Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/3138362e3139342e3136342e302f32322d3234203d3e20323730373635.roa
File:                     3138362e3139342e3136342e302f32322d3234203d3e20323730373635.roa (raw, json)
Hash identifier:          1arOAWdDV5XKblGtyuCtj63U8kWn6Cn4CvFqKGx64PE=
Subject key identifier:   4D:E7:1E:8C:0D:94:61:B9:86:54:6A:BE:FC:8D:4F:C4:B4:FC:16:1A
Certificate issuer:       /CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
Certificate serial:       596CAD1F8F6D17A7C1154830E7AB4C0D4B1ED754
Authority key identifier: EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/3138362e3139342e3136342e302f32322d3234203d3e20323730373635.roa
Signing time:             Mon 15 May 2023 02:00:01 +0000
ROA not before:           Mon 15 May 2023 01:55:01 +0000
ROA not after:            Wed 15 May 2024 02:00:01 +0000
asID:                     270765
IP address blocks:        186.194.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6c:ad:1f:8f:6d:17:a7:c1:15:48:30:e7:ab:4c:0d:4b:1e:d7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
        Validity
            Not Before: May 15 01:55:01 2023 GMT
            Not After : May 15 02:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:96:ff:f2:50:62:56:0a:5c:1a:f8:c8:d2:ce:
                    4d:76:06:ee:9b:71:e2:c4:43:56:61:36:7c:93:b0:
                    4f:b6:47:9c:ec:49:f1:96:ae:f7:e9:f5:5d:05:02:
                    68:dc:4a:6e:88:26:c9:07:58:31:ad:2d:53:c0:1f:
                    41:0e:f5:1b:99:26:86:71:16:5f:63:2e:13:b8:6a:
                    fe:8e:ba:b2:71:98:44:c2:18:19:74:cd:6b:af:16:
                    8d:1e:52:c7:9f:9a:26:ca:60:49:d2:ee:b7:bf:e3:
                    ee:09:b5:84:e1:d4:16:82:31:6a:7c:81:9e:cf:ba:
                    e6:1b:a4:21:c1:3e:fb:22:a2:e2:6c:7f:27:3d:21:
                    95:4a:11:f0:45:c9:53:10:81:cf:2b:4c:fe:46:1d:
                    e4:3f:d2:67:43:24:98:f3:d7:b3:96:04:d2:5f:fc:
                    04:9d:8e:cc:02:5d:68:f6:10:73:0f:0e:a2:06:85:
                    68:69:e7:84:ef:84:c1:4f:b8:16:e3:55:42:6e:09:
                    70:bd:50:2f:23:87:58:ad:12:7f:00:6a:2e:7f:bd:
                    40:13:1f:1a:de:31:71:c7:8c:db:43:2e:59:b8:f1:
                    ef:cd:e4:10:88:4c:32:4b:e4:13:20:18:41:6c:e2:
                    1c:20:af:e4:56:12:1e:71:d2:70:3b:5c:da:b7:2f:
                    0a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E7:1E:8C:0D:94:61:B9:86:54:6A:BE:FC:8D:4F:C4:B4:FC:16:1A
            X509v3 Authority Key Identifier:
                keyid:EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/3138362e3139342e3136342e302f32322d3234203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:dc:b1:77:56:a2:37:55:e6:8f:97:f6:a0:ce:e0:29:f9:66:
         d3:ae:8d:20:c8:f6:92:8a:77:61:9f:16:af:77:4e:d5:47:51:
         bd:dd:20:c7:1c:5f:c4:1a:c8:33:6a:bb:1a:89:b4:24:ce:5c:
         f3:e6:38:b2:ba:be:83:66:0a:31:7f:5a:13:92:9f:02:1c:4c:
         f8:52:70:c8:62:92:e2:c3:73:47:5c:e4:90:0e:58:35:23:67:
         c0:73:6c:9e:81:19:3f:80:4c:15:be:30:a7:f9:f5:31:e4:94:
         a5:03:3c:eb:2e:ea:60:fc:8f:0b:0c:9b:22:ba:94:1b:ef:86:
         d0:c5:4e:98:66:50:cd:d4:50:26:b3:29:dc:d8:b5:d5:fe:a9:
         e0:e6:f4:a3:3a:11:9c:93:28:bc:0b:c7:7b:0c:a9:78:0d:9e:
         f1:cf:48:fa:35:62:09:ff:a1:6f:cc:5c:5a:38:57:ff:9b:64:
         ec:a2:a7:48:1c:22:b2:8f:71:7a:e0:40:12:64:3e:aa:96:83:
         5a:df:a9:29:21:3f:79:72:b6:86:5d:36:a5:fa:d4:54:70:96:
         49:9d:f4:88:80:93:50:22:d0:e0:3d:14:5e:d3:2e:a5:3a:e8:
         a4:0c:b9:26:d9:34:36:94:49:ba:75:98:67:7f:52:55:56:46:
         27:5d:97:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org