Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138362e3139332e3139322e302f32302d3234203d3e203238363637.roa
File:                     3138362e3139332e3139322e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          KwwFEtpO0GxIR47m2aIeRJickmvQMy2djdXplQPTngo=
Subject key identifier:   DD:69:88:06:C1:E6:6B:60:A5:3B:8B:CB:1C:AE:AE:C0:2B:2E:7D:44
Certificate issuer:       /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial:       4A9CB88B5CD962F1232FB8D23ED2FEEEDA6BCF36
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138362e3139332e3139322e302f32302d3234203d3e203238363637.roa
Signing time:             Tue 23 Jul 2024 11:51:11 +0000
ROA not before:           Tue 23 Jul 2024 11:46:11 +0000
ROA not after:            Tue 22 Jul 2025 11:51:11 +0000
asID:                     28667
IP address blocks:        186.193.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9c:b8:8b:5c:d9:62:f1:23:2f:b8:d2:3e:d2:fe:ee:da:6b:cf:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
        Validity
            Not Before: Jul 23 11:46:11 2024 GMT
            Not After : Jul 22 11:51:11 2025 GMT
        Subject: CN=DD698806C1E66B60A53B8BCB1CAEAEC02B2E7D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:6d:f3:b1:be:20:a3:66:63:1a:d1:21:20:
                    21:38:02:37:90:d4:d9:3d:8c:f9:4b:3e:af:be:af:
                    ea:f6:d2:b9:b0:5b:0a:7b:77:1a:2f:6c:cd:94:22:
                    c0:b8:52:d2:76:48:0e:1d:c0:87:b4:33:4c:5d:16:
                    68:9a:cc:19:58:11:8b:2d:2b:a2:60:91:93:1c:af:
                    85:ea:23:ac:b6:89:ae:bf:3d:66:57:3b:74:5f:00:
                    42:92:7c:3c:92:54:48:bd:d5:4f:06:3c:87:38:f9:
                    d9:7f:5c:6d:c8:e0:c8:d0:8d:d2:41:f2:57:42:db:
                    43:78:4b:50:c1:36:d3:61:21:cb:0e:88:01:16:da:
                    9c:8e:47:83:50:bb:ec:eb:4d:0b:1c:98:b6:5e:79:
                    08:9f:4d:8e:36:c0:45:80:2e:35:21:b6:13:5a:5c:
                    48:37:f5:cc:b0:14:67:83:4b:ba:95:50:5a:05:d3:
                    ee:95:75:e2:14:1f:41:33:9d:3d:41:43:aa:be:03:
                    f0:c2:f5:a3:6b:cb:72:9d:75:13:e0:ef:a2:f8:9c:
                    29:6b:cb:9b:89:3e:85:92:ed:8d:95:58:59:a0:b4:
                    9e:bf:98:79:bb:96:34:b2:ef:78:23:80:ca:2d:47:
                    52:a4:3d:47:3f:b7:23:ec:53:7b:92:54:b6:a3:38:
                    6e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:69:88:06:C1:E6:6B:60:A5:3B:8B:CB:1C:AE:AE:C0:2B:2E:7D:44
            X509v3 Authority Key Identifier:
                keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138362e3139332e3139322e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:5f:83:cc:df:ba:ba:31:31:e2:b7:91:ff:fc:bd:ad:18:5a:
         8b:22:62:c8:3d:de:17:23:50:69:c5:c0:1b:9b:2e:29:fe:fd:
         ee:a1:48:b9:6b:ca:46:64:09:23:1c:e2:88:72:44:f5:f4:ff:
         48:ae:f1:22:0b:e4:70:44:d4:96:e6:8e:d7:80:c3:20:5f:de:
         aa:3a:f7:dc:08:7f:ad:1f:fb:da:88:64:68:d2:e4:2f:cc:69:
         9f:fd:6d:31:44:d7:74:42:fd:68:e9:98:7c:f5:5e:14:aa:cd:
         a6:af:4c:40:27:c1:56:ac:fb:de:2c:ce:75:ea:5d:8e:93:e7:
         15:78:7f:9a:da:7c:eb:53:a4:0a:5b:b3:54:0e:ef:2d:55:bd:
         94:7b:5b:a3:7c:84:19:cd:27:00:8e:dd:03:75:8c:e6:17:7e:
         9b:b2:27:1b:3a:ac:cc:d8:c3:a4:46:94:e4:12:9c:de:35:c1:
         42:d3:df:39:6b:c2:85:19:5c:2a:c9:79:b3:b0:d0:36:f2:17:
         12:56:cf:a6:02:27:c1:b9:e6:50:72:41:7a:43:6d:5a:8f:6a:
         68:da:1a:4b:2e:3a:bb:40:47:10:30:2b:74:c6:3d:26:34:5e:
         a6:ab:e8:8a:98:fa:b0:24:e6:7d:29:8b:44:db:78:82:22:81:
         c9:fd:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org