:46:d3:fb:d1:72:e1:99:81:cb:75:cf:e2:f0:48:23:ad:38:
         18:77:d7:6c:10:f1:79:b2:38:41:58:db:aa:4a:fc:73:f1:92:
         d7:f3:70:75:9b:79:3a:df:87:32:85:86:56:73:d1:42:70:f5:
         d3:bc:ec:82:95:73:48:33:a1:9f:1f:98:70:d0:3c:3e:83:c0:
         00:a0:6b:bd:81:dd:45:a0:8f:fd:2d:7d:6d:32:34:ba:b0:8b:
         12:28:28:a5:87:a6:91:65:77:7b:27:9f:b5:ed:12:0a:74:8d:
         9b:a4:3c:e9:df:ad:ff:0a:d4:9a:21:71:e1:8c:fe:ab:8d:b6:
         d8:a2:1f:75:01:ab:1b:fc:44:e1:a9:80:fd:1d:95:c5:35:43:
         fe:c1:86:ca:16:2c:c4:18:57:53:f6:24:5e:4f:70:fc:6e:ce:
         a4:f5:f1:62:64:c6:42:73:e3:18:a9:66:8b:4a:b4:7f:a1:8d:
         b0:8c:f4:5f:ba:8e:a6:86:51:15:9e:0a:59:b5:8a:81:3b:37:
         97:23:7c:a9:fc:bd:53:cb:eb:2d:84:6e:a2:c8:81:e9:f2:14:
         86:22:70:f3:ec:c1:5c:00:63:7c:3a:fe:91:83:d9:76:df:2f:
         e4:a8:be:60:e2:b0:d0:41:1d:f4:82:2a:94:26:ad:ba:10:2a:
         0d:d7:5f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org