Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138362e3139342e3232342e302f32302d3234203d3e203533313433.roa
File:                     3138362e3139342e3232342e302f32302d3234203d3e203533313433.roa (raw, json)
Hash identifier:          VYt1BOmE4VDiLGzL9BJUYneyggHMLgFPWTE+MVUzQVw=
Subject key identifier:   0E:7D:6F:A7:07:E8:91:20:4E:00:C7:8F:25:57:4E:8A:C9:0B:6B:59
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       7FB9D5BF6883ED5DAF349C4E5BE5CA630947BB0A
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138362e3139342e3232342e302f32302d3234203d3e203533313433.roa
Signing time:             Sat 20 Jan 2024 18:48:55 +0000
ROA not before:           Sat 20 Jan 2024 18:43:55 +0000
ROA not after:            Sat 18 Jan 2025 18:48:55 +0000
asID:                     53143
IP address blocks:        186.194.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b9:d5:bf:68:83:ed:5d:af:34:9c:4e:5b:e5:ca:63:09:47:bb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:43:55 2024 GMT
            Not After : Jan 18 18:48:55 2025 GMT
        Subject: CN=0E7D6FA707E891204E00C78F25574E8AC90B6B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ca:4d:c0:e6:e4:43:14:9a:40:d5:d5:80:f3:
                    16:f3:15:1c:6d:6a:b7:f6:27:40:bc:8f:66:d7:93:
                    8a:42:3d:1f:cf:7b:dd:2e:54:72:80:0e:ca:87:19:
                    5f:c9:b3:c0:5b:ca:25:71:bb:d7:46:42:51:fb:f3:
                    94:7d:b3:bc:fd:ef:ae:dc:ea:e8:c0:d4:2e:fb:d5:
                    cf:98:ef:78:cf:34:3b:f0:e8:87:21:b0:fa:71:b7:
                    bc:62:71:01:5d:16:e1:82:48:a4:ba:6e:d7:48:7f:
                    ea:d5:73:07:45:1f:fa:dd:57:e6:29:d7:c9:06:a0:
                    14:16:aa:b0:b8:a4:6a:22:d1:df:03:63:8f:64:6f:
                    b4:e1:ee:0b:7b:fd:70:cd:03:87:9f:1c:54:cd:d8:
                    0d:9c:b3:ed:0e:81:6d:73:ae:f5:7a:96:aa:20:41:
                    f8:f8:4b:50:f7:3a:53:32:bb:14:9c:4e:3c:8a:73:
                    bd:69:f0:b1:6a:3c:98:89:03:24:f7:50:87:12:b8:
                    71:15:f2:03:4e:22:ef:4b:09:ee:1e:c6:ad:93:b4:
                    63:dd:69:2f:ff:b8:11:b0:77:e3:72:4a:ac:e9:78:
                    99:34:cf:24:6e:d4:97:b2:d1:9c:1b:fc:e0:1b:b9:
                    59:6d:72:2e:a9:02:b5:63:35:2f:0d:0a:23:ec:ac:
                    09:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7D:6F:A7:07:E8:91:20:4E:00:C7:8F:25:57:4E:8A:C9:0B:6B:59
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138362e3139342e3232342e302f32302d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:84:b8:85:f2:54:ce:ed:91:5a:2a:63:ec:74:2e:5c:bc:10:
         cf:b9:f6:9f:02:24:3c:40:3f:5d:f9:9e:16:e4:9f:c2:a4:49:
         c4:fd:e2:b4:98:11:3f:a6:ed:7b:95:26:e1:d7:1f:8a:e9:26:
         e2:36:f4:5c:30:93:0e:8b:fd:47:de:0b:12:66:a1:a0:69:53:
         9f:44:90:06:89:b6:8e:b9:14:46:59:26:c5:8c:94:5b:36:e5:
         d4:71:37:70:c8:b6:4d:7a:44:54:20:cf:21:5e:85:23:fd:4c:
         eb:95:a4:5e:4f:59:e1:12:6e:8b:c6:d9:70:fd:0f:ff:aa:e9:
         92:d7:d3:27:33:c3:5a:b1:56:0f:69:8f:a7:34:30:1b:95:42:
         20:78:76:d8:20:53:10:5b:82:3f:85:73:49:a3:cb:c3:fb:94:
         cc:48:57:41:b4:34:b1:a0:85:cb:c1:3a:36:96:ea:a6:73:56:
         eb:f0:7e:9b:b1:33:9f:79:4f:26:a1:8e:b2:35:3c:27:9a:b2:
         1a:22:70:1b:51:ff:00:27:c9:3e:e9:92:32:b7:77:89:69:39:
         70:68:bb:75:d3:e5:c4:a8:cc:4b:93:f0:1b:c2:d1:17:a4:75:
         3d:b9:3e:9e:6d:30:cb:9a:1c:7a:76:fb:1d:1c:fd:d2:90:29:
         38:c2:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org