Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3138362e3233332e3232302e302f32322d3234203d3e203532383636.roa
File:                     3138362e3233332e3232302e302f32322d3234203d3e203532383636.roa (raw, json)
Hash identifier:          9OWe6avvK4XmVYj+qxbJ8WpSpZD/2kGt8gHeNXsOCHw=
Subject key identifier:   95:D3:5D:10:C8:CC:87:0B:E1:E8:D7:F2:83:15:D4:A6:2E:77:7E:AE
Certificate issuer:       /CN=DA7937B89F3B0861490B3DD6174BE1D51AD2A94C
Certificate serial:       1AB2DF17F931824ECEDB01AC9B47F61682619498
Authority key identifier: DA:79:37:B8:9F:3B:08:61:49:0B:3D:D6:17:4B:E1:D5:1A:D2:A9:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3138362e3233332e3232302e302f32322d3234203d3e203532383636.roa
Signing time:             Wed 12 Jul 2023 20:59:21 +0000
ROA not before:           Wed 12 Jul 2023 20:54:21 +0000
ROA not after:            Wed 10 Jul 2024 20:59:21 +0000
asID:                     52866
IP address blocks:        186.233.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b2:df:17:f9:31:82:4e:ce:db:01:ac:9b:47:f6:16:82:61:94:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA7937B89F3B0861490B3DD6174BE1D51AD2A94C
        Validity
            Not Before: Jul 12 20:54:21 2023 GMT
            Not After : Jul 10 20:59:21 2024 GMT
        Subject: CN=95D35D10C8CC870BE1E8D7F28315D4A62E777EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:38:77:ee:a5:48:27:48:8f:e3:df:cd:11:
                    37:93:8f:79:d7:b3:ff:93:74:13:74:e8:4d:26:3c:
                    41:45:3e:39:7e:86:ab:d8:63:35:1e:2c:ca:de:f6:
                    2f:7e:45:f6:37:fa:5f:9e:a9:4c:c4:50:43:17:97:
                    74:c7:3b:fe:82:e9:ee:b3:7a:75:6e:b8:e6:61:fc:
                    2d:dc:54:8f:88:e5:b8:da:b4:9f:b6:82:cf:00:4a:
                    91:ed:6e:f3:20:2f:a4:bb:01:bd:b8:a8:6e:e9:b8:
                    33:41:7b:31:95:61:de:9a:20:26:17:40:ea:97:ed:
                    66:75:be:23:63:3e:33:d2:81:b8:5f:7d:d7:5a:e7:
                    08:76:8e:fd:c5:84:19:e0:b2:b5:cc:bc:94:d3:89:
                    4b:c4:ec:90:42:7f:88:2d:33:a1:2a:95:8e:e1:ec:
                    f2:25:db:a2:32:5a:e6:63:f5:cf:17:24:f8:46:71:
                    54:a6:06:97:8e:cc:98:e1:29:8c:9f:40:18:4c:47:
                    5b:18:84:4f:0a:4b:36:7b:ae:9a:db:89:f4:dc:b1:
                    ca:64:19:ee:2a:54:2b:4c:b2:38:10:0d:a4:82:86:
                    8d:5f:3c:ec:0e:00:d3:b9:23:16:ee:79:4f:5d:c1:
                    31:9c:bf:a7:db:a6:77:ac:9d:9c:3a:92:60:99:31:
                    fc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:5D:10:C8:CC:87:0B:E1:E8:D7:F2:83:15:D4:A6:2E:77:7E:AE
            X509v3 Authority Key Identifier:
                keyid:DA:79:37:B8:9F:3B:08:61:49:0B:3D:D6:17:4B:E1:D5:1A:D2:A9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3138362e3233332e3232302e302f32322d3234203d3e203532383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:f7:b8:5a:6f:8d:f3:40:7e:b2:87:c0:22:63:dd:33:ee:7c:
         87:96:c6:7d:c4:2c:22:e8:1a:57:16:e6:c4:4f:64:9c:76:ed:
         60:9c:18:cb:9e:51:9a:6d:da:cd:38:c4:8f:1e:9f:04:06:7d:
         f6:1c:77:e0:7c:64:75:bc:38:25:3a:0a:be:30:be:58:61:e2:
         4e:4d:7e:2f:74:c9:c9:0b:fa:1a:ca:72:86:69:8b:01:ad:66:
         6f:ab:d9:00:c2:fc:a7:55:25:fe:f3:e0:5a:74:65:b2:d4:27:
         12:91:af:07:dc:eb:20:cf:29:eb:61:09:64:d8:ff:2d:42:e0:
         1a:e5:b4:11:17:e9:bf:c0:2c:bc:d0:43:bd:a8:0c:a7:e3:7c:
         3c:1e:33:2b:be:44:05:36:70:25:cb:4d:35:92:44:0a:90:5e:
         c6:91:46:64:9d:aa:a0:30:9b:67:a1:2e:2c:9e:a1:ce:b0:b4:
         35:bf:fa:4b:e1:ab:ea:fa:8d:a1:35:24:57:60:95:e8:19:28:
         7f:81:40:e5:f0:d8:8f:18:ce:03:d3:8c:0c:38:20:25:87:02:
         5c:fe:a5:a6:7b:9c:d4:c7:21:04:35:a7:e3:7d:a4:48:0d:76:
         02:3f:f1:8d:ff:b9:e1:a2:cd:62:d7:10:5b:22:6f:b4:a4:44:
         65:ca:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org