Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3138362e3233322e34302e302f32312d3234203d3e20323633303537.roa
File:                     3138362e3233322e34302e302f32312d3234203d3e20323633303537.roa (raw, json)
Hash identifier:          mzk0Dt/KiWlBLajlpd4tCrlA5oa7nAS1UkkvhSjEsZc=
Subject key identifier:   C1:99:52:EA:B5:D9:3F:68:02:F3:C5:14:E2:0F:F0:6A:31:62:0F:99
Certificate issuer:       /CN=ECA1087C6025A55849F99EC2217AF0C526E2AD61
Certificate serial:       31D91A56D38D58D1151B510BBAFD71B3F624ECC0
Authority key identifier: EC:A1:08:7C:60:25:A5:58:49:F9:9E:C2:21:7A:F0:C5:26:E2:AD:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECA1087C6025A55849F99EC2217AF0C526E2AD61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3138362e3233322e34302e302f32312d3234203d3e20323633303537.roa
Signing time:             Thu 01 Jul 2021 19:53:35 +0000
ROA not before:           Thu 01 Jul 2021 19:48:35 +0000
ROA not after:            Thu 30 Jun 2022 19:53:35 +0000
asID:                     263057
IP address blocks:        186.232.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d9:1a:56:d3:8d:58:d1:15:1b:51:0b:ba:fd:71:b3:f6:24:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA1087C6025A55849F99EC2217AF0C526E2AD61
        Validity
            Not Before: Jul  1 19:48:35 2021 GMT
            Not After : Jun 30 19:53:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:83:2a:c2:fd:39:5c:09:5a:1d:8a:98:b8:
                    28:14:14:db:10:13:57:85:60:b9:ef:94:26:64:bc:
                    09:38:e3:11:4d:e6:a6:54:2b:01:55:a8:30:22:d0:
                    82:ec:82:99:0a:c7:5a:9a:6c:05:d5:23:8f:bc:cf:
                    6a:cf:5d:8f:2b:38:f2:e1:14:18:ed:71:81:66:e8:
                    2e:97:79:ec:57:8c:38:b8:0b:76:05:89:24:0f:b3:
                    35:0f:bd:77:27:1c:b9:ee:7e:23:dd:76:89:45:7f:
                    db:ed:fa:50:7f:1e:6a:42:85:c7:d2:b8:9b:40:84:
                    48:64:fd:17:3a:5b:a0:66:c8:ed:98:7d:98:1d:4c:
                    da:58:f1:4e:0f:11:88:07:40:72:2e:39:df:d5:04:
                    63:5c:46:f8:a1:83:6c:d2:f3:57:74:8b:03:a5:a8:
                    46:31:92:f0:8a:52:3a:5f:ea:58:10:11:15:05:16:
                    8d:a3:f2:f9:90:e9:02:23:ff:5f:fc:35:86:78:09:
                    b6:22:14:c6:7b:8e:33:88:ec:95:98:ee:25:32:c4:
                    18:bb:2f:04:d0:d6:42:f9:c0:81:9d:db:ac:85:c0:
                    3a:4b:68:8c:26:c0:8a:5d:a7:57:31:2b:75:cd:39:
                    0c:8e:92:45:b2:fd:72:71:d0:da:71:68:8f:8d:76:
                    fb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:99:52:EA:B5:D9:3F:68:02:F3:C5:14:E2:0F:F0:6A:31:62:0F:99
            X509v3 Authority Key Identifier:
                keyid:EC:A1:08:7C:60:25:A5:58:49:F9:9E:C2:21:7A:F0:C5:26:E2:AD:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/ECA1087C6025A55849F99EC2217AF0C526E2AD61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECA1087C6025A55849F99EC2217AF0C526E2AD61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3138362e3233322e34302e302f32312d3234203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:1b:83:fe:71:ff:fb:ed:94:59:c3:e0:d0:6a:c9:e1:7c:b2:
         f2:79:32:ab:03:49:e8:fe:08:84:0d:a2:ec:06:5d:71:ef:a9:
         96:09:80:ff:de:87:2d:7a:a7:8a:ec:54:b1:05:00:c3:f8:41:
         a5:75:86:10:fd:2b:13:b0:2b:b9:20:78:8c:bb:c5:c8:db:cf:
         f7:c3:d2:51:c9:6d:62:8d:9c:14:7e:1f:9d:cf:f4:76:c6:9f:
         4f:87:89:cb:b8:b5:73:36:95:3e:fd:7d:6c:e6:77:79:d8:9e:
         44:11:7b:70:e7:59:12:3c:14:44:4b:d0:2a:3a:72:e6:22:b5:
         52:07:81:92:07:db:eb:b0:96:33:67:a2:17:63:b7:01:fb:12:
         d5:81:28:03:c6:43:9b:37:00:53:01:07:f9:53:8b:99:87:12:
         1c:93:b7:24:7c:d0:ee:1e:49:da:71:13:e8:f2:70:f5:5c:83:
         94:c2:48:b6:4d:14:f5:59:51:c7:11:92:6c:8e:ec:36:35:f0:
         7a:a7:80:f5:f8:47:22:50:d4:f3:d6:43:f2:43:1a:21:3c:7c:
         a2:0d:bb:cf:0f:cd:a6:12:f6:e6:fc:de:c7:00:7b:1c:2b:71:
         61:9d:6b:a7:bd:df:75:ce:f9:b2:e3:35:f7:be:03:cd:84:63:
         0b:87:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org