Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3138362e3235302e3230382e302f32312d3234203d3e20323632383139.roa
File:                     3138362e3235302e3230382e302f32312d3234203d3e20323632383139.roa (raw, json)
Hash identifier:          PdMCwXQ+tTphwE18h7I8cSTF1S2/1ud8jWG9vWOo1EE=
Subject key identifier:   A7:3F:15:3E:21:56:92:BD:C6:DF:45:3A:96:34:70:D9:4E:20:AB:DD
Certificate issuer:       /CN=DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D
Certificate serial:       62338949D3C1784B07C4B8E5739AF0311B723CC9
Authority key identifier: DF:5D:91:96:94:7A:22:D5:30:6A:EC:A8:BF:48:DC:C6:C7:B5:4C:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3138362e3235302e3230382e302f32312d3234203d3e20323632383139.roa
Signing time:             Thu 06 Jul 2023 14:42:03 +0000
ROA not before:           Thu 06 Jul 2023 14:37:03 +0000
ROA not after:            Thu 04 Jul 2024 14:42:03 +0000
asID:                     262819
IP address blocks:        186.250.208.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:33:89:49:d3:c1:78:4b:07:c4:b8:e5:73:9a:f0:31:1b:72:3c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D
        Validity
            Not Before: Jul  6 14:37:03 2023 GMT
            Not After : Jul  4 14:42:03 2024 GMT
        Subject: CN=A73F153E215692BDC6DF453A963470D94E20ABDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:c8:50:d3:de:00:66:fe:b8:b4:34:24:5e:
                    6c:58:f0:00:26:9a:56:e8:6a:9d:d0:48:cf:69:d5:
                    03:9e:86:c1:f3:f3:a9:f1:c0:4d:d5:ef:65:76:58:
                    e5:30:7f:89:a5:e1:76:39:14:8b:fd:a0:1e:76:8b:
                    bb:91:be:7e:00:44:e4:5d:bd:6f:80:65:a5:47:aa:
                    bd:cf:32:6a:c7:0d:bf:a5:14:48:0b:58:ff:9a:0d:
                    5a:6c:d6:34:10:49:d7:fa:95:ac:4a:cc:bc:40:b5:
                    82:75:cd:dc:2d:c3:d4:c9:11:86:a6:5b:3b:89:de:
                    82:62:56:e6:bd:cc:40:71:6a:c4:89:94:57:46:4b:
                    a7:75:04:1c:2d:6c:b8:b5:06:88:82:02:ca:6d:54:
                    81:e5:89:dd:e4:cb:e0:6c:57:86:a2:c4:8e:37:2d:
                    7a:d5:bd:f1:c1:25:a7:0f:2e:84:59:bc:73:0c:7d:
                    d2:39:d5:c5:f5:ae:92:3a:01:81:6e:75:1f:c1:5c:
                    f8:91:2d:44:c6:e7:0d:75:6a:20:81:7e:3d:c1:95:
                    a8:87:65:1b:1f:ba:b2:39:f0:b7:48:8a:46:c3:45:
                    79:2e:e0:18:3b:14:03:34:94:71:d5:82:a5:d8:64:
                    82:4b:25:bf:02:68:00:9a:46:a4:d7:d9:fe:4e:be:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3F:15:3E:21:56:92:BD:C6:DF:45:3A:96:34:70:D9:4E:20:AB:DD
            X509v3 Authority Key Identifier:
                keyid:DF:5D:91:96:94:7A:22:D5:30:6A:EC:A8:BF:48:DC:C6:C7:B5:4C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3138362e3235302e3230382e302f32312d3234203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:b8:64:51:8a:1c:13:d6:44:42:e6:f9:27:42:3e:f2:34:4f:
         93:5b:e9:b9:8f:df:23:16:54:77:5b:f5:b5:18:04:5a:04:47:
         9a:c9:ca:3c:4f:d3:2d:d8:a4:be:6d:d5:8e:8f:37:22:28:15:
         aa:e5:52:68:7d:92:d3:f4:52:f1:67:e6:0e:36:86:3e:30:67:
         31:0b:f5:06:60:79:bd:2f:ad:8e:cf:30:12:6d:e7:11:41:25:
         8c:3f:b9:4b:65:13:30:0d:98:a2:fc:d0:d9:2d:fa:b8:c6:1d:
         27:3e:00:ae:3e:19:07:85:09:e8:6d:4a:73:bd:2a:22:b2:79:
         9e:f1:00:3e:a9:3f:1f:34:0a:6e:ce:7b:0b:6f:44:84:9e:f5:
         c1:7f:57:37:fd:e4:dd:47:98:d1:55:36:74:2f:6e:44:c2:82:
         04:f9:5c:be:c1:09:ff:51:3f:5a:67:29:8a:9f:c8:0f:c7:c9:
         f9:20:66:a9:7f:f8:54:27:bd:dd:41:40:46:7a:b1:75:d0:e7:
         24:cd:b7:49:36:3d:1e:23:35:5d:6e:f3:5b:72:89:fa:a7:2c:
         6a:66:e1:2e:43:5a:8d:ca:58:0c:a9:0c:0b:08:5d:be:41:18:
         0e:d9:5d:37:5f:e9:bb:3a:bb:f8:fb:f2:2c:2e:25:0b:b3:1c:
         4e:10:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org