Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/3138362e3233332e342e302f32332d3233203d3e20323730383930.roa
File:                     3138362e3233332e342e302f32332d3233203d3e20323730383930.roa (raw, json)
Hash identifier:          UO+G3hPn1CN/KsmOq1XvVE64uNASWpskehcg6exHDtk=
Subject key identifier:   07:12:C5:C7:46:FA:35:2D:CB:66:47:86:F6:7D:E9:BF:7C:39:51:D0
Certificate issuer:       /CN=E11647E4B666B35334949AAEA25C76EB99109DDF
Certificate serial:       01A069D51C9AEA7B06D65B1162BEC871FCCB6534
Authority key identifier: E1:16:47:E4:B6:66:B3:53:34:94:9A:AE:A2:5C:76:EB:99:10:9D:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E11647E4B666B35334949AAEA25C76EB99109DDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/3138362e3233332e342e302f32332d3233203d3e20323730383930.roa
Signing time:             Sun 24 Sep 2023 12:56:23 +0000
ROA not before:           Sun 24 Sep 2023 12:51:23 +0000
ROA not after:            Sun 22 Sep 2024 12:56:23 +0000
asID:                     270890
IP address blocks:        186.233.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:69:d5:1c:9a:ea:7b:06:d6:5b:11:62:be:c8:71:fc:cb:65:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E11647E4B666B35334949AAEA25C76EB99109DDF
        Validity
            Not Before: Sep 24 12:51:23 2023 GMT
            Not After : Sep 22 12:56:23 2024 GMT
        Subject: CN=0712C5C746FA352DCB664786F67DE9BF7C3951D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:43:68:04:2a:23:5b:d2:af:68:06:81:3f:42:
                    5b:a4:f0:86:02:46:c5:26:de:91:21:97:57:5b:60:
                    89:d5:03:4a:5a:0d:c0:25:5f:ba:81:63:be:ab:16:
                    48:da:de:31:c2:fd:99:9d:eb:f7:57:ae:fd:6b:e6:
                    e2:d9:f6:9f:19:da:97:23:50:0b:8e:35:7c:33:52:
                    eb:1c:94:cc:97:20:ce:d3:20:09:9c:33:51:36:0b:
                    12:f8:86:67:91:2c:52:93:83:a2:31:6c:86:7d:a2:
                    bb:eb:b3:2c:a8:c7:66:48:40:df:c6:f4:a8:2a:80:
                    a4:43:1d:79:28:e2:19:08:00:0a:b1:3d:7f:f9:f8:
                    00:cb:31:85:e6:6a:a7:57:11:ec:55:1a:8a:d8:ee:
                    68:7d:c4:6b:47:fc:65:73:c6:98:8d:dc:37:a7:49:
                    66:d0:d7:b8:fd:99:48:5c:fb:fd:ef:c4:b4:9b:bb:
                    56:a6:db:87:a7:cc:34:39:e8:56:c2:d7:21:d3:38:
                    0a:84:bf:09:d3:e1:73:7c:fb:b3:f7:e7:8e:58:39:
                    8a:9d:af:40:84:ac:85:eb:b2:9a:10:57:75:cd:d4:
                    9b:34:77:05:88:5e:9a:34:80:e1:53:b6:19:43:b0:
                    c7:b4:3e:9d:73:20:f4:ee:f3:71:db:0a:11:43:87:
                    e0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:12:C5:C7:46:FA:35:2D:CB:66:47:86:F6:7D:E9:BF:7C:39:51:D0
            X509v3 Authority Key Identifier:
                keyid:E1:16:47:E4:B6:66:B3:53:34:94:9A:AE:A2:5C:76:EB:99:10:9D:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/E11647E4B666B35334949AAEA25C76EB99109DDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E11647E4B666B35334949AAEA25C76EB99109DDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/3138362e3233332e342e302f32332d3233203d3e20323730383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:0e:3b:bc:82:3b:aa:55:4f:5c:94:e4:05:53:2f:70:eb:21:
         f2:81:0f:28:20:a9:4b:d5:f2:de:3f:70:aa:5e:5d:6f:04:66:
         60:91:58:03:95:74:cb:cb:92:84:5c:e9:6c:18:45:25:ff:2e:
         79:4a:35:d9:21:0f:d1:89:96:92:ee:24:eb:06:2e:24:aa:59:
         31:b7:5b:c9:d4:9d:ab:4a:22:2c:40:2f:c7:b2:96:a4:a0:c6:
         79:47:b4:a2:1d:41:26:93:b3:d5:d3:95:7f:4f:59:ff:82:cd:
         b7:14:4f:3a:db:60:ff:22:8c:a6:a9:2a:80:46:d7:cd:50:07:
         62:59:b4:ea:15:0e:c7:6e:44:d5:ab:b1:cb:5c:a7:c5:4b:0c:
         55:90:fb:ba:71:52:fd:d8:ec:04:f2:40:ae:73:0c:c3:41:6d:
         ec:6c:50:12:db:80:13:bc:41:90:62:bb:6d:3d:1e:cf:ad:59:
         02:f3:8e:92:b9:0a:ef:b9:3d:17:90:f0:c7:20:ab:e0:26:a3:
         2d:7e:f7:66:3d:37:27:9b:6b:32:dc:b6:03:1d:68:20:2b:36:
         f0:18:d9:8f:48:81:73:94:41:cc:b9:43:aa:24:da:13:62:78:
         77:9e:d0:0b:f1:d9:bf:dc:a1:b7:cd:75:4e:87:b8:71:0a:6e:
         db:31:24:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org