Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/1/3138362e3232372e3232382e302f32322d3232203d3e203533313937.roa
File:                     3138362e3232372e3232382e302f32322d3232203d3e203533313937.roa (raw, json)
Hash identifier:          tgFsvq3oSNQ97zt8qcPIzaRV2OZ4a/bQk27G3+jsamU=
Subject key identifier:   91:C6:7C:3A:F5:D6:44:AF:9F:9C:48:FC:65:83:4B:B9:E7:C0:ED:81
Certificate issuer:       /CN=260CD613FEE20BDD0AC6C7A4537BD63B7FA65E48
Certificate serial:       3FF14635940B1522E5C00C9E81D207155C9CC01E
Authority key identifier: 26:0C:D6:13:FE:E2:0B:DD:0A:C6:C7:A4:53:7B:D6:3B:7F:A6:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/260CD613FEE20BDD0AC6C7A4537BD63B7FA65E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/1/3138362e3232372e3232382e302f32322d3232203d3e203533313937.roa
Signing time:             Sat 12 Aug 2023 01:05:37 +0000
ROA not before:           Sat 12 Aug 2023 01:00:37 +0000
ROA not after:            Sat 10 Aug 2024 01:05:37 +0000
asID:                     53197
IP address blocks:        186.227.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f1:46:35:94:0b:15:22:e5:c0:0c:9e:81:d2:07:15:5c:9c:c0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260CD613FEE20BDD0AC6C7A4537BD63B7FA65E48
        Validity
            Not Before: Aug 12 01:00:37 2023 GMT
            Not After : Aug 10 01:05:37 2024 GMT
        Subject: CN=91C67C3AF5D644AF9F9C48FC65834BB9E7C0ED81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c7:20:db:fc:a4:13:7b:06:0b:67:1a:e2:41:
                    0a:cf:f9:97:38:08:f0:16:8d:4d:b1:ea:e2:38:7f:
                    96:46:af:d9:36:63:ff:67:64:2f:0e:6d:7c:98:a8:
                    00:5e:5e:65:93:46:09:3a:77:c1:08:99:d2:0c:1f:
                    ff:7b:aa:99:67:b8:c1:ad:0f:ce:53:18:4f:93:23:
                    28:ae:30:69:ed:c8:db:8e:19:e6:41:62:ca:42:58:
                    8d:40:2e:91:a6:7d:60:44:0b:f6:41:98:bf:b0:23:
                    4b:12:69:5e:b2:38:e3:36:13:51:15:95:7e:4d:99:
                    78:34:87:e0:64:ec:c8:fe:2f:30:b1:1a:c8:81:8e:
                    c7:dd:74:b2:d5:71:9f:44:5e:81:f3:c9:83:fb:fe:
                    e0:a2:53:67:74:74:92:85:00:82:34:65:39:0d:dc:
                    d9:fe:56:91:ec:c7:a9:7c:36:60:0a:37:71:1c:c2:
                    40:5f:ee:df:6b:16:c1:7c:27:4c:c5:93:0d:d1:43:
                    29:d9:77:ad:92:2d:0b:1b:46:87:9b:b5:40:c1:18:
                    24:a4:ac:19:1a:fb:53:59:32:39:f1:09:61:91:e1:
                    98:a2:a5:cf:13:b9:b8:5b:41:b9:69:02:78:34:18:
                    19:50:49:e0:93:77:9c:f7:76:14:af:00:91:3f:22:
                    45:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C6:7C:3A:F5:D6:44:AF:9F:9C:48:FC:65:83:4B:B9:E7:C0:ED:81
            X509v3 Authority Key Identifier:
                keyid:26:0C:D6:13:FE:E2:0B:DD:0A:C6:C7:A4:53:7B:D6:3B:7F:A6:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/1/260CD613FEE20BDD0AC6C7A4537BD63B7FA65E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/260CD613FEE20BDD0AC6C7A4537BD63B7FA65E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/1/3138362e3232372e3232382e302f32322d3232203d3e203533313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:c1:52:04:4c:41:15:20:45:44:65:96:43:93:e3:c7:e9:9a:
         45:13:b7:92:27:0e:48:ea:f9:ed:23:b3:47:fb:c9:90:b0:d4:
         30:6f:1e:4e:79:25:68:04:14:7c:e9:41:46:b4:03:36:b0:cf:
         f1:f5:49:7b:46:66:72:15:73:e7:e5:6c:24:a1:a4:47:01:3e:
         a7:16:37:33:0f:f9:57:6c:be:2a:95:98:97:9c:46:34:06:2c:
         b9:65:4e:cb:22:a6:c0:fa:96:0d:f6:5f:04:07:ee:fd:8c:6d:
         ef:a7:1f:f6:4a:32:e9:5a:eb:0a:2f:fe:f7:82:03:7a:7d:0c:
         23:62:d2:f8:7b:4a:72:aa:30:5a:03:17:94:e0:8f:e3:63:d6:
         5c:89:05:46:88:d9:91:f1:f6:b1:b4:31:49:db:ae:d6:56:65:
         1e:06:30:a7:f2:61:66:bf:bf:66:05:63:52:49:46:c3:4b:bb:
         1c:b8:b6:27:f4:b2:f7:f0:7a:51:dc:b0:66:13:de:c6:a8:51:
         33:9e:ec:58:24:32:55:2f:5e:02:79:43:10:a9:08:e7:53:18:
         56:d4:34:f7:3c:47:02:f2:9c:2a:0a:eb:76:ee:d2:6e:93:63:
         d9:d6:af:08:34:b4:34:0e:52:6a:ac:39:6d:88:92:64:1d:c9:
         22:48:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org