Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3235322e302f32342d3234203d3e203631373435.roa
File:                     3138362e3231392e3235322e302f32342d3234203d3e203631373435.roa (raw, json)
Hash identifier:          ADSDwyZWDuYSm312FcIv8zR2fLkyhZoKJ07cWDBq3Fc=
Subject key identifier:   3E:AA:26:CB:A0:92:4A:14:27:E8:EF:B8:15:9B:58:DE:04:B0:D7:50
Certificate issuer:       /CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
Certificate serial:       7B45994AE8446176CBDB662C98A4CD400E7BE8EA
Authority key identifier: CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3235322e302f32342d3234203d3e203631373435.roa
Signing time:             Mon 25 Nov 2024 13:58:00 +0000
ROA not before:           Mon 25 Nov 2024 13:53:00 +0000
ROA not after:            Mon 24 Nov 2025 13:58:00 +0000
asID:                     61745
IP address blocks:        186.219.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:45:99:4a:e8:44:61:76:cb:db:66:2c:98:a4:cd:40:0e:7b:e8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
        Validity
            Not Before: Nov 25 13:53:00 2024 GMT
            Not After : Nov 24 13:58:00 2025 GMT
        Subject: CN=3EAA26CBA0924A1427E8EFB8159B58DE04B0D750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:eb:f2:61:e4:45:af:d6:0f:cf:5b:53:a1:
                    b0:8c:e2:2b:8f:5a:d3:f6:be:32:90:5b:2b:16:cd:
                    14:98:77:d6:62:d3:57:d3:bf:d4:2d:05:ca:83:60:
                    2a:67:3e:50:ea:a1:de:7c:8d:d7:d8:dc:0f:35:c5:
                    25:a3:1b:13:03:c8:47:e4:d1:45:2d:6f:c3:21:1c:
                    b9:9b:a2:68:e9:22:80:da:92:9f:cc:41:2c:cd:c1:
                    0c:b8:13:e6:ec:81:45:78:8b:4f:37:7d:f3:7d:34:
                    03:93:58:3e:e7:4d:3c:14:c9:f5:8d:f3:c9:52:8c:
                    61:98:20:0d:c9:90:89:30:cf:6e:cb:88:6e:df:d9:
                    3d:65:e7:62:55:81:6c:54:28:60:4d:b0:79:67:a0:
                    3e:e3:67:cd:74:ac:dc:dd:07:c5:19:85:05:b9:27:
                    03:36:78:f2:0b:7e:a5:13:a9:ff:ac:5f:c1:50:62:
                    99:be:b3:b8:a3:1c:b6:34:c8:7d:b9:1c:8e:6b:3d:
                    32:f0:b3:85:25:81:a4:36:d9:19:36:40:ab:d0:9a:
                    24:d4:2c:ae:fe:37:2b:a6:60:9b:66:ce:d1:b0:b4:
                    bb:13:4f:da:20:ef:ce:db:59:49:ae:02:ea:9b:84:
                    47:e4:76:ec:6f:4e:7d:ab:28:3a:61:5e:81:78:2c:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:26:CB:A0:92:4A:14:27:E8:EF:B8:15:9B:58:DE:04:B0:D7:50
            X509v3 Authority Key Identifier:
                keyid:CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3235322e302f32342d3234203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:e5:fe:bf:eb:32:00:e1:4e:d5:c0:f2:68:e8:7a:f8:0f:4a:
         dd:8d:f7:05:d6:e7:37:5b:28:e3:ed:3b:d5:f3:fb:f6:8a:2a:
         86:d1:86:a8:76:20:ac:07:29:65:8a:19:96:59:64:f1:9b:95:
         e9:ba:c6:28:17:bb:09:cf:1e:3b:13:17:ae:c9:02:e0:17:b2:
         9b:2e:18:4e:90:bd:55:db:af:fc:e7:66:84:3c:9e:a8:3b:f9:
         76:6e:b0:0f:07:74:dd:79:a5:10:22:d3:a7:2b:fa:78:f8:f1:
         79:bd:b0:95:fe:11:0e:26:6c:a4:aa:e1:60:cc:59:7f:91:cc:
         16:06:24:04:bf:d5:ba:5b:32:5a:23:16:5c:39:b0:40:f8:51:
         42:d7:3f:b3:6e:c4:90:5a:cc:f3:bb:fa:2a:a5:ff:cc:fb:11:
         39:7b:a7:4d:83:b7:8a:df:34:3f:20:8b:43:a4:9e:90:31:df:
         08:96:96:c6:ab:28:be:93:83:1f:7e:1c:d5:d1:22:2b:4c:03:
         a5:59:11:92:11:8a:57:a1:98:6f:64:41:42:21:e2:c1:0a:f0:
         7f:f2:e7:08:57:c7:0e:d7:89:4e:80:2a:32:e2:1c:ba:03:91:
         ce:39:95:5d:66:eb:84:31:56:b9:3a:d1:11:09:f4:72:e0:f5:
         25:8b:33:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:05 2024 by rpki-client on console-ams.rpki-client.org