Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/3138362e3139352e3137312e302f32342d3234203d3e20323638363638.roa
File:                     3138362e3139352e3137312e302f32342d3234203d3e20323638363638.roa (raw, json)
Hash identifier:          1DDTGdSZjXndFp1ay1SO3QCrqVG1kPvuHgOb7mzgBBw=
Subject key identifier:   EF:AE:95:23:D5:0F:4B:4B:F7:9E:49:B1:00:44:12:53:EC:46:C6:EB
Certificate issuer:       /CN=DC0D8F99AEF084F4413832D5E81267A2B0862ABA
Certificate serial:       2996D74C2675C996D1B12E03EDEE9B4137BB0861
Authority key identifier: DC:0D:8F:99:AE:F0:84:F4:41:38:32:D5:E8:12:67:A2:B0:86:2A:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC0D8F99AEF084F4413832D5E81267A2B0862ABA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/3138362e3139352e3137312e302f32342d3234203d3e20323638363638.roa
Signing time:             Tue 25 Jul 2023 13:18:23 +0000
ROA not before:           Tue 25 Jul 2023 13:13:23 +0000
ROA not after:            Tue 23 Jul 2024 13:18:23 +0000
asID:                     268668
IP address blocks:        186.195.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:96:d7:4c:26:75:c9:96:d1:b1:2e:03:ed:ee:9b:41:37:bb:08:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0D8F99AEF084F4413832D5E81267A2B0862ABA
        Validity
            Not Before: Jul 25 13:13:23 2023 GMT
            Not After : Jul 23 13:18:23 2024 GMT
        Subject: CN=EFAE9523D50F4B4BF79E49B100441253EC46C6EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f3:9e:8f:f3:09:5c:89:a1:17:fb:17:db:04:
                    b4:22:d7:24:fb:ab:6f:e3:a0:43:b7:c3:c9:12:c6:
                    c4:ac:6d:9f:be:ec:d6:15:7a:5e:ec:db:19:f3:13:
                    e6:ad:9b:2c:c8:c7:99:a3:f6:36:12:17:7d:81:af:
                    9e:e3:cd:98:f1:76:d5:ee:b6:0e:e8:1e:6a:f6:62:
                    7b:55:d3:8a:00:a9:4e:02:01:ce:2a:f0:7c:20:39:
                    48:62:7f:40:0a:02:e3:5c:21:74:0a:66:72:99:5a:
                    16:16:9d:8f:f7:74:87:2a:ea:25:58:4a:af:f4:ae:
                    56:af:e9:f1:29:54:ed:b3:fe:3a:35:c4:55:e5:62:
                    4f:44:2d:59:f8:b0:21:1c:79:fe:01:c7:78:ee:a1:
                    5c:a1:01:c3:43:d6:a2:1d:e8:f1:15:64:bc:ec:60:
                    87:14:df:d1:2c:c8:54:92:5b:a7:aa:61:a6:7c:97:
                    04:0a:09:6e:97:6c:72:e7:ff:cd:93:60:06:47:1c:
                    09:31:ca:e8:9b:a8:27:9a:c2:75:b5:cb:ed:89:e7:
                    95:8d:78:11:a2:d3:06:8c:c2:16:6e:c8:3b:64:d7:
                    87:d1:bd:0e:11:8c:db:3d:f9:be:7f:cf:46:ad:db:
                    6d:9a:8b:6c:1a:f4:bd:4e:a4:e2:80:7f:5c:46:e0:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AE:95:23:D5:0F:4B:4B:F7:9E:49:B1:00:44:12:53:EC:46:C6:EB
            X509v3 Authority Key Identifier:
                keyid:DC:0D:8F:99:AE:F0:84:F4:41:38:32:D5:E8:12:67:A2:B0:86:2A:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/DC0D8F99AEF084F4413832D5E81267A2B0862ABA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC0D8F99AEF084F4413832D5E81267A2B0862ABA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/3138362e3139352e3137312e302f32342d3234203d3e20323638363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:49:ee:97:c8:bf:18:9d:5a:f9:80:5f:d1:6e:43:ee:27:76:
         1c:86:3c:19:d0:95:38:4e:89:84:4f:06:1e:9f:f1:af:ed:7a:
         6a:53:97:16:fa:f7:3d:da:f9:a7:cb:2a:21:33:4f:3f:15:b7:
         67:ea:41:a3:d4:e7:3d:4e:a4:c5:5e:5f:e4:c2:78:03:e7:b2:
         c7:21:cf:cf:d0:eb:46:c3:ef:bb:e4:da:08:2a:f0:b5:68:61:
         7e:3f:97:01:81:a7:2d:0c:24:e7:78:54:16:c3:e8:0b:08:71:
         ca:03:8d:e9:8e:84:06:2b:cb:19:30:57:86:1c:25:a8:73:43:
         29:c7:03:0a:d1:14:79:e7:a4:fb:c5:d7:2c:c7:c3:1d:63:1c:
         b2:e9:92:d7:17:b9:a1:af:d7:19:03:13:12:4b:63:ce:09:78:
         ae:4f:93:13:c3:3a:e6:46:fc:45:bc:40:a2:c5:46:fe:75:f4:
         e4:d9:87:00:31:f9:11:e6:bc:c1:18:84:0c:f2:94:45:66:88:
         31:ee:e8:b6:68:24:5b:e6:0b:04:66:cc:ea:58:a4:7d:2a:92:
         ba:4a:cb:e4:b3:3f:09:ac:80:a4:bd:40:7c:38:2a:9c:f7:84:
         26:33:7b:8e:c5:96:34:4b:8d:7a:bb:5f:8b:a2:e1:5b:f2:36:
         2b:7c:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org