Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa
File:                     3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa (raw, json)
Hash identifier:          4UjsUOf22YFoxhE1MdJPUQFFDk6fuWNpqeER3pB7eI4=
Subject key identifier:   54:8C:E6:DA:C5:85:6E:DE:78:C7:2E:D0:A9:E6:8F:73:B1:D6:B4:12
Certificate issuer:       /CN=ABB4C702F23574E58CE72DE74FCACBB0D74F490C
Certificate serial:       59BF16F43924529C685B878188BC4F015799D519
Authority key identifier: AB:B4:C7:02:F2:35:74:E5:8C:E7:2D:E7:4F:CA:CB:B0:D7:4F:49:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa
Signing time:             Fri 09 Feb 2024 19:56:43 +0000
ROA not before:           Fri 09 Feb 2024 19:51:43 +0000
ROA not after:            Fri 07 Feb 2025 19:56:43 +0000
asID:                     262966
IP address blocks:        186.250.28.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bf:16:f4:39:24:52:9c:68:5b:87:81:88:bc:4f:01:57:99:d5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB4C702F23574E58CE72DE74FCACBB0D74F490C
        Validity
            Not Before: Feb  9 19:51:43 2024 GMT
            Not After : Feb  7 19:56:43 2025 GMT
        Subject: CN=548CE6DAC5856EDE78C72ED0A9E68F73B1D6B412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:83:ac:a8:4a:3b:5f:e6:da:56:8a:b5:63:
                    20:5b:8d:04:91:df:d3:ba:f1:b1:52:86:df:75:f5:
                    c1:90:16:c0:45:4a:a2:2d:96:33:27:25:29:46:fb:
                    f5:a4:5c:99:8b:09:fe:61:05:36:06:8f:8a:f0:bc:
                    b8:ac:a5:2c:9d:30:7a:e9:90:fe:3a:10:ee:f8:46:
                    35:5e:3a:08:eb:8b:ae:f1:1c:85:be:ed:8a:08:99:
                    fa:28:62:14:90:06:b4:45:22:10:d2:d3:c0:9f:fd:
                    ea:91:bd:ee:d3:b6:f5:22:0a:50:05:d3:bb:c5:52:
                    0e:a1:93:16:c6:e9:25:9b:10:10:62:ce:55:e3:76:
                    c0:69:bc:fd:e7:48:a6:c5:27:33:e8:d6:6a:b6:1d:
                    a5:40:c1:3f:33:18:7d:0d:9d:89:03:dd:3d:95:7e:
                    d3:37:28:a8:97:2d:83:fb:55:a8:f0:bf:9f:78:f9:
                    bb:63:ed:55:95:5c:0e:fe:f1:f8:a5:10:41:a5:ff:
                    e4:7f:b4:88:72:5f:eb:9b:31:30:ff:b2:8e:ed:f7:
                    89:de:89:71:a3:4d:05:7f:60:42:a0:b0:cd:7d:a2:
                    4e:88:a6:cc:e9:db:67:49:ef:95:04:e8:eb:f3:32:
                    88:25:6d:b2:41:9b:ea:31:b3:f2:72:13:dd:ca:be:
                    7f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8C:E6:DA:C5:85:6E:DE:78:C7:2E:D0:A9:E6:8F:73:B1:D6:B4:12
            X509v3 Authority Key Identifier:
                keyid:AB:B4:C7:02:F2:35:74:E5:8C:E7:2D:E7:4F:CA:CB:B0:D7:4F:49:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:11:75:2a:43:34:a5:c2:71:6a:fa:ce:e4:79:b4:e6:5f:e5:
         0b:41:39:85:cf:3c:de:43:54:b1:c1:7e:39:9e:6e:37:82:dd:
         3c:52:fc:fe:bc:fe:16:e4:d2:4a:f4:57:c2:db:bd:97:a1:b0:
         ed:6f:a7:75:91:94:7d:c2:bf:d5:71:dd:90:36:3b:68:e4:9f:
         9f:d7:ae:5f:93:bd:5c:32:58:42:2d:93:a6:58:af:0b:f8:0f:
         11:7a:86:72:f9:93:ae:0c:76:d7:86:3c:5b:c0:be:7d:56:db:
         f9:24:15:26:46:d8:f4:5f:6b:21:41:e7:51:24:7b:c5:59:67:
         c4:77:5a:47:5c:e8:24:b1:4f:d2:55:10:d8:f7:c0:84:fb:1d:
         25:13:d0:15:98:68:0a:25:52:fb:8b:b4:56:b6:37:0e:1d:ed:
         3d:b2:59:18:4c:e4:f6:d4:74:6d:03:a9:46:a9:90:bf:ef:2c:
         e9:dd:e3:b9:f9:8e:e2:1e:5e:34:e6:a5:fc:cc:78:f8:ee:00:
         67:71:52:73:33:63:75:a4:ad:f6:17:b1:15:7e:d8:ff:c9:18:
         6f:3d:9a:d1:0f:f2:7a:93:6b:31:42:31:4f:58:9e:d5:85:55:
         fb:55:52:d9:79:b3:28:ba:59:57:a5:f4:5c:d1:4d:35:ad:28:
         f2:ba:90:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org