Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3235322e302f32332d3233203d3e203631373435.roa
File:                     3138362e3231392e3235322e302f32332d3233203d3e203631373435.roa (raw, json)
Hash identifier:          FZ+P+ANyrm4TzevbfPMlgHXIFEujgSSEZThfGzvj/ZE=
Subject key identifier:   0A:EB:67:27:3D:F1:09:CE:1D:88:BF:38:73:2E:55:53:15:7B:63:DF
Certificate issuer:       /CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
Certificate serial:       2C6B53B000108027D7038A5572938C36E3B9DE84
Authority key identifier: CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3235322e302f32332d3233203d3e203631373435.roa
Signing time:             Mon 25 Nov 2024 13:58:00 +0000
ROA not before:           Mon 25 Nov 2024 13:53:00 +0000
ROA not after:            Mon 24 Nov 2025 13:58:00 +0000
asID:                     61745
IP address blocks:        186.219.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6b:53:b0:00:10:80:27:d7:03:8a:55:72:93:8c:36:e3:b9:de:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
        Validity
            Not Before: Nov 25 13:53:00 2024 GMT
            Not After : Nov 24 13:58:00 2025 GMT
        Subject: CN=0AEB67273DF109CE1D88BF38732E5553157B63DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:36:72:f7:2a:5e:e7:49:ba:a8:a2:c9:5f:41:
                    b4:3b:48:5c:a6:e1:7c:2e:dc:cb:89:bf:85:de:d5:
                    b2:95:dc:12:e9:55:29:fa:b5:15:35:80:f1:6f:4b:
                    7b:24:bb:75:c8:d5:c1:6f:38:a3:b7:86:6e:26:2f:
                    93:24:dc:e4:54:82:85:ba:db:9d:a2:c0:59:9e:90:
                    cb:57:5f:71:6b:88:b1:54:a5:30:65:e8:0b:af:30:
                    92:cb:0b:06:d6:42:81:96:01:2c:7c:96:05:ad:dc:
                    dd:64:47:09:64:b3:5c:dc:f8:b3:78:ca:1d:8c:62:
                    28:af:3b:53:f5:be:bc:77:2c:b6:02:1b:42:fa:13:
                    1d:7d:fc:5b:7a:34:8e:80:c5:8e:bb:de:fd:89:9a:
                    7e:a4:9e:f2:5e:da:4d:bd:8a:17:82:f3:57:79:25:
                    63:9e:f0:c6:2e:a4:0a:1c:dc:60:ba:51:cd:cf:3b:
                    f9:3f:c0:9e:64:f8:e2:38:82:eb:8a:20:f1:a2:17:
                    75:e5:f0:a3:b2:c4:f4:c3:d7:52:b0:08:47:7f:af:
                    ee:e3:16:e1:e1:0e:8e:fe:76:e1:94:a1:21:2f:93:
                    95:43:20:2a:7e:5f:d5:5a:dd:77:bb:99:9a:d3:9e:
                    a4:88:0a:f1:78:09:eb:3f:eb:e4:04:3d:c1:15:63:
                    ad:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EB:67:27:3D:F1:09:CE:1D:88:BF:38:73:2E:55:53:15:7B:63:DF
            X509v3 Authority Key Identifier:
                keyid:CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3235322e302f32332d3233203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:5d:5a:90:b4:48:b6:23:cc:45:c1:75:0c:95:c0:27:fa:5f:
         81:cc:b5:a2:91:1c:ec:85:b8:32:e6:be:66:09:22:df:11:95:
         b1:7f:ff:bc:f8:d8:2e:07:77:4e:65:95:5c:8d:23:22:a7:f0:
         bf:0a:3d:f4:e9:38:b3:97:bc:7a:c8:4c:58:9f:cb:54:ff:21:
         bd:bb:cd:b6:3e:a7:8c:64:b3:fa:15:8a:49:3d:e1:62:2b:76:
         5e:43:e2:7e:51:39:21:77:a7:31:3d:ed:bf:d0:db:82:eb:67:
         d2:6e:83:c0:29:cc:40:1e:de:87:88:f4:58:9e:8b:98:ea:c9:
         7d:5c:85:35:ec:ab:a1:22:8c:02:c8:02:7c:c0:cd:f6:7b:55:
         7b:7a:8a:72:15:43:36:72:d1:93:fe:a9:d1:6a:e8:7a:71:33:
         a8:e0:e8:57:87:a6:d3:56:54:6f:75:d7:fa:b0:82:08:a0:d4:
         21:30:58:9b:c4:89:67:59:c4:3c:5d:1d:e0:07:23:00:e0:f2:
         f7:b9:bd:8a:20:b7:d3:ce:65:fa:05:99:8f:98:0b:34:3a:77:
         03:56:d4:86:9e:4b:85:21:82:1b:aa:c3:ef:69:97:4f:25:6e:
         5f:45:52:71:c9:74:6d:69:4a:b2:09:71:f6:35:a6:75:29:7b:
         ed:99:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:05 2024 by rpki-client on console-ams.rpki-client.org