Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38302e302f32302d3230203d3e203533313835.roa
File:                     3138362e3232372e38302e302f32302d3230203d3e203533313835.roa (raw, json)
Hash identifier:          uF1JUeni0hTxNJH0Pz6nlVtrxj7y8f/N11jPkJ6dYaQ=
Subject key identifier:   CB:8E:D7:FC:D0:39:63:99:DB:84:E2:3E:B4:BA:8A:6B:F8:E7:F7:7F
Certificate issuer:       /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial:       4B5AC00A0ECD4531768B5E1C810CC315CBDE6B32
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38302e302f32302d3230203d3e203533313835.roa
Signing time:             Sat 15 Jul 2023 03:18:51 +0000
ROA not before:           Sat 15 Jul 2023 03:13:51 +0000
ROA not after:            Sat 13 Jul 2024 03:18:51 +0000
asID:                     53185
IP address blocks:        186.227.80.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5a:c0:0a:0e:cd:45:31:76:8b:5e:1c:81:0c:c3:15:cb:de:6b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
        Validity
            Not Before: Jul 15 03:13:51 2023 GMT
            Not After : Jul 13 03:18:51 2024 GMT
        Subject: CN=CB8ED7FCD0396399DB84E23EB4BA8A6BF8E7F77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:8b:88:fd:c1:eb:39:3c:35:a1:c1:e3:3c:
                    64:06:aa:8f:40:9f:25:cb:e6:c4:d1:8f:35:2e:da:
                    da:33:31:95:33:34:bd:6d:1b:f5:4f:aa:e1:ad:6c:
                    27:ec:08:59:e0:74:49:d0:7f:e3:79:e3:57:24:04:
                    09:bd:2d:47:6e:3f:27:40:cb:ff:fc:18:e4:84:34:
                    e5:8b:64:d4:2d:da:ed:8f:66:5a:20:34:fb:89:86:
                    33:bb:9f:a4:79:1c:a8:ce:60:70:7c:57:7e:fa:03:
                    01:89:2e:72:ca:5b:fa:aa:8b:0c:8a:c1:43:6e:fe:
                    06:4f:4e:6b:9e:cf:7e:ee:4a:39:47:74:d0:40:1c:
                    e2:30:74:a1:38:a2:94:6d:fb:21:b9:e2:ed:50:31:
                    b2:af:2d:12:c1:22:7f:ff:ba:3c:c0:c7:03:80:e3:
                    e9:96:e9:40:57:f5:38:3f:08:26:49:f3:18:20:e0:
                    c4:1e:2d:b5:26:c5:26:ac:a7:d5:f0:d8:67:e7:12:
                    81:9e:20:5e:44:fc:b1:48:90:eb:1a:a3:52:03:bf:
                    d8:89:9e:d1:12:2c:07:51:69:09:14:28:d0:9c:e8:
                    8d:50:56:d4:2c:46:ab:2d:5c:5e:4c:3e:e4:e7:40:
                    f9:88:de:3e:3b:ae:e5:82:6a:7e:6a:fd:18:bb:29:
                    f7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8E:D7:FC:D0:39:63:99:DB:84:E2:3E:B4:BA:8A:6B:F8:E7:F7:7F
            X509v3 Authority Key Identifier:
                keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38302e302f32302d3230203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:32:2e:bd:11:40:65:7f:c1:71:bd:37:c2:b8:16:d1:a4:be:
         09:1d:56:f8:0a:55:62:7f:00:3f:0f:73:90:67:98:b6:b8:29:
         56:02:f4:0d:63:1e:fd:d0:37:57:4e:35:6a:d7:11:4e:92:e1:
         9d:75:3e:2f:32:a4:56:57:9e:fb:44:32:b2:d7:33:47:76:12:
         16:77:3d:21:07:1e:88:14:2b:7f:d4:34:91:b3:f7:a8:50:4c:
         18:3d:90:ad:80:a5:a4:fb:fa:bb:b4:4c:6f:9a:41:0e:ba:e7:
         51:01:95:12:d4:69:a3:f0:34:c4:f8:87:56:3f:1f:88:d3:31:
         78:4e:64:bd:38:c5:51:9f:68:53:18:7c:7a:00:1f:a4:7a:23:
         d5:5c:56:39:69:23:82:99:77:67:89:22:f3:8f:9e:4c:76:86:
         81:7d:b4:33:f2:59:7a:f2:2a:03:0c:5f:1c:cf:10:82:55:75:
         fc:01:71:2d:22:4b:82:99:a3:1e:a9:ce:24:01:95:e2:47:b4:
         5c:05:2f:06:df:01:19:bd:64:9f:e3:a9:40:ef:56:ad:2f:b1:
         db:bd:47:89:9d:62:a4:c3:f0:da:43:fa:61:7e:db:db:87:66:
         90:4f:9f:a1:5c:6f:6f:25:5e:d4:17:c8:a2:b0:09:27:d6:e2:
         9b:4f:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org