Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa
File:                     3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa (raw, json)
Hash identifier:          Nl6GXvs6W4NFNlgXERfK/8/GhDfmOIfziWoYcwJlMp4=
Subject key identifier:   D4:AD:47:6A:2E:4C:E2:51:AB:A2:26:91:34:DB:E7:5F:00:93:89:A3
Certificate issuer:       /CN=04124B6068EE1E77306A1BA87F1F25EA7A596E2D
Certificate serial:       0FF5E108644D1E49F4E1FFF1FC2836A6F236BD86
Authority key identifier: 04:12:4B:60:68:EE:1E:77:30:6A:1B:A8:7F:1F:25:EA:7A:59:6E:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa
Signing time:             Fri 02 Jun 2023 18:09:37 +0000
ROA not before:           Fri 02 Jun 2023 18:04:37 +0000
ROA not after:            Fri 31 May 2024 18:09:37 +0000
asID:                     263285
IP address blocks:        186.235.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f5:e1:08:64:4d:1e:49:f4:e1:ff:f1:fc:28:36:a6:f2:36:bd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04124B6068EE1E77306A1BA87F1F25EA7A596E2D
        Validity
            Not Before: Jun  2 18:04:37 2023 GMT
            Not After : May 31 18:09:37 2024 GMT
        Subject: CN=D4AD476A2E4CE251ABA2269134DBE75F009389A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bf:3c:8d:51:cb:6a:c2:64:db:37:4f:29:b5:
                    97:29:a8:02:c6:e2:ae:7e:40:2d:f8:4e:21:84:ef:
                    a6:84:4b:70:c4:a7:b8:1a:42:19:4f:00:39:fa:8d:
                    44:5f:b5:c5:90:8c:78:9c:ed:af:4e:f8:ab:8b:b9:
                    d7:6d:9b:90:c3:9f:4b:ac:b4:ad:1e:26:54:c9:86:
                    1e:7d:f4:c0:03:b2:74:56:cf:e7:1f:59:5e:7f:69:
                    de:6e:c3:4c:a4:d4:2d:ab:a7:e0:62:c4:c2:2e:b3:
                    42:55:f8:81:2f:30:ca:96:e2:75:c8:33:b7:ab:da:
                    94:f8:09:a7:8b:f3:99:31:63:28:47:e5:06:3e:a0:
                    af:a3:0d:e4:fc:c8:9e:20:7c:76:7f:d0:b0:d3:98:
                    2c:aa:f4:bb:bc:8f:a6:e3:95:cb:2c:49:8f:9c:b6:
                    bd:d2:8e:f7:52:a5:87:b1:1b:a3:38:31:f3:28:ed:
                    3c:90:6d:69:b2:71:49:35:22:b2:86:fc:09:ba:99:
                    be:61:65:b7:48:75:88:ab:ef:7d:a9:37:4b:7b:4c:
                    cb:42:cc:cc:78:5d:dc:32:93:1b:81:5e:e0:ad:d6:
                    cf:ab:9b:1e:bc:9f:0e:64:ba:b4:67:09:80:9c:36:
                    84:2e:79:e0:7d:15:a2:d7:3a:6a:f5:fc:ea:41:3e:
                    12:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AD:47:6A:2E:4C:E2:51:AB:A2:26:91:34:DB:E7:5F:00:93:89:A3
            X509v3 Authority Key Identifier:
                keyid:04:12:4B:60:68:EE:1E:77:30:6A:1B:A8:7F:1F:25:EA:7A:59:6E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:37:0d:e7:cf:42:2a:b0:e8:b3:aa:3f:44:5d:1e:d4:d2:c7:
         a7:54:60:7d:b7:90:66:34:71:5b:f6:0b:07:4d:2c:f3:09:b9:
         dd:ad:96:b8:ae:6f:89:fb:9f:18:2e:8b:f8:5d:b2:a6:42:4c:
         19:be:85:f0:69:0e:bb:b6:19:4a:4f:ab:1a:c1:1a:92:33:13:
         3a:b6:9f:26:8a:82:d1:b7:92:63:ed:ec:f1:64:92:87:3f:df:
         93:df:6b:ec:45:7a:11:0c:a3:a6:f4:58:63:28:60:43:f1:c5:
         9c:a1:be:29:42:6a:08:ea:27:16:77:6b:1e:bc:4e:79:4b:28:
         16:84:83:b9:5c:a0:f3:28:da:2a:53:ba:60:0d:8e:fc:ed:fc:
         01:00:ad:96:a5:fe:84:e0:f8:ce:72:56:dd:17:b5:cf:7e:c1:
         11:79:84:eb:17:aa:b8:14:eb:81:d0:87:84:2b:a5:d7:a5:9d:
         8f:41:f1:43:a8:12:df:35:22:cd:a7:1b:bf:74:9a:8c:70:f3:
         be:2b:5a:30:89:6b:fd:82:9b:9f:1a:4c:93:98:fd:4b:96:15:
         29:a2:36:0d:0a:5f:57:f2:a9:e0:ae:9a:0d:be:56:12:a1:d5:
         79:ae:7b:cb:78:d1:83:7a:82:64:98:04:18:29:29:cf:a9:64:
         35:c9:f2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org