Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/3138362e3235302e302e302f32322d3234203d3e20323632383031.roa
File:                     3138362e3235302e302e302f32322d3234203d3e20323632383031.roa (raw, json)
Hash identifier:          DRFVW3yye9PRWr2OM9htc9O+yoy9/N/5qdUsGSchM5c=
Subject key identifier:   BA:F9:BA:A1:51:DE:9C:6D:17:1D:A3:9C:F4:BE:56:60:F7:5E:B8:75
Certificate issuer:       /CN=7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6
Certificate serial:       7CBD47E6A8AE3DEADAD65D633011D14E0AC16D5A
Authority key identifier: 7D:45:E1:D0:EB:BF:C0:C5:8C:5B:59:B5:14:11:98:B5:B3:2C:99:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/3138362e3235302e302e302f32322d3234203d3e20323632383031.roa
Signing time:             Sun 28 Jan 2024 00:17:56 +0000
ROA not before:           Sun 28 Jan 2024 00:12:56 +0000
ROA not after:            Sun 26 Jan 2025 00:17:56 +0000
asID:                     262801
IP address blocks:        186.250.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bd:47:e6:a8:ae:3d:ea:da:d6:5d:63:30:11:d1:4e:0a:c1:6d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6
        Validity
            Not Before: Jan 28 00:12:56 2024 GMT
            Not After : Jan 26 00:17:56 2025 GMT
        Subject: CN=BAF9BAA151DE9C6D171DA39CF4BE5660F75EB875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:59:a2:c5:bc:cf:54:fc:7c:66:1f:89:a9:
                    3e:d7:1f:7f:75:28:36:32:0c:fc:6f:f2:08:00:e2:
                    18:0e:55:0f:9c:36:ef:6c:7b:3c:b4:7c:ad:b3:01:
                    ec:1c:fc:3c:75:1b:51:94:21:dd:8a:72:74:35:d4:
                    4f:84:c7:f9:be:c8:86:fb:7a:84:3a:48:6a:9c:23:
                    0c:bb:9b:61:37:bb:ab:81:a2:d1:ba:31:29:cd:17:
                    68:f5:e3:6c:37:22:d2:95:73:fa:d4:d3:58:60:44:
                    fe:a9:ad:1a:55:cb:0b:0a:00:a8:d3:76:59:02:41:
                    06:7d:ea:a0:cd:bd:99:ae:1a:43:1d:7d:25:b3:08:
                    cb:4f:6a:03:36:12:50:b9:66:ac:ed:ab:71:c8:64:
                    db:42:f7:d0:9d:97:6a:2c:4c:51:69:04:e0:cb:20:
                    9d:bc:b9:6e:eb:ef:ef:07:7e:d8:7c:80:46:65:ec:
                    90:02:97:60:19:5a:db:2a:35:d4:0e:4f:9f:5d:db:
                    7d:1b:f4:f9:86:4f:b3:24:5c:1b:f2:a2:14:36:0f:
                    f7:28:80:cd:29:d5:05:4f:87:e3:ca:31:2b:1a:8d:
                    93:59:91:0b:d3:3a:b9:15:b0:44:83:88:43:93:5f:
                    27:35:c4:69:cb:6a:98:6d:e8:04:f3:71:29:d6:4c:
                    10:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F9:BA:A1:51:DE:9C:6D:17:1D:A3:9C:F4:BE:56:60:F7:5E:B8:75
            X509v3 Authority Key Identifier:
                keyid:7D:45:E1:D0:EB:BF:C0:C5:8C:5B:59:B5:14:11:98:B5:B3:2C:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/3138362e3235302e302e302f32322d3234203d3e20323632383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:f1:53:8f:9b:38:e4:0d:aa:f9:90:0e:bf:2e:53:bd:cf:64:
         f1:9f:2d:5b:53:8e:82:6a:21:89:a7:13:5b:ec:5c:d7:bf:e0:
         0d:c8:81:90:ae:6e:41:55:60:15:80:2c:6c:38:d0:cb:20:9b:
         06:1a:b6:c6:84:ec:64:b7:e2:f6:a2:16:1d:11:24:24:2c:83:
         ac:5a:62:23:56:dc:ab:cf:11:d3:23:22:07:19:2d:c7:a3:ef:
         41:1e:e1:c1:4b:4d:3d:6e:1c:b4:2b:3e:50:9c:2c:37:49:e5:
         1d:d9:f6:b4:bd:0e:a3:97:08:e0:ff:df:26:55:29:c8:eb:00:
         91:e7:c2:c7:c7:e0:ee:de:ea:a2:bf:38:92:d8:d6:16:c6:8b:
         3b:35:a0:8c:1f:a9:c6:11:00:24:d5:42:e6:07:e7:c0:9f:1a:
         86:3a:d9:d4:36:15:2a:48:33:cd:68:a0:c6:e9:06:34:e7:f4:
         35:32:d1:50:9f:2e:07:8c:1e:06:4b:6f:24:f1:51:e5:69:94:
         86:fb:03:60:c7:c4:e3:20:53:41:9d:65:11:22:e3:4f:e5:b2:
         c5:4a:78:4a:64:36:57:3d:3f:cc:db:79:e3:2e:b5:85:fd:0d:
         87:57:8b:e5:f8:46:a5:de:a4:06:cd:db:e8:25:7d:c0:f3:fc:
         ee:02:39:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org