Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138362e3231362e332e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e332e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          iyL2M12JWI+p1L+p2OHvwZ2n6WNh9yplb6cBR8cQarg=
Subject key identifier:   DF:8D:F2:17:2E:F4:B9:78:57:D1:4A:65:28:2A:12:73:B4:57:1C:EF
Certificate issuer:       /CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
Certificate serial:       51AAE2408460796ED23E534B54702EAFCB49775E
Authority key identifier: C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138362e3231362e332e302f32342d3234203d3e20323632363633.roa
Signing time:             Tue 13 Jun 2023 18:50:10 +0000
ROA not before:           Tue 13 Jun 2023 18:45:10 +0000
ROA not after:            Tue 11 Jun 2024 18:50:10 +0000
asID:                     262663
IP address blocks:        186.216.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:aa:e2:40:84:60:79:6e:d2:3e:53:4b:54:70:2e:af:cb:49:77:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
        Validity
            Not Before: Jun 13 18:45:10 2023 GMT
            Not After : Jun 11 18:50:10 2024 GMT
        Subject: CN=DF8DF2172EF4B97857D14A65282A1273B4571CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:c8:88:33:86:9f:05:1b:1a:3c:88:87:de:
                    f5:4a:ce:93:70:f2:ab:5d:59:88:32:87:1c:39:45:
                    15:cb:87:85:61:86:01:c0:f8:7a:4c:71:5a:13:72:
                    b6:ed:0c:58:47:44:50:3e:22:08:63:9d:fc:28:00:
                    91:b9:9f:d4:e1:0c:bd:27:c3:41:da:f4:98:74:b9:
                    3d:a5:f2:6b:54:16:53:62:d9:42:70:95:30:41:5d:
                    24:7a:2e:1a:b8:af:a4:ee:eb:d0:1a:4a:db:fb:de:
                    13:77:02:41:e0:3b:8d:75:f5:12:36:b8:0b:fe:71:
                    2e:62:68:0f:8f:db:ae:0b:b9:1e:01:29:5b:2a:83:
                    96:5c:ab:e0:1a:db:7c:ea:01:8c:1c:49:1a:87:d4:
                    f2:ab:2e:7d:32:7b:12:19:97:d0:13:15:54:d8:37:
                    9d:14:f6:21:1f:e5:df:70:fd:73:a5:28:7f:31:17:
                    4b:ce:40:f7:ff:09:8d:0f:10:ff:e5:4a:25:ee:93:
                    3c:b9:25:0f:89:28:ca:45:c8:eb:f4:3a:0c:87:c3:
                    b4:b3:68:3d:ea:c5:db:f2:bf:9b:d0:8c:01:74:41:
                    7f:44:71:4b:c7:74:0b:f9:8a:f5:99:78:45:2a:b1:
                    67:e3:a0:bf:9b:6b:49:8d:b1:7a:a0:a1:fe:0e:14:
                    18:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8D:F2:17:2E:F4:B9:78:57:D1:4A:65:28:2A:12:73:B4:57:1C:EF
            X509v3 Authority Key Identifier:
                keyid:C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138362e3231362e332e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:3f:0a:29:0c:c4:f3:85:3c:46:b9:d3:14:0c:4e:79:60:f0:
         38:94:1a:50:c7:23:06:c4:bc:8a:35:25:90:b2:75:a3:04:d7:
         29:0f:8e:91:6f:c8:06:77:de:6d:1b:95:da:4d:72:7f:a3:30:
         7c:44:15:37:85:84:23:fc:ef:eb:31:e0:dc:f3:ee:aa:f7:0b:
         c2:e4:f2:43:1c:84:eb:36:eb:c3:34:f4:50:68:ff:fc:e4:55:
         10:93:df:4a:60:77:e0:29:2e:ac:0c:00:09:45:1c:bc:49:e2:
         d3:40:ef:db:44:37:2f:04:e8:f9:2f:37:4f:54:a9:2e:b7:48:
         d4:5f:16:ec:a9:62:1d:86:63:38:80:24:74:17:1d:b1:9e:bc:
         ac:87:b7:65:84:72:6e:8c:8b:f0:f2:6e:d4:40:60:9f:6a:08:
         bc:c1:dc:10:55:48:4a:3f:05:d7:89:84:23:e3:00:e0:e0:29:
         f4:1e:34:a2:d8:ce:e9:b4:c4:cf:4c:ab:8a:94:3b:87:52:f2:
         7f:6a:1a:c8:59:e5:9a:45:65:c9:a8:91:85:d6:e5:bf:9b:19:
         fd:ab:6e:85:a0:be:58:ce:2d:06:b2:f5:aa:ce:79:8f:70:92:
         3c:01:97:6c:bd:bb:af:b5:4d:7b:cc:0c:08:3b:74:7f:e9:a2:
         71:8f:5e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org