Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa
File:                     3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa (raw, json)
Hash identifier:          XOJBlhU9Lvxiz4I/2IEz0BHPmIzJ54qVyQTc1IdYjbI=
Subject key identifier:   6F:74:1E:B7:F0:61:57:95:54:4C:D1:A9:AC:79:74:4D:B7:7B:3B:53
Certificate issuer:       /CN=B6986C016F3E80BC5D98F8941D5EA43AC8F632DE
Certificate serial:       76A67DF68E682A98CB2E55C79AED50A9F31700D0
Authority key identifier: B6:98:6C:01:6F:3E:80:BC:5D:98:F8:94:1D:5E:A4:3A:C8:F6:32:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6986C016F3E80BC5D98F8941D5EA43AC8F632DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa
Signing time:             Fri 08 Sep 2023 13:09:08 +0000
ROA not before:           Fri 08 Sep 2023 13:04:08 +0000
ROA not after:            Fri 06 Sep 2024 13:09:08 +0000
asID:                     263027
IP address blocks:        186.249.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a6:7d:f6:8e:68:2a:98:cb:2e:55:c7:9a:ed:50:a9:f3:17:00:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6986C016F3E80BC5D98F8941D5EA43AC8F632DE
        Validity
            Not Before: Sep  8 13:04:08 2023 GMT
            Not After : Sep  6 13:09:08 2024 GMT
        Subject: CN=6F741EB7F0615795544CD1A9AC79744DB77B3B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d7:24:03:05:67:f5:02:78:33:b5:df:79:8e:
                    27:7d:6d:98:bf:52:b7:d6:86:6e:4c:5e:5b:9c:2b:
                    a0:ce:60:b9:07:c4:57:f8:ce:7c:49:a3:1e:a5:37:
                    80:e3:b9:47:1b:71:8b:9a:5a:45:97:12:4a:13:9c:
                    3c:28:82:52:61:45:c1:c0:d7:08:ea:83:e9:8f:78:
                    c8:39:3c:40:4f:ab:0e:86:5c:e7:8d:d8:28:93:6d:
                    f3:5d:3e:98:23:f1:15:8e:88:a1:eb:f5:7f:12:14:
                    f4:1a:1a:2e:63:48:f1:9d:07:6f:b0:9b:0d:7c:af:
                    71:33:1c:36:f4:15:f4:6c:52:96:d1:08:f4:94:a3:
                    24:76:95:b0:cb:94:64:25:fc:b1:f3:04:00:57:1e:
                    73:06:c8:e1:a6:10:03:a2:50:58:84:ac:88:31:e9:
                    73:c1:56:18:cf:1d:cf:41:7b:bb:3a:45:16:6c:74:
                    d7:93:4c:23:bb:73:77:f0:f5:20:47:09:13:3f:9d:
                    e8:56:29:12:2b:35:2e:5a:1d:27:0f:10:22:6e:1b:
                    6b:51:5b:43:f2:28:0c:9b:76:1a:f7:9e:60:fe:4d:
                    15:7b:19:7f:af:c7:e4:90:db:eb:a5:66:03:5c:4f:
                    60:cc:bf:66:30:f7:86:3a:fa:72:d3:09:2a:e8:84:
                    a8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:74:1E:B7:F0:61:57:95:54:4C:D1:A9:AC:79:74:4D:B7:7B:3B:53
            X509v3 Authority Key Identifier:
                keyid:B6:98:6C:01:6F:3E:80:BC:5D:98:F8:94:1D:5E:A4:3A:C8:F6:32:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/B6986C016F3E80BC5D98F8941D5EA43AC8F632DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6986C016F3E80BC5D98F8941D5EA43AC8F632DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:f7:a0:3c:03:ad:89:43:3d:7f:35:2d:0a:13:1c:db:b0:
         b7:ca:d7:27:23:a4:75:25:f0:00:66:26:93:7d:89:6b:13:c5:
         3b:91:c2:c8:a1:55:3a:ab:60:f8:4d:8a:dc:6c:53:87:19:87:
         74:88:02:28:bd:b0:bf:c5:81:d2:ce:50:49:2f:c4:32:0a:52:
         16:96:48:22:da:d5:c3:f9:d1:fc:1b:df:2a:c4:81:29:12:22:
         4c:d8:11:bd:cb:11:56:5b:61:83:57:cb:93:02:11:0b:77:1c:
         31:2a:b8:c2:f6:7c:99:62:fa:05:a9:dd:7c:73:69:a3:bd:c3:
         e4:f7:6b:72:ca:a9:d6:f9:25:8f:aa:d4:73:98:5b:50:fd:bf:
         f8:dd:14:eb:8b:5b:a0:01:8b:c5:e9:8a:48:53:f1:33:a0:54:
         1d:d4:b0:ca:d6:84:ec:5a:80:05:26:54:f0:90:67:0e:52:e1:
         33:7a:ec:be:66:9b:03:75:16:48:15:4f:d9:8c:56:41:2d:07:
         45:34:cc:4a:80:c8:64:fd:bc:8e:25:c0:f1:75:a1:05:62:f7:
         6e:ae:f3:ea:11:60:51:47:4a:a1:31:2f:52:bb:10:a2:75:e7:
         7d:cc:9f:69:5e:1a:8f:e2:05:cc:a6:41:d0:11:fe:5c:73:58:
         4f:54:0f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org