Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/3138362e3233332e362e302f32332d3233203d3e20323730383930.roa
File:                     3138362e3233332e362e302f32332d3233203d3e20323730383930.roa (raw, json)
Hash identifier:          4SAujpEw4XPXBTSciiz6gBe1h3LSnjuVnceSrvCLEW4=
Subject key identifier:   0A:14:E8:DD:6C:F7:F0:00:8D:82:FF:76:15:BF:07:34:00:35:2B:57
Certificate issuer:       /CN=E11647E4B666B35334949AAEA25C76EB99109DDF
Certificate serial:       28C6FFFF3AD3AB0E8D9CD53A06AC85A9166EDF66
Authority key identifier: E1:16:47:E4:B6:66:B3:53:34:94:9A:AE:A2:5C:76:EB:99:10:9D:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E11647E4B666B35334949AAEA25C76EB99109DDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/3138362e3233332e362e302f32332d3233203d3e20323730383930.roa
Signing time:             Sun 24 Sep 2023 12:56:32 +0000
ROA not before:           Sun 24 Sep 2023 12:51:32 +0000
ROA not after:            Sun 22 Sep 2024 12:56:32 +0000
asID:                     270890
IP address blocks:        186.233.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c6:ff:ff:3a:d3:ab:0e:8d:9c:d5:3a:06:ac:85:a9:16:6e:df:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E11647E4B666B35334949AAEA25C76EB99109DDF
        Validity
            Not Before: Sep 24 12:51:32 2023 GMT
            Not After : Sep 22 12:56:32 2024 GMT
        Subject: CN=0A14E8DD6CF7F0008D82FF7615BF073400352B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:a2:f7:17:32:77:c5:9f:6d:d6:b5:75:bb:
                    cf:e5:38:b3:85:92:ab:5d:fd:70:b9:af:f1:6c:69:
                    5f:a6:ba:45:d3:07:d8:8a:1b:ca:eb:00:51:4e:cb:
                    1e:63:2e:d0:e2:c6:63:30:74:00:ca:09:f9:50:cf:
                    9f:5e:1d:60:d5:d0:d6:5b:65:0c:36:db:95:07:2d:
                    e6:a1:bb:5a:ab:e2:dd:e3:2e:ee:59:48:4d:52:8a:
                    c1:4c:bb:5b:3d:3f:ed:28:f9:25:c7:a1:ee:6a:77:
                    17:18:60:15:5f:b8:ac:91:d0:ea:dc:bf:f6:34:9b:
                    6a:45:20:e8:c2:26:97:87:d5:11:65:fb:38:51:cf:
                    32:4e:53:a1:43:7d:49:d0:0e:f0:b3:72:e7:29:08:
                    1a:88:3c:f8:c2:6a:89:b3:1a:c6:ad:c4:1c:e8:04:
                    b1:5b:7b:26:e4:5b:f8:d1:53:15:04:f2:e8:1c:9a:
                    20:d7:e7:92:5d:d5:9f:4a:d2:72:17:df:ff:cb:fa:
                    22:86:d0:49:e8:b0:0b:38:16:b0:f2:e9:a5:a8:d8:
                    36:1b:49:40:69:fd:1c:66:5f:16:44:02:cc:0d:f3:
                    fa:cb:dd:f9:43:11:e4:b7:b0:5a:c8:d4:e9:b0:5f:
                    38:83:74:2f:72:24:0d:10:31:71:ce:65:f4:ca:d8:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:14:E8:DD:6C:F7:F0:00:8D:82:FF:76:15:BF:07:34:00:35:2B:57
            X509v3 Authority Key Identifier:
                keyid:E1:16:47:E4:B6:66:B3:53:34:94:9A:AE:A2:5C:76:EB:99:10:9D:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/E11647E4B666B35334949AAEA25C76EB99109DDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E11647E4B666B35334949AAEA25C76EB99109DDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/3138362e3233332e362e302f32332d3233203d3e20323730383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:2a:ab:e7:57:25:e7:f1:bd:38:2d:68:dc:ae:92:22:43:08:
         0f:c9:bb:cf:dc:a2:fb:d1:70:c0:8f:18:f9:0e:0a:e1:be:99:
         af:99:9c:85:f0:fb:20:69:f6:68:fd:df:f9:e6:32:d2:8d:a2:
         b9:21:97:4f:8f:99:13:d3:a4:81:98:2f:c8:b2:bc:b1:44:70:
         e9:87:73:91:1a:c5:36:52:55:f7:51:1b:c3:51:40:a4:ca:c0:
         d8:0a:48:24:83:1b:d5:e7:41:6b:a9:e9:97:44:1b:df:34:54:
         21:bc:07:69:cb:63:31:b9:1c:59:64:8e:f8:a5:28:90:9a:6f:
         d8:db:b2:30:73:f5:c9:89:63:a8:04:4a:c6:41:de:53:e7:b6:
         2e:e1:55:c7:04:94:0b:fd:d2:4c:e5:15:4d:44:a0:fb:68:7f:
         6b:ca:29:03:aa:f8:44:b4:10:ba:26:7d:40:02:71:15:fd:cd:
         00:4b:4c:df:ec:92:e0:76:4a:cf:fc:a2:a2:ab:1a:d1:52:21:
         80:ed:5c:a5:7d:97:28:62:99:cd:52:09:63:18:0b:91:5e:48:
         8b:f3:54:2a:71:c0:22:d5:73:e7:79:49:c2:75:67:0c:e6:79:
         7f:41:a3:81:f0:ca:c1:e3:d0:07:8b:16:35:31:c4:75:5b:42:
         9d:c3:61:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org