Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3234382e302f32342d3234203d3e20323633303836.roa
File:                     3138362e3230382e3234382e302f32342d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          kNrvQtQ2HehRCWC68AErxdWjDKisAUQa2FPq+eG55n0=
Subject key identifier:   D6:CD:94:44:BE:AA:63:3A:E8:A9:98:6C:5B:82:BF:FD:B5:4C:A3:9E
Certificate issuer:       /CN=1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B
Certificate serial:       3C5E8BF8736D1477E4AFD20C7EF15474ECA1CA0C
Authority key identifier: 1C:5F:E8:A7:A5:CA:F8:C0:33:2E:DF:71:1A:BD:C0:80:5B:20:8F:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3234382e302f32342d3234203d3e20323633303836.roa
Signing time:             Tue 07 Mar 2023 15:51:03 +0000
ROA not before:           Tue 07 Mar 2023 15:46:03 +0000
ROA not after:            Tue 05 Mar 2024 15:51:03 +0000
asID:                     263086
IP address blocks:        186.208.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5e:8b:f8:73:6d:14:77:e4:af:d2:0c:7e:f1:54:74:ec:a1:ca:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B
        Validity
            Not Before: Mar  7 15:46:03 2023 GMT
            Not After : Mar  5 15:51:03 2024 GMT
        Subject: CN=D6CD9444BEAA633AE8A9986C5B82BFFDB54CA39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f2:c6:41:0f:95:16:ed:48:24:5e:94:71:84:
                    dd:ff:af:0e:5d:ec:6f:16:dc:70:c5:15:40:4b:e2:
                    01:cd:3a:9c:40:45:10:80:57:63:0e:5b:b4:20:3e:
                    e3:3b:25:32:ff:92:88:ce:b6:ab:5d:9a:c7:a8:aa:
                    95:04:90:fe:12:21:be:6c:d2:85:b0:f0:5e:4b:1f:
                    41:e5:27:12:0e:55:96:bc:9e:74:6c:e8:48:d0:e6:
                    60:14:6b:1e:25:88:a0:72:83:7f:b1:11:0a:bf:32:
                    fe:7b:4d:27:71:f7:be:58:44:d0:70:13:1d:42:ad:
                    23:15:84:1a:f9:5c:35:2d:a2:74:b8:57:ac:d8:35:
                    6e:44:ee:4e:62:b8:44:d7:4c:8d:1f:56:c8:ac:3b:
                    93:bf:95:8f:e0:b9:c1:06:98:f1:d3:d5:77:55:a5:
                    30:cb:ef:01:2e:9e:e3:86:db:a4:fc:e7:52:36:f5:
                    14:2a:32:49:03:53:fe:29:e4:5d:f0:a9:bd:76:e8:
                    f6:26:de:9f:41:f9:66:0d:31:cc:c2:2b:de:d5:ba:
                    74:1c:7f:b9:8c:c8:b9:32:e2:ee:9b:61:ef:cf:b0:
                    6d:2d:06:b4:09:bc:e4:7f:6c:5c:a5:16:df:4e:51:
                    cb:6d:2b:1f:09:09:06:65:31:84:7b:e3:a7:41:38:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CD:94:44:BE:AA:63:3A:E8:A9:98:6C:5B:82:BF:FD:B5:4C:A3:9E
            X509v3 Authority Key Identifier:
                keyid:1C:5F:E8:A7:A5:CA:F8:C0:33:2E:DF:71:1A:BD:C0:80:5B:20:8F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3234382e302f32342d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:6a:03:de:d4:27:4b:67:4f:4a:01:90:d4:f3:1e:6f:9d:1b:
         eb:b5:c1:f6:17:ef:64:98:0d:35:db:c8:a7:3e:58:31:98:82:
         9a:b0:99:ce:84:db:42:13:b6:22:d7:44:0f:1c:d5:2e:97:59:
         a1:f3:a7:9c:38:9f:cd:15:28:2f:c3:52:47:8b:41:aa:1e:4d:
         82:4f:8c:8a:44:38:a2:56:a4:73:f5:7e:f3:9a:cd:77:8b:81:
         42:83:b6:6b:8d:e8:e6:80:8b:9b:28:68:50:fb:12:20:48:5c:
         f9:f9:38:71:9f:d2:75:14:1b:3f:69:2a:d7:d9:5c:e1:1f:e7:
         d1:dd:50:c1:f7:3a:b1:f5:6e:0c:fc:d3:a6:99:28:28:53:11:
         82:9b:9d:ef:1a:cc:f8:53:bf:b1:02:b6:df:2c:fa:9f:a6:fc:
         5f:9f:76:db:f7:6b:6d:7b:d4:3c:1c:12:55:60:a8:c1:72:47:
         35:0f:bd:e4:6c:74:36:f8:26:c7:86:d2:ae:2c:c4:41:2e:39:
         c2:05:8e:c0:07:49:57:bf:5b:c1:f8:38:37:23:23:12:1c:31:
         33:6b:58:08:a1:b1:4a:3a:84:48:ab:f5:62:90:69:db:db:98:
         40:b1:f2:80:cb:15:bc:59:61:b4:a1:22:95:df:e1:2b:41:e8:
         e1:ae:74:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org