Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS262682.roa
File:                     AS262682.roa (raw, json)
Hash identifier:          a3yuhv865zpO/Rv4DXpWTZwCRKpHxecnifhj/+1rdVQ=
Subject key identifier:   B0:AF:40:02:FC:5D:1D:DC:B5:85:BA:84:C4:C9:B8:03:A0:37:FA:98
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       326A1D7CDA9FB03E7D4D51FD4A6F630E4C61981E
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS262682.roa
Signing time:             Thu 06 Oct 2022 17:47:46 +0000
ROA not before:           Thu 06 Oct 2022 17:42:46 +0000
ROA not after:            Thu 05 Oct 2023 17:47:46 +0000
asID:                     262682
IP address blocks:        187.86.96.0/20 maxlen: 20
                          187.86.96.0/21 maxlen: 21
                          187.86.96.0/24 maxlen: 24
                          187.86.104.0/21 maxlen: 21
                          200.233.80.0/20 maxlen: 20
                          200.233.80.0/21 maxlen: 21
                          200.233.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6a:1d:7c:da:9f:b0:3e:7d:4d:51:fd:4a:6f:63:0e:4c:61:98:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Oct  6 17:42:46 2022 GMT
            Not After : Oct  5 17:47:46 2023 GMT
        Subject: CN=B0AF4002FC5D1DDCB585BA84C4C9B803A037FA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:b2:66:9e:d8:02:7a:d4:8d:96:dc:2c:9d:
                    3d:fc:d8:38:5d:c1:2b:78:d1:48:d6:fd:a8:82:c8:
                    40:24:70:c0:90:3c:eb:11:7e:ab:3a:51:a3:31:7c:
                    c3:36:15:44:a2:a3:18:27:4a:b0:e0:60:c8:d4:6f:
                    12:3d:17:1c:36:ea:e1:ca:6f:83:fe:3b:58:5f:e1:
                    4a:d4:fd:c9:25:cb:87:c7:45:87:27:83:1e:70:c5:
                    70:87:a1:c1:42:62:a7:fc:ec:c4:3a:1c:d9:b3:b5:
                    e2:96:40:08:60:52:b9:79:ee:f7:f5:ce:ea:6e:69:
                    63:2a:71:be:21:00:2c:ac:ae:b2:2d:f2:4b:b7:9d:
                    53:9f:f7:a1:c0:54:50:ae:fb:f2:86:de:b6:c3:c5:
                    94:a6:de:d3:99:85:96:fa:7a:3a:ba:66:88:81:99:
                    20:e3:76:96:f8:09:ef:ed:9e:0a:85:3f:a0:5e:f2:
                    58:20:75:c2:c8:8c:30:4c:bc:3f:6e:82:8a:f7:b1:
                    48:8c:86:9c:fd:6e:42:6f:cb:6d:08:97:68:67:63:
                    21:60:49:b4:de:fc:a3:63:0f:62:07:36:a9:f3:47:
                    19:55:65:c6:b7:13:a5:16:f8:cc:15:2f:e4:04:6b:
                    d7:e1:cf:a5:92:46:f9:c2:20:53:9e:af:77:a3:0d:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AF:40:02:FC:5D:1D:DC:B5:85:BA:84:C4:C9:B8:03:A0:37:FA:98
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS262682.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.96.0/20
                  200.233.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:bb:ee:af:f9:7f:49:38:38:1e:5c:14:f8:5f:59:99:76:
         0a:7f:7f:55:97:78:05:07:d4:83:7d:fd:2a:a1:44:bc:63:b4:
         0f:19:94:e1:3b:f8:fc:7f:5c:83:fa:82:1c:9a:2c:71:50:f5:
         e9:8a:8e:24:e3:b7:6d:fd:12:bc:63:d1:95:c9:e6:7b:68:31:
         d4:de:2b:a3:53:4e:af:b4:1e:05:3a:1d:a7:97:1d:f1:7c:42:
         69:85:b5:89:02:7d:c7:fd:e6:7a:04:b6:ab:83:85:2e:8c:0b:
         7b:77:dd:dc:6b:d0:85:0a:c1:1c:a0:09:42:aa:92:40:d6:74:
         e3:a1:47:02:13:7f:19:1e:d3:61:73:fd:40:4b:12:bf:74:0d:
         51:96:d9:2d:f8:0d:67:27:1b:f3:72:91:9b:b2:00:f9:b2:a6:
         43:60:d1:a5:f1:5f:d5:8b:54:2e:f3:00:4e:99:b3:0e:e2:54:
         ef:a5:13:52:a1:85:ca:08:32:97:be:ec:a3:2d:29:64:ad:e3:
         7f:2a:f4:50:f9:30:fa:bd:3e:60:e6:2c:84:90:75:ac:ca:8a:
         ac:8f:ec:7c:14:71:d9:51:64:c7:07:b3:40:ea:7b:7e:99:1f:
         40:a9:62:f9:9b:75:a5:86:53:e0:87:28:8e:7a:df:90:6c:0a:
         98:b5:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org