Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3230382e302f32342d3234203d3e20323633313031.roa
File:                     3138362e3232352e3230382e302f32342d3234203d3e20323633313031.roa (raw, json)
Hash identifier:          V3xHM4oZSmmoBiG5HahZ8OHy3whj1RegFaziZVT3aD4=
Subject key identifier:   66:E0:06:7D:F8:2C:73:B4:DF:75:3A:D9:F9:5F:90:91:D6:F1:9A:DE
Certificate issuer:       /CN=895319749718933407E89602C41B7343E53F19D4
Certificate serial:       5A2DFF3A939D760F9E24793368426947A4966CC3
Authority key identifier: 89:53:19:74:97:18:93:34:07:E8:96:02:C4:1B:73:43:E5:3F:19:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895319749718933407E89602C41B7343E53F19D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3230382e302f32342d3234203d3e20323633313031.roa
Signing time:             Wed 17 May 2023 14:25:50 +0000
ROA not before:           Wed 17 May 2023 14:20:50 +0000
ROA not after:            Wed 15 May 2024 14:25:50 +0000
asID:                     263101
IP address blocks:        186.225.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2d:ff:3a:93:9d:76:0f:9e:24:79:33:68:42:69:47:a4:96:6c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895319749718933407E89602C41B7343E53F19D4
        Validity
            Not Before: May 17 14:20:50 2023 GMT
            Not After : May 15 14:25:50 2024 GMT
        Subject: CN=66E0067DF82C73B4DF753AD9F95F9091D6F19ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:fd:86:cd:60:6b:5e:63:0b:b5:92:2b:04:
                    87:73:10:22:e3:a3:b3:e4:02:1d:16:b7:9c:e4:74:
                    bf:a6:ee:01:8e:9c:45:c7:02:3c:68:36:a0:d7:b1:
                    76:ce:78:cc:3a:ee:4b:c7:5d:1a:76:f6:41:18:5f:
                    67:cc:03:12:a5:9a:d9:06:e9:04:ce:88:3d:9e:b5:
                    4c:59:01:49:ac:b5:69:1e:65:3d:ce:02:15:91:1a:
                    38:2d:4e:14:82:fc:04:f4:b9:7a:1a:c3:f2:87:b2:
                    48:3f:b4:fb:9e:2c:76:fa:a5:e7:4e:d2:9c:be:e1:
                    4f:74:09:f8:78:84:2b:c6:6b:e0:8c:4d:64:7e:1f:
                    24:57:5f:53:8b:b9:cf:13:9f:0e:83:ca:d6:b5:2c:
                    89:fe:73:d8:a6:2a:0d:ae:af:27:1c:d3:7a:b3:6d:
                    ef:17:82:91:d9:49:c0:84:98:43:ee:7c:1c:84:d1:
                    f8:33:5e:18:f9:7d:95:84:29:2e:06:e2:7d:13:db:
                    71:ea:3c:be:3d:80:93:75:6b:0d:69:5a:ac:15:3b:
                    4f:b2:ef:d9:81:70:e8:4e:01:56:c3:29:cc:c0:f6:
                    90:06:aa:9b:50:75:dc:28:99:7d:0c:7f:d1:56:c4:
                    bd:b6:9b:7e:be:cc:a0:f6:37:6a:da:64:61:9c:d2:
                    04:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E0:06:7D:F8:2C:73:B4:DF:75:3A:D9:F9:5F:90:91:D6:F1:9A:DE
            X509v3 Authority Key Identifier:
                keyid:89:53:19:74:97:18:93:34:07:E8:96:02:C4:1B:73:43:E5:3F:19:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/895319749718933407E89602C41B7343E53F19D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895319749718933407E89602C41B7343E53F19D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3230382e302f32342d3234203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:fe:2b:0f:ad:54:ac:cc:9e:27:2a:0a:55:1c:5c:b9:0e:c9:
         89:cc:85:dd:ad:48:eb:8b:66:6b:de:6a:2c:01:cb:ec:06:6a:
         9c:5e:26:9e:97:3b:4c:28:c6:b5:50:11:3b:6c:65:af:fc:70:
         00:f7:01:f9:7e:28:98:0e:2c:9f:a2:40:22:7e:88:a0:e1:2a:
         91:c4:d8:3a:cc:64:ad:2a:c8:0f:91:8a:86:33:0c:02:57:21:
         bd:8a:1f:16:82:e7:29:2c:d1:8d:47:1a:b5:75:40:87:28:c4:
         fd:ea:bf:32:6d:06:11:16:ca:07:49:eb:7d:2f:27:2b:9d:fb:
         4a:d6:d7:4a:30:79:44:d6:46:01:e9:d1:e1:d1:95:a0:54:ab:
         44:d7:87:82:2b:1c:97:f1:2e:d5:fd:ff:e9:27:f6:a4:8e:fa:
         54:26:22:d4:79:80:8c:a9:b6:94:7a:79:c1:b5:91:c3:ff:f8:
         38:50:65:bc:72:ab:86:17:b6:fa:c4:f5:de:38:95:1a:2b:6e:
         2e:32:94:39:70:fa:03:75:29:7a:c9:1b:ec:fe:cc:41:6f:0d:
         36:7c:f1:a0:8b:a4:84:93:cb:69:df:7d:eb:48:57:9d:cf:f7:
         71:a3:13:f8:09:e9:99:c0:e8:43:95:df:ed:b7:f9:00:3a:d8:
         c1:0f:77:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org