Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138362e3231362e32302e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e32302e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          Z5o6cGjQMKSumlZAcghF/bEYo16V8MEhkFWuzvPOF+4=
Subject key identifier:   17:C5:18:64:E9:71:9A:DF:2E:22:36:46:51:55:46:CF:6B:FE:07:24
Certificate issuer:       /CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
Certificate serial:       12DCBA267EF5AD081DD92497DF4EFDDF2FA2991E
Authority key identifier: C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138362e3231362e32302e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 14 Mar 2024 00:09:03 +0000
ROA not before:           Thu 14 Mar 2024 00:04:03 +0000
ROA not after:            Thu 13 Mar 2025 00:09:03 +0000
asID:                     262663
IP address blocks:        186.216.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:dc:ba:26:7e:f5:ad:08:1d:d9:24:97:df:4e:fd:df:2f:a2:99:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
        Validity
            Not Before: Mar 14 00:04:03 2024 GMT
            Not After : Mar 13 00:09:03 2025 GMT
        Subject: CN=17C51864E9719ADF2E223646515546CF6BFE0724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:d3:01:88:35:59:3c:c6:9f:e3:11:e1:ee:
                    92:8c:bb:fa:b0:c8:a3:2a:d7:0b:e4:73:41:76:0a:
                    23:c3:58:11:ae:3e:60:48:fe:b9:c3:d4:57:a5:90:
                    83:27:19:77:dc:69:34:60:b6:be:d7:a8:7c:f5:6a:
                    4a:ad:d8:d5:92:20:79:3c:bd:d5:e1:d1:5b:9b:f2:
                    1c:45:28:92:0e:09:ee:7f:7c:98:a3:ad:33:af:a9:
                    73:46:43:6e:1d:f1:71:16:a8:8c:5e:a2:38:11:25:
                    1d:85:48:e0:83:c8:b5:64:2e:38:8e:6c:86:75:c1:
                    b5:38:0f:58:2a:d1:48:d9:18:11:49:a9:b3:6a:cb:
                    38:a6:53:98:e0:33:2a:04:2e:72:d5:14:d4:33:7c:
                    8c:35:d4:62:a1:98:cc:a4:9a:11:b9:41:4b:7b:f3:
                    d2:88:e6:ce:2f:ec:ed:24:35:5b:1d:e8:32:55:76:
                    1b:f4:45:89:1d:de:f4:9b:37:92:88:64:72:a1:2e:
                    df:19:e3:c3:7d:f5:9b:16:7f:f5:81:33:7d:c1:76:
                    2a:c4:54:da:50:cb:98:26:07:73:94:c6:f4:29:62:
                    6f:39:8b:a4:ba:6b:fa:67:17:bc:ea:09:fb:4a:66:
                    d3:32:36:42:76:7a:ca:7f:7e:0e:97:ff:f9:29:18:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C5:18:64:E9:71:9A:DF:2E:22:36:46:51:55:46:CF:6B:FE:07:24
            X509v3 Authority Key Identifier:
                keyid:C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138362e3231362e32302e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:90:58:75:fd:b8:82:98:3e:d3:86:f5:7f:2d:c9:6f:a5:
         84:0a:25:9a:13:13:45:a4:71:e0:6e:93:93:bc:a0:76:70:fa:
         b9:d6:a0:5e:62:98:14:75:fc:ba:33:50:fd:b4:f4:7e:96:81:
         be:a7:f8:8f:c3:99:b4:c9:b9:b0:a3:2b:2f:5b:e9:bc:4f:02:
         b0:53:18:de:b6:cb:d1:99:01:fe:ec:5d:30:be:7d:a9:b4:8b:
         1b:8b:ed:2d:65:23:d3:4c:67:53:26:46:4b:da:c5:2c:cd:4c:
         ba:09:a4:53:89:b0:0a:1e:95:ed:fb:a7:bd:a3:1d:5d:de:e7:
         58:4d:5d:9d:9b:fa:4f:82:ae:cd:1d:52:41:31:23:98:55:d4:
         3f:dc:3f:7d:9c:6b:fe:48:2e:54:50:cd:0d:e2:41:2b:0f:6d:
         7a:65:63:81:5b:c8:1c:cd:ff:19:0f:58:0a:fb:1a:b1:2f:ff:
         fa:1a:b5:01:94:a2:e3:61:cf:aa:6e:38:da:4e:9d:fd:98:2d:
         d5:d2:07:2c:6f:bc:ff:fc:c9:5c:34:fe:f3:93:d0:06:ee:2a:
         a7:9f:a2:7b:83:12:82:3b:7e:95:3d:07:9c:ca:e6:f3:b4:ad:
         9c:41:df:f5:e9:9c:b9:2d:e1:61:1a:fc:2f:41:ba:6f:47:f0:
         de:2b:3d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org