Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138362e3231362e31342e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31342e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          vafVl4WjiMQvMvD6qaKBmyPCcW2umW1LcIMB67zl0yI=
Subject key identifier:   D6:B2:4E:1F:56:AC:9E:19:6A:16:B8:5C:4E:58:7E:44:84:B6:61:18
Certificate issuer:       /CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
Certificate serial:       5994A5EE2ABE4109DBEFD2E78DA8143076B488DF
Authority key identifier: C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138362e3231362e31342e302f32342d3234203d3e20323632363633.roa
Signing time:             Sat 03 Feb 2024 16:51:06 +0000
ROA not before:           Sat 03 Feb 2024 16:46:06 +0000
ROA not after:            Sat 01 Feb 2025 16:51:06 +0000
asID:                     262663
IP address blocks:        186.216.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:94:a5:ee:2a:be:41:09:db:ef:d2:e7:8d:a8:14:30:76:b4:88:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
        Validity
            Not Before: Feb  3 16:46:06 2024 GMT
            Not After : Feb  1 16:51:06 2025 GMT
        Subject: CN=D6B24E1F56AC9E196A16B85C4E587E4484B66118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ee:18:d9:0e:bb:8e:e5:b1:5b:e7:76:b5:9a:
                    16:a1:17:8e:4d:94:b9:ff:fd:81:ab:79:ba:1b:90:
                    70:c7:30:c6:95:08:90:92:d6:27:89:26:8f:30:bd:
                    f4:82:c3:33:1d:99:b3:9d:41:65:31:9a:64:1b:d5:
                    7d:5c:36:a6:f5:5d:2f:2b:1f:79:97:70:50:b8:24:
                    83:87:a4:8c:62:f7:aa:61:02:a6:37:08:01:71:68:
                    9a:05:a9:0a:9a:3e:a0:1d:65:14:4d:62:3b:06:14:
                    ae:12:00:09:ef:78:15:e1:b5:36:c0:bd:9e:08:b0:
                    97:ea:f5:f6:e8:b6:53:80:4d:a3:71:ab:b8:8e:79:
                    93:83:ff:01:3d:f6:db:1d:e7:6d:bc:18:d8:37:bb:
                    98:0f:2e:c2:f4:28:d0:b2:99:ff:a0:ee:ca:b9:24:
                    1d:a7:0d:c3:cd:cd:26:34:e3:34:e1:4c:3e:54:5a:
                    07:77:29:e4:65:a0:6c:dc:fb:e4:f2:38:7c:35:db:
                    d2:88:1c:ed:2d:34:02:57:6f:ae:52:01:0d:29:cd:
                    e4:05:22:cd:73:de:68:12:b4:34:fe:aa:55:3e:42:
                    8c:9c:a1:b1:f3:fc:a4:50:26:2b:86:80:d6:7d:0a:
                    d5:d5:d8:a7:3f:b2:24:88:7c:60:5d:62:6b:c6:50:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B2:4E:1F:56:AC:9E:19:6A:16:B8:5C:4E:58:7E:44:84:B6:61:18
            X509v3 Authority Key Identifier:
                keyid:C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138362e3231362e31342e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:cd:6a:8d:46:4c:9c:de:ec:37:24:c1:e4:91:4d:5a:a5:29:
         99:da:0a:c1:0a:02:25:e0:b0:4c:5e:82:c0:6f:5d:8b:1f:3b:
         4e:ea:f0:b6:db:ce:98:53:68:69:66:04:9c:ca:2e:be:91:c9:
         53:c0:28:bb:6f:70:2d:b5:73:96:73:b8:56:e8:09:7a:65:ed:
         83:dc:98:96:23:e1:9e:aa:6c:32:a5:61:d8:fb:63:2a:df:04:
         b0:0f:4b:16:9e:d3:e3:85:38:52:2f:b3:c6:73:7c:4a:cc:3b:
         0d:9c:41:93:73:45:01:37:da:20:9e:f1:ad:43:60:1e:ff:10:
         4e:aa:22:82:25:22:a5:66:73:b7:6d:77:da:d8:df:40:49:90:
         2a:97:54:1e:e8:d4:f7:80:67:72:fc:85:82:af:63:cb:e7:fe:
         f9:5d:fc:f7:9e:c4:04:48:df:42:c5:05:66:7e:d9:26:87:6b:
         7e:bc:f5:2d:1b:a0:d2:1e:f8:d7:93:c5:19:8b:b2:fe:5e:b6:
         3f:55:69:2e:86:33:82:23:3d:1e:a9:3b:4f:67:0f:31:26:0c:
         b6:1c:78:4f:11:28:06:5a:2d:a4:11:80:7a:89:78:c4:c1:7e:
         b9:32:3c:16:c6:49:84:0c:e0:e3:fd:87:a9:d4:9a:29:d8:ec:
         c5:2d:6c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org