Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138362e3231362e35392e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e35392e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          NHSmcj+OuvauSKqVr1snlGtjMEr3o1cnHYT9HpiAhBo=
Subject key identifier:   29:CD:5D:CE:A7:14:30:BB:1C:2D:AC:82:3B:36:F5:64:C0:0A:EA:A2
Certificate issuer:       /CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
Certificate serial:       7F02CB715A3724D29C3448E37CA79101C01210B6
Authority key identifier: C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138362e3231362e35392e302f32342d3234203d3e20323632363633.roa
Signing time:             Fri 16 Jun 2023 16:20:10 +0000
ROA not before:           Fri 16 Jun 2023 16:15:10 +0000
ROA not after:            Fri 14 Jun 2024 16:20:10 +0000
asID:                     262663
IP address blocks:        186.216.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:02:cb:71:5a:37:24:d2:9c:34:48:e3:7c:a7:91:01:c0:12:10:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
        Validity
            Not Before: Jun 16 16:15:10 2023 GMT
            Not After : Jun 14 16:20:10 2024 GMT
        Subject: CN=29CD5DCEA71430BB1C2DAC823B36F564C00AEAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:62:aa:79:75:56:5a:db:45:c6:fe:58:7d:c4:
                    7a:69:e2:ba:1e:b8:07:35:d9:35:06:93:83:10:22:
                    93:ba:fe:9c:a9:65:66:13:7c:44:3f:67:d5:0e:87:
                    41:ce:79:c6:86:47:7e:f2:e7:f7:9d:8b:2e:a7:68:
                    c9:88:3f:0f:9e:0c:4c:9a:35:43:0e:95:2e:c4:97:
                    18:43:ed:6b:73:71:2e:b2:46:0a:67:62:17:05:de:
                    e7:28:40:35:04:0c:39:a9:40:4f:d1:7f:94:b1:96:
                    64:aa:52:45:d3:0e:03:8c:90:4d:56:66:b2:db:71:
                    f6:52:1d:96:d7:56:ae:7d:f6:26:6c:81:74:9b:ee:
                    e1:e3:c6:3f:70:d2:f1:19:06:60:c3:73:83:67:01:
                    ca:12:83:06:1c:87:41:9b:89:d8:0d:10:03:6d:40:
                    c4:09:6d:bf:34:6e:78:a3:82:56:11:bb:61:39:1f:
                    16:35:c9:ef:d0:6e:45:19:1f:d4:14:5b:76:63:d5:
                    79:ed:80:13:81:bc:74:bb:b4:95:5c:e6:a9:d9:13:
                    61:80:f2:f2:96:21:e3:13:e7:0a:c1:ff:b2:4d:15:
                    ee:5a:d3:72:22:27:6a:24:2e:1b:c6:2d:9d:04:fc:
                    ea:89:09:bd:db:21:47:34:60:45:54:65:12:96:5c:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CD:5D:CE:A7:14:30:BB:1C:2D:AC:82:3B:36:F5:64:C0:0A:EA:A2
            X509v3 Authority Key Identifier:
                keyid:C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138362e3231362e35392e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:cd:09:9e:83:10:4a:db:c9:09:bc:97:40:4a:d3:f9:24:eb:
         93:67:44:6c:bd:f2:80:55:f0:69:ac:a9:3c:03:1f:7c:2b:14:
         dc:4d:87:f4:eb:a2:eb:e8:37:72:c6:18:6e:dc:97:af:77:97:
         df:e9:bd:db:7d:28:3b:05:55:1d:22:bd:fd:09:47:b8:44:fa:
         14:b2:b2:e8:60:1d:99:f3:20:5c:22:da:1d:5d:43:77:3a:93:
         45:07:06:91:21:ee:57:89:f7:b4:58:8e:77:34:fc:7a:c1:2a:
         8a:55:e2:1f:3b:4b:b1:a3:66:0d:b4:4f:74:26:1b:c9:c7:b1:
         57:34:ff:2a:a1:c1:91:7c:8b:bf:c3:86:5a:98:7d:f3:51:ec:
         35:be:a2:69:e4:63:37:8d:5d:db:88:3c:7f:82:ce:2f:6b:b6:
         60:4d:e8:8d:3f:7b:67:2c:12:90:f9:de:71:70:f1:54:fa:0c:
         30:6c:9a:35:6c:7b:3d:d3:67:f2:f9:50:e6:d4:9c:28:da:1d:
         19:29:58:16:c0:75:bc:88:fc:e0:fd:22:89:1d:f1:37:01:13:
         fa:09:7c:ed:04:70:97:1c:67:e3:f6:d5:2e:3a:50:99:94:ed:
         25:87:21:46:fa:d0:bf:26:b0:57:74:b5:a8:c3:59:94:a9:86:
         b8:58:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org