Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/3138362e3233332e342e302f32322d3232203d3e20323730383930.roa
File:                     3138362e3233332e342e302f32322d3232203d3e20323730383930.roa (raw, json)
Hash identifier:          XImxKxMKmnsg27uowZ++f2wvg8NZ6ugEldJcYugkaoE=
Subject key identifier:   85:AB:CD:A4:B2:35:7B:9C:BC:58:AC:B5:CD:21:BA:15:D1:2F:28:B4
Certificate issuer:       /CN=E11647E4B666B35334949AAEA25C76EB99109DDF
Certificate serial:       1C45DF578E00A6F259B8CF05116B97D37B008626
Authority key identifier: E1:16:47:E4:B6:66:B3:53:34:94:9A:AE:A2:5C:76:EB:99:10:9D:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E11647E4B666B35334949AAEA25C76EB99109DDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/3138362e3233332e342e302f32322d3232203d3e20323730383930.roa
Signing time:             Tue 04 Jul 2023 12:03:58 +0000
ROA not before:           Tue 04 Jul 2023 11:58:58 +0000
ROA not after:            Tue 02 Jul 2024 12:03:58 +0000
asID:                     270890
IP address blocks:        186.233.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:45:df:57:8e:00:a6:f2:59:b8:cf:05:11:6b:97:d3:7b:00:86:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E11647E4B666B35334949AAEA25C76EB99109DDF
        Validity
            Not Before: Jul  4 11:58:58 2023 GMT
            Not After : Jul  2 12:03:58 2024 GMT
        Subject: CN=85ABCDA4B2357B9CBC58ACB5CD21BA15D12F28B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:60:37:64:f6:7d:84:2c:7d:13:6b:6c:91:
                    fd:04:8a:f2:8a:42:ac:00:c7:97:5d:b5:dc:bc:0c:
                    58:3d:f0:68:c3:43:c9:11:a5:04:8b:49:92:3c:18:
                    55:a2:83:28:a6:4c:c7:a2:d2:d8:88:60:6b:2c:83:
                    db:f3:d8:0a:75:f2:b1:c3:3a:d9:a8:bb:23:00:8b:
                    6a:c5:0c:7a:18:c3:36:e0:44:1d:20:0e:35:fd:6f:
                    b6:1d:fb:10:eb:be:ee:af:ce:fc:eb:a6:a8:a1:34:
                    98:6d:93:46:b2:8b:6b:10:df:80:e5:a6:23:e1:50:
                    38:20:88:9a:6c:5a:43:f1:9f:5d:f2:b6:9e:69:05:
                    20:ff:f4:1c:3b:0c:dc:e9:bc:df:8b:de:82:d6:18:
                    94:2a:20:82:ca:d0:c3:b2:17:c3:71:e5:98:1e:96:
                    30:ee:65:d4:8c:ee:c3:d9:98:ef:53:54:9e:ee:1f:
                    50:06:66:08:2a:a1:af:53:2b:62:89:e6:d0:f7:9c:
                    cc:34:44:02:15:54:ae:a4:fc:d9:66:64:3b:41:25:
                    72:be:48:b0:9c:63:48:dd:28:ef:6d:d2:16:57:79:
                    9b:e4:14:da:fe:e3:96:ec:4c:ab:5c:f7:71:38:fc:
                    42:0e:fc:21:2c:7a:75:c9:d0:8a:b0:5f:2c:d8:2e:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AB:CD:A4:B2:35:7B:9C:BC:58:AC:B5:CD:21:BA:15:D1:2F:28:B4
            X509v3 Authority Key Identifier:
                keyid:E1:16:47:E4:B6:66:B3:53:34:94:9A:AE:A2:5C:76:EB:99:10:9D:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/E11647E4B666B35334949AAEA25C76EB99109DDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E11647E4B666B35334949AAEA25C76EB99109DDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/3138362e3233332e342e302f32322d3232203d3e20323730383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:a4:b3:57:ea:37:f8:35:c9:1a:fa:fc:ba:df:ee:87:c9:e6:
         78:e7:ee:bc:7b:dd:65:e2:18:df:7e:7f:7c:ec:67:b5:24:19:
         c7:86:40:1b:69:cc:d7:c5:a4:4b:01:27:03:fb:b3:a2:cc:c9:
         7d:74:fc:d7:b5:dc:bd:e1:54:d8:03:eb:92:f4:5f:9f:b6:a5:
         23:e2:d1:b2:58:db:be:28:10:0e:0b:5d:bb:aa:37:ff:91:fa:
         59:c7:24:ec:1c:4f:96:15:ff:11:57:29:08:f1:79:98:dc:23:
         44:f0:be:c1:f7:16:92:19:c6:d6:e0:6b:58:dc:61:c7:50:06:
         06:41:4b:1c:e8:5f:1f:c4:be:05:11:1c:a8:b3:dc:d7:a0:aa:
         bc:21:81:6a:09:5e:6f:0d:99:a5:88:ad:e1:27:5b:f4:1f:03:
         dd:67:6b:61:5c:98:ac:9c:c2:af:a1:78:31:8e:ed:ff:6e:dc:
         b1:ae:28:b9:ff:82:bc:dd:ea:ec:da:3e:fd:14:70:d9:60:38:
         db:94:80:5b:e4:08:25:e0:4c:8d:a0:f3:8e:4d:65:00:80:4c:
         47:d2:2b:44:e6:2c:10:7b:12:06:9f:92:57:75:67:79:8e:3f:
         0b:cf:a7:cf:2d:52:63:a5:3c:d3:d8:37:7e:1b:ed:eb:b1:64:
         40:84:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org