Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3138362e3233332e3133322e302f32322d3234203d3e20323639353733.roa
File:                     3138362e3233332e3133322e302f32322d3234203d3e20323639353733.roa (raw, json)
Hash identifier:          Zv+ddV+qxXQtGs9YWxEY5Tcwhx9PASj4udWpNSrp5yw=
Subject key identifier:   F5:36:52:80:92:98:DF:AC:D2:D4:AB:3C:72:C4:5F:D5:B1:D9:2C:01
Certificate issuer:       /CN=29A3D0D0AC255182E4AEA9CA17963370CD63B2CE
Certificate serial:       481CF63FB8EC7E946A96EFE71D2373AB9712AC98
Authority key identifier: 29:A3:D0:D0:AC:25:51:82:E4:AE:A9:CA:17:96:33:70:CD:63:B2:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3138362e3233332e3133322e302f32322d3234203d3e20323639353733.roa
Signing time:             Wed 28 Aug 2024 11:33:46 +0000
ROA not before:           Wed 28 Aug 2024 11:28:46 +0000
ROA not after:            Wed 27 Aug 2025 11:33:46 +0000
asID:                     269573
IP address blocks:        186.233.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1c:f6:3f:b8:ec:7e:94:6a:96:ef:e7:1d:23:73:ab:97:12:ac:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A3D0D0AC255182E4AEA9CA17963370CD63B2CE
        Validity
            Not Before: Aug 28 11:28:46 2024 GMT
            Not After : Aug 27 11:33:46 2025 GMT
        Subject: CN=F53652809298DFACD2D4AB3C72C45FD5B1D92C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:8d:bc:61:4f:f5:fc:fe:30:da:38:c8:45:
                    c7:8b:b6:31:4d:b1:68:87:e5:0a:1b:88:c2:38:56:
                    fc:63:1b:b2:d3:22:f9:29:fa:54:5c:ea:f2:5d:59:
                    7b:25:eb:1e:6a:20:bd:ef:7c:60:79:51:8e:c9:44:
                    62:0f:34:5b:bd:9d:34:43:20:b2:09:a3:ab:e5:84:
                    5b:52:f7:c1:e5:f0:ef:8a:1d:c7:01:2b:a7:6a:3c:
                    d9:ca:14:b9:93:c1:72:26:7b:a2:02:43:43:f4:77:
                    21:61:55:50:0b:62:89:7e:39:3f:78:a0:57:95:9f:
                    58:29:77:2c:90:8e:3c:b3:7a:4f:70:25:31:30:bb:
                    c6:71:78:de:2b:f9:9f:d4:85:d9:a5:74:39:af:56:
                    b0:fc:93:88:1f:92:31:22:89:d2:8c:98:ec:0b:24:
                    55:33:61:a9:57:13:f6:ea:b3:1d:c6:bb:36:8e:c6:
                    02:4c:13:cd:72:68:74:ed:7d:64:e9:bf:ae:44:b7:
                    eb:c6:00:25:90:96:ff:eb:58:62:20:07:ea:66:95:
                    a7:c5:31:76:53:af:cf:b8:be:c9:5d:1c:74:30:3d:
                    82:50:f7:d4:ff:63:52:ab:ec:14:f6:ad:c0:e7:21:
                    0d:36:c5:fe:71:7a:a5:1a:f9:c7:f6:cc:24:a3:86:
                    59:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:36:52:80:92:98:DF:AC:D2:D4:AB:3C:72:C4:5F:D5:B1:D9:2C:01
            X509v3 Authority Key Identifier:
                keyid:29:A3:D0:D0:AC:25:51:82:E4:AE:A9:CA:17:96:33:70:CD:63:B2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3138362e3233332e3133322e302f32322d3234203d3e20323639353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:c6:1a:7e:51:ab:db:89:51:7e:a8:67:8f:0e:e3:d4:d6:89:
         ec:d9:c5:f3:25:e8:2b:58:d1:e7:00:46:3b:0e:0e:dc:ca:75:
         93:e8:8c:eb:b5:b4:12:c8:c7:1a:e4:d2:38:a7:67:b8:a0:c5:
         30:69:13:f2:6a:c8:9e:3d:0d:56:c9:d1:50:36:1e:f6:85:49:
         5b:7b:57:0a:42:b0:7b:6a:bc:58:95:34:e5:29:02:93:b6:6e:
         5d:f8:18:0e:c6:64:8c:5b:1a:b3:89:a4:11:48:77:1b:ca:36:
         f5:a5:89:19:36:64:1c:87:a5:8b:11:d6:21:0c:f5:d6:c2:3d:
         a2:2b:87:69:b7:ba:cc:e4:03:a4:3f:2d:56:c8:47:6a:cf:20:
         c8:c9:8b:6f:13:89:29:4f:2c:2b:9c:57:d6:ce:ca:4c:d8:c8:
         1a:ff:82:fb:68:86:01:e8:9b:79:c2:50:33:7c:7f:a3:f7:0b:
         ea:b5:35:79:3f:c2:d6:de:fc:4e:af:4b:1c:a2:99:f2:50:01:
         b9:62:01:e7:7e:b4:f0:23:2d:ca:25:37:45:7a:3b:94:96:ce:
         bb:67:7e:e1:b8:df:1c:49:3d:a9:24:01:66:71:d3:a4:1e:98:
         3c:0b:e6:6d:30:f9:e3:d6:07:35:56:ad:39:5b:51:bb:30:c5:
         0e:0d:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 16:05:29 2024 by rpki-client on console-fra.rpki-client.org