Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3138362e3232342e3232342e302f32302d3234203d3e203533313731.roa
File:                     3138362e3232342e3232342e302f32302d3234203d3e203533313731.roa (raw, json)
Hash identifier:          aGsXdIYB26JRJb3mmaxbh+/7Nlip71TykJTDBQfnfH4=
Subject key identifier:   8E:EA:AC:D3:CB:15:D0:1A:9B:70:A0:57:AE:40:A6:A1:61:6B:19:73
Certificate issuer:       /CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
Certificate serial:       6FF6D43BB6F9241A021D3861BC929518FBF3489C
Authority key identifier: 9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3138362e3232342e3232342e302f32302d3234203d3e203533313731.roa
Signing time:             Fri 03 May 2024 21:05:10 +0000
ROA not before:           Fri 03 May 2024 21:00:10 +0000
ROA not after:            Fri 02 May 2025 21:05:10 +0000
asID:                     53171
IP address blocks:        186.224.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f6:d4:3b:b6:f9:24:1a:02:1d:38:61:bc:92:95:18:fb:f3:48:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
        Validity
            Not Before: May  3 21:00:10 2024 GMT
            Not After : May  2 21:05:10 2025 GMT
        Subject: CN=8EEAACD3CB15D01A9B70A057AE40A6A1616B1973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:33:91:f3:36:92:09:d6:ce:3e:b7:b9:3b:
                    6c:47:c9:0f:59:19:cb:2a:ce:eb:26:2d:d8:5b:d6:
                    98:ad:22:8a:f5:fb:a7:dd:1c:65:75:b1:23:3f:6a:
                    f7:7d:e6:20:8d:3d:70:2c:ab:97:6a:94:1f:98:d5:
                    e1:67:da:da:31:2b:f5:8f:6a:d8:47:98:f3:f8:34:
                    23:78:56:09:c7:89:ae:da:b0:3c:a7:0c:94:a3:25:
                    de:4c:8a:ea:2e:15:56:83:f0:0c:c0:f5:ac:4c:91:
                    0d:09:7c:62:0c:9a:4c:ab:4b:57:5b:f5:c3:84:bf:
                    26:a0:8d:62:96:d6:34:24:6b:45:aa:9f:d1:98:21:
                    0c:37:0a:7b:18:7c:0b:68:28:5e:d4:9a:6e:1e:32:
                    f4:db:9a:38:96:02:2a:1e:c4:57:f9:fb:4c:64:eb:
                    cb:8a:f3:45:39:b8:28:33:d0:8d:dd:29:d5:ff:d3:
                    08:73:01:ae:4a:0e:8b:cb:f5:28:6b:2c:67:81:8e:
                    69:33:fa:6d:07:a0:f5:84:4b:ba:d9:2d:19:99:5d:
                    5f:ad:19:55:dc:3f:dd:a1:b9:ca:49:ea:23:b8:05:
                    46:1e:6a:43:09:c5:bb:43:7e:aa:70:37:c4:c8:c8:
                    9d:51:81:f9:f9:66:76:27:29:c3:4c:2d:ed:7e:44:
                    fd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EA:AC:D3:CB:15:D0:1A:9B:70:A0:57:AE:40:A6:A1:61:6B:19:73
            X509v3 Authority Key Identifier:
                keyid:9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3138362e3232342e3232342e302f32302d3234203d3e203533313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:2d:3f:61:f3:df:98:2a:37:88:d0:81:61:f4:76:02:1d:2d:
         ae:52:be:7e:7c:14:bf:15:ec:80:94:84:88:cd:33:44:ec:0f:
         44:70:c7:12:f4:80:9d:2d:a7:05:cc:f5:f7:20:43:d9:01:da:
         d4:d6:f2:ae:d5:4f:2c:92:6f:27:cd:36:e0:13:7b:56:5f:76:
         c6:fd:04:9c:e2:66:43:c6:38:78:f8:c3:2c:19:0c:30:d8:4a:
         44:61:de:6f:19:93:37:7f:c6:8b:0a:1f:e5:f3:84:32:40:b2:
         d0:71:21:86:e4:9a:3a:0e:d2:53:81:b4:3d:78:d6:f3:df:03:
         42:c7:b4:08:b1:ae:f0:a6:97:fb:43:ce:23:f1:5e:33:cb:e7:
         8f:28:b9:8f:9c:c2:6f:1d:c3:df:05:eb:6f:9c:be:95:4a:11:
         58:91:78:5f:72:26:0f:61:08:35:42:db:ca:c5:6e:d5:bd:10:
         2a:c9:ff:ef:57:4f:69:c4:1d:3d:4e:b1:4d:41:bc:96:b3:a7:
         c1:34:f6:68:cc:87:e2:ae:8a:b6:c0:cd:5d:e7:f5:e3:f6:d6:
         bd:b8:c1:8e:4a:15:aa:6e:95:f6:f5:bb:d8:ff:35:52:a2:0c:
         de:59:56:8a:c8:24:ce:25:b3:8c:ba:44:69:e1:1c:5e:75:dc:
         f4:b4:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org