Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/3138362e3232362e36342e302f31392d3332203d3e203238333239.roa
File:                     3138362e3232362e36342e302f31392d3332203d3e203238333239.roa (raw, json)
Hash identifier:          9t7nRTUhakldiEZ5mYK+KCRch6L3zB8u+g6jJDaKZH4=
Subject key identifier:   AD:E6:B5:6B:05:37:30:77:38:C7:24:EF:DC:AC:6F:B1:93:77:83:A3
Certificate issuer:       /CN=D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB
Certificate serial:       0B426587039EEDF340398B986E31C3D730DAD494
Authority key identifier: D8:08:0D:58:CE:4D:30:EF:B1:40:7E:8D:ED:ED:B0:2B:3C:C9:6C:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/3138362e3232362e36342e302f31392d3332203d3e203238333239.roa
Signing time:             Mon 26 Dec 2022 03:00:00 +0000
ROA not before:           Mon 26 Dec 2022 02:55:00 +0000
ROA not after:            Tue 26 Dec 2023 03:00:00 +0000
asID:                     28329
IP address blocks:        186.226.64.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:42:65:87:03:9e:ed:f3:40:39:8b:98:6e:31:c3:d7:30:da:d4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB
        Validity
            Not Before: Dec 26 02:55:00 2022 GMT
            Not After : Dec 26 03:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:48:f4:32:4c:d3:dd:ab:d4:d5:62:ae:e0:
                    1b:95:77:f7:27:43:34:eb:84:30:41:7b:d8:42:e3:
                    0f:04:53:a4:cb:24:63:5d:aa:1e:d8:a1:25:ad:13:
                    15:b7:45:0a:9f:3c:79:33:7a:07:2f:d7:6f:1a:17:
                    05:a0:7b:11:be:ac:06:47:8a:91:a7:20:e6:63:ef:
                    cb:62:f3:38:0b:fb:3b:bc:4e:ec:af:6c:d7:e2:c8:
                    89:8f:6d:7f:12:ba:09:1e:19:d5:43:7d:ae:95:8d:
                    a2:3d:3f:cb:76:d7:b0:de:66:45:81:bc:31:c4:b7:
                    50:be:96:f9:12:77:39:ee:ff:4b:82:86:6c:e9:f4:
                    0c:bc:83:ad:d2:d6:fa:04:c1:3f:70:c4:fd:ab:a2:
                    34:85:0e:50:79:8c:72:3d:e0:1a:3c:12:59:b8:00:
                    88:fa:05:61:83:79:15:36:90:0e:e4:7a:99:ea:93:
                    83:7f:b0:be:67:e2:2a:0a:61:ad:70:ab:a6:0f:bd:
                    57:b3:43:5c:b1:8a:be:15:15:be:c9:c9:e7:80:8c:
                    cc:26:5a:a7:d7:99:f3:6b:b8:23:58:e8:d3:92:89:
                    07:c2:e8:23:be:8c:82:72:d8:d6:96:d7:59:59:59:
                    45:56:9f:d0:98:24:58:e6:14:25:c8:ff:62:98:cc:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E6:B5:6B:05:37:30:77:38:C7:24:EF:DC:AC:6F:B1:93:77:83:A3
            X509v3 Authority Key Identifier:
                keyid:D8:08:0D:58:CE:4D:30:EF:B1:40:7E:8D:ED:ED:B0:2B:3C:C9:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/3138362e3232362e36342e302f31392d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:ef:96:d6:85:0b:66:1c:a6:69:45:e3:82:ee:7f:0c:69:1d:
         ba:52:85:d9:be:0d:fd:0b:03:79:96:26:18:53:5e:2f:12:07:
         c4:37:43:10:fa:dd:1f:eb:8e:fc:4e:c3:6f:0a:55:b0:26:5b:
         da:63:a5:15:8f:12:dd:28:c9:4a:38:a3:94:fd:d1:d0:73:e2:
         ea:b3:91:e6:64:01:4a:2d:b0:a8:97:bb:0d:53:76:33:3f:a4:
         e0:40:8f:c8:0f:5e:0f:6d:9a:89:3d:5d:7f:0f:ff:39:bb:4e:
         ff:69:dd:3f:71:d8:6a:60:08:df:a5:9d:bf:79:af:ba:23:0b:
         0b:8f:0f:e4:56:fc:c0:62:f3:c4:cf:fd:4f:ce:e6:d5:70:f3:
         35:dc:5a:c9:87:f5:79:d6:9e:68:3c:eb:42:de:93:31:8e:a4:
         47:70:51:a9:a7:5f:c5:54:bc:a9:ed:59:5a:2a:d7:81:1a:78:
         e1:04:0a:6c:11:d2:bb:5b:11:18:8e:d6:52:30:3d:6a:7c:ea:
         e7:65:d7:97:9a:11:b4:ef:89:8b:57:4b:ee:a1:1f:4b:3e:79:
         24:23:f1:0c:d6:cc:95:51:bb:74:20:55:18:b8:05:86:aa:4b:
         09:f7:56:8c:54:09:67:ff:89:4e:03:2e:9c:66:ab:56:c2:b5:
         5f:f5:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org