Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3138362e3233332e35372e302f32342d3234203d3e20323633303639.roa
File:                     3138362e3233332e35372e302f32342d3234203d3e20323633303639.roa (raw, json)
Hash identifier:          DA/CA3bJBIkvWVeMD8sJuzOMF7Qar9l4DnSMBdKh9Ns=
Subject key identifier:   24:39:1D:7E:21:C4:59:71:01:91:72:35:DC:25:42:E5:2F:21:8B:E7
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       76786EC486C748112F01ABFA74A96EFE1806B84D
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3138362e3233332e35372e302f32342d3234203d3e20323633303639.roa
Signing time:             Wed 25 Jan 2023 18:31:38 +0000
ROA not before:           Wed 25 Jan 2023 18:26:38 +0000
ROA not after:            Wed 24 Jan 2024 18:31:38 +0000
asID:                     263069
IP address blocks:        186.233.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:78:6e:c4:86:c7:48:11:2f:01:ab:fa:74:a9:6e:fe:18:06:b8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Jan 25 18:26:38 2023 GMT
            Not After : Jan 24 18:31:38 2024 GMT
        Subject: CN=24391D7E21C4597101917235DC2542E52F218BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bd:d8:93:87:c4:39:c4:61:9d:74:60:4b:6b:
                    88:14:7d:9f:dd:51:93:1d:c4:47:29:22:82:37:cd:
                    07:2e:62:31:ff:ca:4e:3f:81:01:09:d4:5e:43:e1:
                    98:11:6e:48:58:e5:36:d8:4d:b8:33:af:37:f1:d6:
                    b5:e5:f7:4c:b5:eb:3a:1e:fd:1f:8d:8a:96:37:fa:
                    36:d7:be:d3:3f:0b:16:2b:45:92:ab:15:4c:f1:d7:
                    ef:91:9d:c8:a7:df:bc:92:c5:2c:d2:0d:e2:50:38:
                    9d:3f:a9:98:95:4a:e8:f2:4c:75:a1:d5:bb:c9:b7:
                    90:32:e1:e6:9c:81:be:b3:32:6b:8c:cb:47:64:de:
                    0c:81:a8:76:b2:6b:a7:0b:47:66:f7:84:85:ed:2c:
                    9b:e5:f6:e7:ab:38:fb:69:44:93:7d:f0:b5:57:48:
                    f7:6a:4b:5b:2b:39:c3:77:53:ce:d6:56:b6:08:56:
                    af:2c:c5:e1:a8:fb:8b:6d:8c:db:20:0f:e4:d2:a8:
                    7f:60:ca:84:c2:91:dd:40:6b:cf:6f:b6:c2:ab:41:
                    fa:d2:3a:41:25:b9:ab:ee:1b:80:96:eb:8a:8a:9d:
                    3c:3b:33:20:88:35:2e:9f:1c:40:f0:17:b7:fd:82:
                    b6:94:0e:52:c9:d2:64:d3:c0:28:a8:ee:79:20:9d:
                    49:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:39:1D:7E:21:C4:59:71:01:91:72:35:DC:25:42:E5:2F:21:8B:E7
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3138362e3233332e35372e302f32342d3234203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:a1:9f:ca:06:41:4a:f9:6c:98:26:28:f2:50:3a:b5:c9:8c:
         f2:b9:3e:c6:8f:46:4e:be:29:50:3a:34:b1:39:d6:26:20:f6:
         af:13:09:a5:56:25:eb:94:3b:39:c1:f1:49:f0:7d:54:5a:7b:
         6d:39:31:d3:a1:20:a7:66:15:f5:b5:30:77:32:19:6f:75:d1:
         21:dd:54:cf:18:83:c7:3e:77:55:dd:cb:28:f6:dc:7d:48:b2:
         b8:a3:f4:d4:b6:dc:4b:f8:02:84:4e:7b:0c:f7:ac:2d:bb:c5:
         c2:ba:8c:ee:4d:3b:2c:88:d9:88:fa:db:ac:34:9d:b5:9c:22:
         8a:cf:d9:d5:84:00:e7:1a:4c:56:ba:68:2c:6c:2c:b5:41:32:
         bb:81:12:b0:0c:8c:d7:e9:94:a8:29:03:df:2a:e4:a5:11:dc:
         62:f9:26:4e:12:d7:e8:74:6f:0a:a5:69:69:8b:75:80:cd:85:
         09:99:60:ac:a8:5b:6f:05:1b:29:21:4e:e5:f0:10:6c:70:40:
         48:61:cf:65:40:46:4b:33:ae:eb:4c:bd:79:e2:eb:57:9e:9f:
         03:0d:ab:70:fd:3f:5a:db:5f:74:90:35:8c:1d:ed:2f:70:72:
         6b:e6:cc:29:58:8d:e9:b8:09:d1:d8:dc:18:b8:17:87:0c:83:
         96:f0:85:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org