Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3234302e302f32312d3234203d3e203631373435.roa
File:                     3138362e3231392e3234302e302f32312d3234203d3e203631373435.roa (raw, json)
Hash identifier:          KXv5W+PP0T2DzhuxBhPfbMLjvX7Yc1UyZdp4ZJ5V9uI=
Subject key identifier:   8D:8D:4A:C0:3E:8B:4B:DD:5A:74:10:78:14:B3:E7:4B:A0:10:E9:26
Certificate issuer:       /CN=57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465
Certificate serial:       13726973897CA56B03C580D3D121E40C72C09E77
Authority key identifier: 57:BB:F0:FE:6F:45:C3:21:E4:A2:C2:1C:0B:36:82:A7:E8:FD:14:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3234302e302f32312d3234203d3e203631373435.roa
Signing time:             Wed 07 Jun 2023 17:14:42 +0000
ROA not before:           Wed 07 Jun 2023 17:09:42 +0000
ROA not after:            Wed 05 Jun 2024 17:14:42 +0000
asID:                     61745
IP address blocks:        186.219.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:72:69:73:89:7c:a5:6b:03:c5:80:d3:d1:21:e4:0c:72:c0:9e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465
        Validity
            Not Before: Jun  7 17:09:42 2023 GMT
            Not After : Jun  5 17:14:42 2024 GMT
        Subject: CN=8D8D4AC03E8B4BDD5A74107814B3E74BA010E926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:0e:de:88:04:5a:bc:54:49:5c:c5:99:5e:
                    b8:3a:17:fd:bd:ed:79:03:4d:f8:d8:bb:cc:63:19:
                    ce:aa:d0:f0:92:35:b4:d5:d0:a3:04:1e:a6:79:b3:
                    2d:ca:b6:c6:ab:0f:cc:f1:df:e2:4c:f5:0e:84:e6:
                    38:d2:89:ab:db:06:82:14:c0:b6:17:de:52:5c:63:
                    58:83:fd:1f:3f:62:d6:af:80:32:32:7d:9c:35:bf:
                    7f:4a:cd:81:30:90:dc:6a:6c:bc:cd:b8:54:4a:66:
                    f1:78:0b:c9:98:a3:f4:dd:bd:34:e6:13:f4:50:7c:
                    13:90:57:7f:dd:cf:ec:1a:09:c4:e7:e9:d3:30:60:
                    a2:7c:53:f7:36:ab:d5:c1:05:22:c8:48:d7:17:03:
                    ec:84:75:1e:2d:fa:60:84:a8:8a:e0:92:5c:ba:d1:
                    40:f3:60:92:75:c6:44:1e:b2:d5:6a:c4:8e:a1:94:
                    f4:1a:15:e6:f4:70:72:ec:d9:3c:54:14:ec:09:9a:
                    73:f8:8e:b0:8e:29:ce:ad:9c:ba:6b:6e:a6:1b:1b:
                    29:d5:3b:32:76:2b:19:49:97:47:5b:2d:0c:d2:22:
                    84:7f:18:be:b4:1c:68:6a:68:a6:a8:30:72:3f:b9:
                    3a:9d:4a:85:d9:92:72:f9:3d:81:87:ba:ee:b0:59:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8D:4A:C0:3E:8B:4B:DD:5A:74:10:78:14:B3:E7:4B:A0:10:E9:26
            X509v3 Authority Key Identifier:
                keyid:57:BB:F0:FE:6F:45:C3:21:E4:A2:C2:1C:0B:36:82:A7:E8:FD:14:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3234302e302f32312d3234203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:de:1b:0d:5b:e0:50:42:2f:de:dd:0f:08:80:f4:96:02:41:
         3d:e4:a4:eb:ef:e8:e4:67:e1:a3:79:71:9f:47:d0:e2:21:f5:
         63:e4:16:c7:09:76:63:01:83:17:dd:a2:7f:9f:4f:46:73:e8:
         d6:28:e0:3c:8f:4a:86:8c:7e:40:9b:81:13:2e:44:92:c6:08:
         22:0b:57:cb:3d:8e:99:7d:57:c0:0d:f8:09:82:3e:4b:80:a6:
         65:9b:e6:ba:bb:e2:f4:b9:45:ce:0b:de:d8:bb:d2:8b:83:ed:
         6d:88:8c:e3:53:a7:c6:00:1c:b2:14:34:01:71:bb:9a:57:2e:
         d2:60:57:58:85:bb:de:5c:ab:6a:53:3f:01:f5:4c:89:4d:3b:
         cd:f8:f8:f0:de:a9:72:38:9f:84:ea:a9:8d:b6:71:48:46:bb:
         60:53:8e:b1:7e:34:d0:f0:84:8e:b3:ef:52:75:5d:12:a3:6e:
         1c:40:00:82:6d:3f:b5:b1:4b:1e:d2:cb:54:f4:8a:0b:f1:b2:
         3a:cd:a8:b6:09:24:1a:51:6f:96:00:a1:b5:df:bc:e4:26:71:
         27:99:0d:07:ec:01:23:f6:ba:4d:5d:8a:28:6c:28:f6:fb:2a:
         8a:c7:3c:8d:bd:8f:b2:00:bc:81:6c:5a:86:0c:58:15:90:dd:
         33:e4:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org