Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa
File:                     3138362e3139342e36342e302f32302d3234203d3e203238333334.roa (raw, json)
Hash identifier:          ihXl8orn4diSohu9JQJH7Vu4DMLXJ0kQ+Kfd+NtG+iI=
Subject key identifier:   53:12:3E:1C:0D:8C:F8:49:27:73:A9:A4:22:72:C8:93:AD:B3:49:9A
Certificate issuer:       /CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
Certificate serial:       604831209F2DFF89E12E31D62068763D443135D8
Authority key identifier: C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa
Signing time:             Tue 30 Jan 2024 20:00:00 +0000
ROA not before:           Tue 30 Jan 2024 19:55:00 +0000
ROA not after:            Tue 28 Jan 2025 20:00:00 +0000
asID:                     28334
IP address blocks:        186.194.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:48:31:20:9f:2d:ff:89:e1:2e:31:d6:20:68:76:3d:44:31:35:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
        Validity
            Not Before: Jan 30 19:55:00 2024 GMT
            Not After : Jan 28 20:00:00 2025 GMT
        Subject: CN=53123E1C0D8CF8492773A9A42272C893ADB3499A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:6f:da:10:62:84:4d:84:b6:f2:01:63:4b:
                    64:d5:8d:13:6d:83:25:0b:59:fc:15:5e:f4:9d:30:
                    28:6f:3b:37:3a:e7:ce:c2:f0:b7:a6:b6:d9:72:3a:
                    91:71:df:d6:d1:2e:0f:28:ff:2d:32:8c:f8:94:6c:
                    2b:7a:17:37:bb:fb:ea:9d:fb:6e:91:81:a9:57:b6:
                    33:d6:a8:75:60:71:d3:12:bc:61:f9:50:8f:ea:a7:
                    73:d3:2a:a4:6e:de:6a:1e:dd:39:1a:fc:d9:8d:53:
                    ff:2a:52:4e:ae:13:0c:47:8c:97:33:35:90:b6:73:
                    73:97:4e:f4:74:04:55:35:66:e9:ec:dd:65:e9:b6:
                    db:f6:d1:b9:45:fd:56:20:be:ae:29:37:08:59:5b:
                    6d:1d:61:74:66:fd:fa:0f:eb:c8:4c:da:13:2b:92:
                    f3:1d:40:66:6b:9a:4b:e7:d9:c9:7d:bf:62:df:c3:
                    e9:51:d3:a6:03:d9:9d:a6:d3:4f:52:39:f6:af:eb:
                    ad:21:0f:28:af:49:08:9d:9d:72:fe:70:71:02:eb:
                    83:f8:81:a2:e9:98:37:0b:9f:53:47:a0:05:ab:61:
                    d6:db:35:90:f9:cb:73:30:8e:07:b9:1a:f6:0c:48:
                    80:b2:68:c2:62:ad:ec:07:1d:7b:6c:7f:6a:f2:af:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:12:3E:1C:0D:8C:F8:49:27:73:A9:A4:22:72:C8:93:AD:B3:49:9A
            X509v3 Authority Key Identifier:
                keyid:C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:09:b7:81:7e:3a:77:64:9d:02:96:02:a9:c6:5a:92:a8:62:
         e4:e6:24:65:1f:44:20:60:37:72:4c:46:0e:af:bd:79:1c:f2:
         44:97:fc:44:94:c1:b2:ad:b8:e0:4a:33:a4:e2:92:38:21:8e:
         ae:96:dd:fd:d5:e9:4d:13:78:c2:eb:c8:f2:66:de:6a:f5:42:
         c7:94:04:69:c3:36:f0:c6:49:f7:4b:08:81:08:06:80:41:16:
         31:3d:9d:29:82:83:c8:66:78:40:6a:15:0d:52:47:d6:da:d5:
         ff:90:09:42:9f:2b:ef:ba:d8:49:0e:42:e6:0a:1d:e0:3d:fd:
         63:53:3d:91:ae:a1:fc:e4:fe:0a:c5:78:9c:0b:f3:38:69:ec:
         80:21:fe:b5:5d:dd:7f:dc:fd:a6:f0:2f:94:2c:71:7f:77:b4:
         3f:3c:7a:61:b8:23:3e:45:d7:ec:35:d6:01:88:32:5d:e0:dc:
         f8:12:fe:da:ba:c9:4c:41:2a:c5:a3:e0:b9:24:f2:65:5f:da:
         71:80:68:40:dc:36:c7:05:69:47:fb:10:9d:96:62:8b:a7:6d:
         a8:c7:15:1b:71:d2:50:3d:35:df:a6:77:60:49:d8:71:91:db:
         a7:fa:c8:f8:2c:d6:4a:1a:fc:56:62:8d:60:a6:77:e4:bb:f1:
         91:d3:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org