Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e3130382e302f32322d3234203d3e20323632383035.roa
File:                     3138362e3235302e3130382e302f32322d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          cCCHs9UlgKpO+VsSq9sEJcksLRcA4IqNdPVlRXXBlrs=
Subject key identifier:   A5:6F:F1:82:F1:24:A9:CF:7D:40:92:6A:D7:E5:79:38:CF:57:BC:EC
Certificate issuer:       /CN=29B71DADE937BB0D8F9E2E96A8069DE115FCBC68
Certificate serial:       53E04386D1205543F4DD2B2966BF6DE6D8AFF73C
Authority key identifier: 29:B7:1D:AD:E9:37:BB:0D:8F:9E:2E:96:A8:06:9D:E1:15:FC:BC:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29B71DADE937BB0D8F9E2E96A8069DE115FCBC68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e3130382e302f32322d3234203d3e20323632383035.roa
Signing time:             Fri 08 Mar 2024 20:10:03 +0000
ROA not before:           Fri 08 Mar 2024 20:05:03 +0000
ROA not after:            Fri 07 Mar 2025 20:10:03 +0000
asID:                     262805
IP address blocks:        186.250.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e0:43:86:d1:20:55:43:f4:dd:2b:29:66:bf:6d:e6:d8:af:f7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B71DADE937BB0D8F9E2E96A8069DE115FCBC68
        Validity
            Not Before: Mar  8 20:05:03 2024 GMT
            Not After : Mar  7 20:10:03 2025 GMT
        Subject: CN=A56FF182F124A9CF7D40926AD7E57938CF57BCEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:9f:64:d1:9b:ab:41:ad:26:bf:3c:dc:a8:
                    63:f0:78:be:ed:a7:dd:4e:70:c9:74:6c:9e:e7:ee:
                    03:53:7d:5c:cf:03:23:40:6d:f4:66:a0:d6:43:03:
                    9a:79:64:30:7d:82:37:9e:75:0f:5b:e4:2f:f0:9b:
                    e2:73:4c:40:b5:6b:54:69:41:83:09:c9:e6:2b:98:
                    3f:87:47:5b:09:3c:c5:56:2f:f6:8b:d2:26:dd:dd:
                    57:d8:38:c6:c2:79:a4:84:4d:62:b3:81:4f:23:7d:
                    f7:b7:59:f4:b5:e1:e9:09:bd:bc:6d:ad:7c:1c:5d:
                    e2:f0:b3:99:36:79:06:95:87:fb:65:a4:4c:07:4a:
                    68:a5:e1:00:6e:82:c7:b8:a6:7b:56:bd:24:58:96:
                    b0:3b:50:69:da:33:e2:1b:72:58:79:8a:f5:7a:6d:
                    1f:f8:40:5f:96:48:5f:87:0f:58:3d:b0:36:3b:83:
                    9e:47:56:c3:ad:ce:ff:f9:45:2d:ab:e5:4b:e1:2f:
                    8a:81:9a:78:dc:2b:b8:94:73:27:a5:e0:a5:cf:26:
                    04:ff:bd:7f:d0:24:ad:2d:a8:78:5c:53:6c:a5:87:
                    41:40:df:87:58:e4:9b:c3:6b:ea:55:74:f6:f0:77:
                    78:da:01:71:4f:88:64:5f:75:bc:9b:7a:5a:92:ae:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6F:F1:82:F1:24:A9:CF:7D:40:92:6A:D7:E5:79:38:CF:57:BC:EC
            X509v3 Authority Key Identifier:
                keyid:29:B7:1D:AD:E9:37:BB:0D:8F:9E:2E:96:A8:06:9D:E1:15:FC:BC:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/29B71DADE937BB0D8F9E2E96A8069DE115FCBC68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29B71DADE937BB0D8F9E2E96A8069DE115FCBC68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e3130382e302f32322d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:40:d6:e1:65:3b:2c:4f:10:52:8e:39:1b:c6:2f:e2:51:82:
         0c:16:f3:18:f0:47:50:4b:b0:fb:1e:ad:d1:8a:54:8e:c1:a2:
         7e:11:e8:fc:d3:80:26:d7:e6:cd:b7:98:65:5d:2f:e7:7c:9e:
         3a:61:0c:fd:3f:ee:a9:15:eb:b2:8a:cf:23:c6:e4:04:63:13:
         6d:a2:61:1e:52:dd:2b:38:bd:cd:29:45:95:68:cb:cf:0f:59:
         69:8e:0d:f5:e2:72:63:1e:b5:69:70:d4:b5:9a:af:d5:fe:bc:
         11:03:38:90:3f:44:60:c4:e2:6c:30:69:f6:83:ff:f2:ea:7d:
         ce:f0:3e:86:ee:ac:f0:5c:11:c4:3e:11:9f:e6:04:f1:6b:20:
         e3:16:15:e8:6e:b0:50:08:12:5d:55:b3:35:6f:1f:79:4a:3c:
         c6:fe:ee:04:86:1f:54:48:a3:66:36:3b:b1:1e:4b:03:a3:55:
         97:b9:53:c7:ee:a1:3c:dc:7c:27:5d:50:4b:76:b1:4a:48:30:
         1f:21:3d:16:95:1b:0d:8a:8a:af:b4:01:a9:f9:a5:83:8e:dd:
         76:80:ad:71:69:29:98:3f:39:c7:83:90:a6:6b:ee:0f:d5:30:
         2e:99:6e:1c:af:cc:8a:16:ef:ed:5e:b8:d4:12:28:25:a0:29:
         a7:36:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org