Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138372e38362e39362e302f32312d3231203d3e20323632363832.roa
File:                     3138372e38362e39362e302f32312d3231203d3e20323632363832.roa (raw, json)
Hash identifier:          0R2UU+L8ntB9ZpGmKvPvXcPBtEKgXW1LqlXfQUg9es0=
Subject key identifier:   86:E1:FA:6D:87:70:A3:81:F2:32:E8:3B:26:84:B4:00:1E:08:8B:73
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       12F6C6C7527BB2D6DE13AD85D978A01BCDD8A840
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138372e38362e39362e302f32312d3231203d3e20323632363832.roa
Signing time:             Thu 22 Sep 2022 19:44:59 +0000
ROA not before:           Thu 22 Sep 2022 19:39:59 +0000
ROA not after:            Thu 21 Sep 2023 19:44:59 +0000
asID:                     262682
IP address blocks:        187.86.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f6:c6:c7:52:7b:b2:d6:de:13:ad:85:d9:78:a0:1b:cd:d8:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Sep 22 19:39:59 2022 GMT
            Not After : Sep 21 19:44:59 2023 GMT
        Subject: CN=86E1FA6D8770A381F232E83B2684B4001E088B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:b1:06:c5:0c:cd:ad:6b:08:9e:7f:7c:94:
                    82:08:a4:7b:10:db:12:8a:39:50:b0:65:78:93:8e:
                    db:6a:8b:4f:7e:f7:2a:ab:b1:ae:9f:ed:3d:20:60:
                    c2:10:e2:07:60:52:32:f2:23:7e:65:15:e1:c5:a9:
                    5b:ee:76:cc:f1:9c:d4:66:9c:f4:25:a5:83:31:df:
                    2f:c6:e3:d9:ef:19:07:87:42:a5:1e:c0:a1:eb:ab:
                    ef:aa:29:e0:81:c9:f6:86:3e:e7:b5:76:ee:0b:56:
                    94:fc:a9:20:06:43:43:6d:6b:a1:8a:58:00:61:77:
                    04:99:7b:bc:b7:de:cc:dd:cb:56:6e:14:06:f2:a5:
                    34:9a:13:64:45:df:53:23:2a:25:64:34:1c:47:1c:
                    62:e7:cc:52:2d:2a:bd:bb:26:fc:b7:66:e7:ce:31:
                    54:e2:50:6c:e9:0d:20:68:ad:90:b7:a4:c2:59:31:
                    bd:ae:79:eb:7b:97:95:65:89:55:09:38:17:1a:9f:
                    42:d8:8f:c7:f8:e2:e6:55:6b:b0:04:76:40:7f:c2:
                    9e:a3:e0:5d:d7:89:f6:03:3c:8b:e4:b8:04:4d:a9:
                    ea:59:d6:76:cb:5d:21:c2:90:dd:3a:65:b4:6a:38:
                    6a:08:5b:db:2c:6e:9b:ac:b7:4f:73:52:63:12:23:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E1:FA:6D:87:70:A3:81:F2:32:E8:3B:26:84:B4:00:1E:08:8B:73
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138372e38362e39362e302f32312d3231203d3e20323632363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:1a:32:e8:3a:dc:d2:40:bb:12:1d:ca:8b:be:92:3c:3b:c2:
         a0:4f:42:f4:d6:e4:e1:1f:b2:f2:5e:74:04:2d:0c:98:1b:67:
         98:5f:b0:6f:9b:95:f5:dc:b4:9c:d2:d5:11:96:93:4a:80:eb:
         25:7c:b2:9d:14:c1:2a:ac:f5:ff:33:54:15:5e:0c:57:ca:77:
         6f:e3:50:77:8a:ab:44:48:85:4b:6d:dd:23:0d:fe:87:9b:58:
         07:50:8b:7f:43:b8:b2:3f:7d:87:3c:b2:52:08:2e:ae:83:bc:
         8d:d0:bd:40:02:d5:c5:cb:e3:2a:1d:d3:c7:b0:ae:46:97:52:
         3f:2f:e4:ee:56:9c:2d:b8:5e:ab:5b:ad:f0:94:f9:63:5f:00:
         c1:96:be:6b:3d:a0:8b:b3:8c:af:89:f7:87:2f:cb:b4:55:51:
         0f:d1:6c:3a:33:a2:5f:a8:f0:1f:c7:dc:fe:a0:d2:a8:a9:4c:
         2b:ee:f2:c9:85:db:18:c3:b0:56:17:f0:f4:cb:2d:36:10:54:
         36:43:7a:d6:14:d9:e5:31:43:20:c4:8f:97:18:a9:ce:33:54:
         26:26:56:00:68:d3:73:6f:12:cf:45:9d:89:39:97:af:be:01:
         8c:6b:75:fb:85:12:bd:1f:86:87:04:65:44:06:97:37:82:b5:
         2a:2b:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org