Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e38392e302f32342d3234203d3e20323730393236.roa
File:                     3138362e32362e38392e302f32342d3234203d3e20323730393236.roa (raw, json)
Hash identifier:          Q/1JoYN24eHlDR6H6zY6L8m9cyOh1dBobJNdypp/eNM=
Subject key identifier:   EC:B2:59:9C:07:A8:02:3C:DC:EE:3A:E6:3D:78:9F:30:9F:8B:C1:E9
Certificate issuer:       /CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
Certificate serial:       049F7F83A36CB279301FD41CF7CB7F7D279472EF
Authority key identifier: 4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e38392e302f32342d3234203d3e20323730393236.roa
Signing time:             Sat 09 Mar 2024 21:53:17 +0000
ROA not before:           Sat 09 Mar 2024 21:48:17 +0000
ROA not after:            Sat 08 Mar 2025 21:53:17 +0000
asID:                     270926
IP address blocks:        186.26.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9f:7f:83:a3:6c:b2:79:30:1f:d4:1c:f7:cb:7f:7d:27:94:72:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
        Validity
            Not Before: Mar  9 21:48:17 2024 GMT
            Not After : Mar  8 21:53:17 2025 GMT
        Subject: CN=ECB2599C07A8023CDCEE3AE63D789F309F8BC1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b4:53:af:dd:f1:ab:6e:7a:e6:b7:71:ad:1a:
                    4d:ba:83:93:36:a4:1f:cc:4e:1e:93:39:81:d8:ea:
                    55:41:4c:5b:86:27:06:5c:9b:f4:8a:11:a2:9c:d6:
                    cd:84:61:33:2e:c0:cb:38:f1:9b:36:ec:bd:fe:09:
                    ee:45:f3:a7:b5:bf:c0:e9:05:f5:52:9a:69:2c:13:
                    32:66:fe:27:f5:f8:20:75:99:83:f8:4b:10:b2:30:
                    bf:03:38:ea:a1:11:61:3e:43:5d:a3:a3:82:2a:47:
                    35:81:35:9c:98:22:f8:82:64:2c:16:ce:7b:b0:87:
                    c6:c2:3d:f3:2e:c8:44:e5:3a:26:d4:3b:3f:ce:76:
                    7e:2a:c4:44:d4:0f:fb:b3:b7:56:c2:ad:84:f2:c3:
                    70:3a:1d:13:ea:fe:90:90:e8:3e:4e:e7:ef:9d:58:
                    51:35:c5:14:ef:ab:68:94:e8:6b:d2:f3:77:5f:63:
                    de:a9:ef:93:cb:da:70:8e:fa:9b:8a:93:e2:5a:f6:
                    48:36:4f:7e:0f:7f:03:5b:e1:e2:e2:95:78:70:0d:
                    99:49:13:25:39:79:6c:d6:e1:52:7f:71:e4:c5:c9:
                    f4:6d:8f:58:5c:4f:4e:c0:ed:7d:f7:d1:53:14:f6:
                    7c:ef:cf:75:1d:2c:c2:6e:45:9c:fe:18:f7:d1:a2:
                    cb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B2:59:9C:07:A8:02:3C:DC:EE:3A:E6:3D:78:9F:30:9F:8B:C1:E9
            X509v3 Authority Key Identifier:
                keyid:4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e38392e302f32342d3234203d3e20323730393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:fc:5a:6c:82:b5:04:c3:6f:aa:9e:51:2b:ab:f2:3b:6c:
         34:20:67:14:27:b6:ae:f6:75:18:8e:11:b4:63:87:22:a0:9f:
         23:57:63:7b:37:67:89:fb:54:5f:0e:c3:14:81:1c:fb:7c:2d:
         9d:10:23:37:3a:1a:75:58:39:47:83:86:28:31:e8:a1:58:2e:
         84:60:0b:bd:5c:21:13:76:78:4e:2b:e3:5f:e9:11:d2:19:87:
         11:a8:db:ce:8a:f0:cf:cd:1e:86:dc:06:cb:3e:a3:8a:8f:1b:
         bb:95:22:77:82:41:b9:8e:99:83:b5:14:f8:35:fc:d1:e2:cd:
         52:e1:b0:e3:34:98:b2:aa:8d:40:35:92:8c:c4:e6:25:3e:e5:
         19:80:58:a0:32:a2:17:35:92:2b:7d:5c:bf:5b:aa:02:a6:32:
         bb:48:76:09:bc:15:df:74:e2:6d:54:ae:bd:22:38:f9:f6:14:
         78:4b:e0:46:24:64:67:f5:0b:94:01:32:61:55:32:b7:cd:42:
         25:45:73:bd:09:49:85:fe:19:12:6b:82:34:1d:5b:3b:2d:55:
         bf:c5:a6:2b:ca:e6:3f:60:22:d9:29:81:42:7c:cc:a6:bf:d9:
         52:6a:d5:f4:6c:3c:2c:29:f7:32:61:87:a7:62:0c:a6:fb:d0:
         32:12:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org