Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130382e302f32322d3234203d3e20323633303733.roa
File:                     3138362e3233332e3130382e302f32322d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          bPyxGl8AgfDFwAeu91Sd4HWS/bR2Mnudf0iB/rxjnkM=
Subject key identifier:   4D:36:72:1B:BF:18:0A:FD:D1:34:27:71:FE:59:05:8E:EC:57:42:6C
Certificate issuer:       /CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
Certificate serial:       0D14CF5991F898DF49A7A152A6A68D3FFA752FEF
Authority key identifier: AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130382e302f32322d3234203d3e20323633303733.roa
Signing time:             Sat 23 Apr 2022 14:00:16 +0000
ROA not before:           Sat 23 Apr 2022 13:55:16 +0000
ROA not after:            Sat 22 Apr 2023 14:00:16 +0000
asID:                     263073
IP address blocks:        186.233.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:14:cf:59:91:f8:98:df:49:a7:a1:52:a6:a6:8d:3f:fa:75:2f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Validity
            Not Before: Apr 23 13:55:16 2022 GMT
            Not After : Apr 22 14:00:16 2023 GMT
        Subject: CN=4D36721BBF180AFDD1342771FE59058EEC57426C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:ea:20:1a:fc:2b:3f:0f:9e:6b:65:49:f9:
                    73:f0:4b:fa:dd:be:61:ad:8c:59:00:89:14:93:41:
                    a0:32:03:92:6a:5d:79:3c:0f:4d:91:b4:d6:00:77:
                    be:0a:6f:cc:4e:65:56:4c:16:b0:64:df:bf:cf:d6:
                    54:ae:ea:10:a7:8c:62:a7:1a:ac:c6:d7:e7:f0:79:
                    2c:13:46:ba:36:f2:d5:56:38:15:16:8b:8d:a4:92:
                    5a:d6:f1:82:6b:48:e6:81:8a:1b:85:d4:fd:5e:bb:
                    8f:b2:21:91:67:ba:1c:79:1d:e1:5b:3d:83:a0:f2:
                    76:d9:a7:a9:65:ad:d5:3e:58:6e:89:c6:c0:0a:07:
                    74:f0:46:72:71:a2:a6:7a:ac:cf:b7:a1:6c:4f:13:
                    db:3f:52:ba:ce:d8:f2:02:e3:fa:1b:18:bc:5c:23:
                    4f:1d:b1:79:38:85:69:3e:3b:d0:eb:2d:4a:b5:22:
                    a1:24:b6:17:7c:df:6c:07:63:71:be:83:94:82:fd:
                    c5:6d:f7:b1:7d:56:1c:63:4e:08:c9:f6:61:a0:29:
                    28:86:93:f3:c3:cb:73:77:4a:0f:58:23:e2:af:d8:
                    9f:c0:0d:4e:ce:05:51:7c:de:fc:97:be:40:25:f9:
                    34:f1:09:c9:e4:55:fe:b4:08:08:df:51:4f:c5:1f:
                    f8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:36:72:1B:BF:18:0A:FD:D1:34:27:71:FE:59:05:8E:EC:57:42:6C
            X509v3 Authority Key Identifier:
                keyid:AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130382e302f32322d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:af:aa:bd:4c:ff:38:d2:0f:23:20:02:d6:1c:3a:13:00:
         c4:06:94:a2:65:b1:c0:ec:10:36:20:c8:9a:08:42:78:99:d7:
         4b:f4:66:a4:4b:c4:90:2d:9a:32:14:26:c8:58:bc:43:e7:9e:
         99:58:fb:9e:cd:f6:81:fc:a8:c3:c3:63:1f:af:48:ce:17:62:
         c2:ea:21:e7:de:b3:42:3d:06:ef:c7:ef:84:88:2f:cd:a9:ca:
         35:53:f5:db:b9:0b:41:82:1a:a8:8c:39:8e:a0:56:9e:bc:ed:
         58:e8:9b:4a:57:9a:cb:9d:86:cf:ad:c2:52:7f:0b:1c:c6:7d:
         da:6d:e6:36:af:8c:ec:8b:62:29:8b:04:86:b9:76:a6:ac:66:
         8f:d0:be:99:52:17:18:2a:9c:51:c4:1f:26:bc:72:de:2a:81:
         41:50:9d:34:c7:c7:e2:14:21:8f:4f:d6:6a:75:31:81:83:6e:
         d0:9e:fc:31:ee:d2:e6:ac:18:72:92:c7:9b:84:1d:26:a5:4b:
         9f:5e:6a:91:11:e5:4a:ea:a8:b0:9e:bc:49:f4:da:e5:97:3e:
         4d:38:46:07:25:de:8c:ba:c0:27:03:18:aa:c5:5d:24:51:0d:
         b1:3d:19:90:ab:a5:70:e3:aa:ed:63:07:a2:c9:45:d8:28:13:
         e7:39:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:14 2023 by rpki-client on console-fra.rpki-client.org