Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/3138362e3235302e302e302f32322d3234203d3e20323632383031.roa
File:                     3138362e3235302e302e302f32322d3234203d3e20323632383031.roa (raw, json)
Hash identifier:          NSNl5ke7OwFoxSuUrP3iReH8aNZZykZs0g6JM62lRqI=
Subject key identifier:   60:9F:D3:26:72:F4:2B:6B:46:48:30:8F:86:01:FC:20:C0:A2:3F:AC
Certificate issuer:       /CN=29016D1E818D315FCD2DAEEADFBC589ED5EA9B95
Certificate serial:       50136DCEFF0A1301B452AED9033584AC4C957181
Authority key identifier: 29:01:6D:1E:81:8D:31:5F:CD:2D:AE:EA:DF:BC:58:9E:D5:EA:9B:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/3138362e3235302e302e302f32322d3234203d3e20323632383031.roa
Signing time:             Thu 04 Apr 2024 08:48:05 +0000
ROA not before:           Thu 04 Apr 2024 08:43:05 +0000
ROA not after:            Thu 03 Apr 2025 08:48:05 +0000
asID:                     262801
IP address blocks:        186.250.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:13:6d:ce:ff:0a:13:01:b4:52:ae:d9:03:35:84:ac:4c:95:71:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29016D1E818D315FCD2DAEEADFBC589ED5EA9B95
        Validity
            Not Before: Apr  4 08:43:05 2024 GMT
            Not After : Apr  3 08:48:05 2025 GMT
        Subject: CN=609FD32672F42B6B4648308F8601FC20C0A23FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:7f:ae:17:ce:8b:00:0d:99:7c:9f:97:1d:
                    29:11:eb:ef:5d:c8:c8:55:75:af:c8:0d:ff:3b:1e:
                    8e:8f:1a:46:59:4b:d2:85:b6:1b:d4:e1:75:cf:69:
                    26:7c:de:ba:1d:0f:ec:af:f6:8f:4b:3d:8b:0e:31:
                    d8:0a:70:93:8f:a2:e5:0a:5f:7e:ca:b0:2b:ed:cb:
                    5b:54:de:3f:39:73:cf:d8:b2:58:26:f6:b5:5b:38:
                    b2:94:4f:c5:14:13:9d:ec:d5:ce:61:9f:eb:1a:3d:
                    61:9b:f5:37:85:f3:41:11:50:5d:f4:4a:db:7b:5b:
                    08:10:65:9c:f8:81:8e:96:3d:db:1e:31:3e:d7:7f:
                    bf:2e:a6:94:9e:e2:dc:34:3d:5e:e7:c9:f5:75:0b:
                    41:7c:6f:09:e9:34:5a:f0:17:1f:29:f7:f4:eb:4b:
                    c4:43:d9:0d:61:21:7a:43:82:50:34:c9:c0:24:d0:
                    1f:da:d6:72:9d:19:8d:49:a7:b2:9a:15:fd:e5:43:
                    b6:83:1c:ca:8c:d7:d0:87:c0:86:75:18:32:39:bb:
                    b2:e9:4c:a2:51:3a:f2:8a:84:fc:f3:f0:dc:f6:1f:
                    1f:ec:c1:d7:52:f4:e3:83:24:25:19:e6:bd:8b:07:
                    11:f7:05:94:8c:11:bd:cf:c4:e0:39:a8:c8:e9:af:
                    4e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9F:D3:26:72:F4:2B:6B:46:48:30:8F:86:01:FC:20:C0:A2:3F:AC
            X509v3 Authority Key Identifier:
                keyid:29:01:6D:1E:81:8D:31:5F:CD:2D:AE:EA:DF:BC:58:9E:D5:EA:9B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/3138362e3235302e302e302f32322d3234203d3e20323632383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:95:8a:f5:6d:67:e4:43:cc:a6:67:0b:fb:d7:12:35:d4:c5:
         16:33:46:ea:12:af:a4:fc:fd:97:5a:99:21:c3:52:b1:12:74:
         14:00:7d:94:ce:50:44:19:31:d5:23:f2:b7:62:4c:60:dc:b6:
         63:cc:98:8a:c2:68:be:35:46:02:13:a8:f7:66:72:a6:4b:67:
         c7:36:7e:34:fb:9f:c2:a4:40:59:03:97:5c:d9:73:95:b4:47:
         9d:cc:3d:f2:24:64:85:aa:33:8c:8f:83:3c:f3:69:e8:58:de:
         3e:df:83:ba:a3:8e:68:cc:05:a6:0e:ce:08:ce:10:f3:c9:1a:
         47:c2:a1:3d:00:ab:cb:74:de:72:ad:f4:02:d1:59:c2:dd:b4:
         54:24:3e:8f:b1:08:5b:5e:c2:5e:16:94:78:ec:5e:27:37:bf:
         15:b6:04:50:e4:ac:8a:16:4a:d6:92:3c:03:c5:43:42:7f:3e:
         ba:95:ce:c2:92:82:fc:61:f8:9d:ba:be:62:b9:c8:36:e5:ee:
         8f:a0:cb:4c:6f:9b:59:5c:05:66:14:29:ed:a3:b6:1f:b8:c1:
         23:61:f4:0d:99:11:a9:22:45:ac:b0:11:a5:bd:9a:d1:6e:0d:
         bc:d1:83:9e:32:b6:59:3b:ae:55:bf:36:b6:01:16:45:7f:0a:
         bf:6e:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 10:21:37 2024 by rpki-client on console-fra.rpki-client.org