Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38342e302f32332d3233203d3e203533313835.roa
File:                     3138362e3232372e38342e302f32332d3233203d3e203533313835.roa (raw, json)
Hash identifier:          38pkvPKIMGA4x+ot+AOEoVMmp9qG8h0CIMBQJ28HcOI=
Subject key identifier:   FB:DC:42:E7:CF:BE:23:FF:74:08:DC:6B:AC:DE:8F:1B:B2:30:95:F2
Certificate issuer:       /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial:       369C52A23F6F107C5BA93F75A27466A2047C5623
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38342e302f32332d3233203d3e203533313835.roa
Signing time:             Sat 15 Jul 2023 03:18:50 +0000
ROA not before:           Sat 15 Jul 2023 03:13:50 +0000
ROA not after:            Sat 13 Jul 2024 03:18:50 +0000
asID:                     53185
IP address blocks:        186.227.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9c:52:a2:3f:6f:10:7c:5b:a9:3f:75:a2:74:66:a2:04:7c:56:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
        Validity
            Not Before: Jul 15 03:13:50 2023 GMT
            Not After : Jul 13 03:18:50 2024 GMT
        Subject: CN=FBDC42E7CFBE23FF7408DC6BACDE8F1BB23095F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:63:33:b1:14:82:75:7a:3d:0f:d6:a4:08:
                    9f:2c:7d:d5:ad:21:1d:0f:1f:4c:e3:ad:5b:80:72:
                    85:2c:48:04:8c:ec:1a:e9:23:a7:e2:46:d2:90:a7:
                    27:89:e8:a5:8d:c4:16:6c:e9:bb:c3:71:3f:9e:9d:
                    f1:7d:cd:86:92:b7:4f:28:98:cd:e9:36:8d:b7:42:
                    04:cf:33:75:a5:ce:48:4b:40:a0:e7:f8:6b:03:29:
                    b9:c5:8e:93:99:83:db:be:5f:a6:34:7a:cd:14:97:
                    b9:d6:93:8f:2f:46:f0:d9:74:0a:16:84:74:be:05:
                    73:a2:c7:9b:82:4a:5d:a7:88:1e:26:99:c2:1b:5e:
                    c1:00:0e:fe:d2:5c:a3:5d:fd:db:5b:78:6b:65:f4:
                    57:20:41:4b:e1:d3:8e:24:ab:fd:3a:14:e9:33:05:
                    d8:af:d6:0f:f3:69:77:9b:31:93:f6:9f:e7:83:56:
                    c4:eb:46:89:1d:eb:e4:b7:25:20:0a:fd:3f:64:85:
                    ab:16:c7:72:f9:5c:9d:23:3f:e7:e0:da:92:98:a2:
                    98:c9:76:ff:ba:f2:fe:f2:01:9b:ea:d6:be:28:43:
                    90:9a:f9:55:1b:5b:da:ea:da:0e:96:fc:9a:c4:3f:
                    21:5e:b8:81:cc:1a:b0:1a:5d:d8:1a:8a:69:f2:33:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DC:42:E7:CF:BE:23:FF:74:08:DC:6B:AC:DE:8F:1B:B2:30:95:F2
            X509v3 Authority Key Identifier:
                keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38342e302f32332d3233203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:f3:9b:04:56:29:2d:1d:23:1c:4f:e5:40:57:54:5c:6c:61:
         83:c1:6b:71:63:17:a5:93:10:f2:3e:95:a6:02:6b:1f:e7:e5:
         62:62:23:cb:15:a3:5f:c4:79:42:0d:db:a2:06:79:c8:bc:2a:
         1f:68:63:b1:0b:4d:1a:2f:68:35:71:b6:df:3a:48:1c:f5:47:
         a5:7b:1d:10:75:84:9a:8c:d2:e9:15:50:64:b0:29:ab:53:e6:
         c6:f4:bd:19:eb:fd:48:79:6f:95:01:1f:cf:0a:ae:3f:56:c5:
         8f:8b:31:f4:ee:a5:ee:38:38:d7:b1:3b:9d:1c:7a:07:1a:49:
         36:cb:d9:79:24:45:fe:21:3a:1e:7f:b0:02:14:46:12:b5:ba:
         b6:ac:c5:37:d5:b7:f6:8b:8f:e2:f7:87:80:a9:a2:78:77:95:
         4a:c4:58:83:36:be:cb:b6:0f:eb:98:17:0b:5a:28:58:7f:f2:
         73:f0:04:d0:a1:42:88:59:b9:7a:1a:5b:4f:66:85:2a:d8:5b:
         d0:50:ec:30:fc:db:a4:79:44:7c:56:c2:a8:ae:88:01:c3:60:
         18:c4:68:4b:77:a9:25:bb:4a:f2:16:9b:38:6d:79:7b:34:5f:
         a9:8d:1a:92:53:16:ab:da:d9:12:c8:98:a0:d9:2f:97:3b:eb:
         00:ae:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org