Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa
File:                     3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa (raw, json)
Hash identifier:          /4mjKtHo7T1ofUb10GUckwB8aro5oSjJLYggCHDP/uQ=
Subject key identifier:   B9:A1:98:F8:A7:11:C8:CC:97:3C:20:8C:C2:74:16:87:52:05:0B:EA
Certificate issuer:       /CN=419A2E42DF188ACEF915C715DAE3757B6ACA80C1
Certificate serial:       57723A922ACB9316FEE5CEE7EAA1BA1397FCF929
Authority key identifier: 41:9A:2E:42:DF:18:8A:CE:F9:15:C7:15:DA:E3:75:7B:6A:CA:80:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/419A2E42DF188ACEF915C715DAE3757B6ACA80C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa
Signing time:             Fri 08 Dec 2023 22:25:34 +0000
ROA not before:           Fri 08 Dec 2023 22:20:34 +0000
ROA not after:            Fri 06 Dec 2024 22:25:34 +0000
asID:                     53107
IP address blocks:        186.209.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:72:3a:92:2a:cb:93:16:fe:e5:ce:e7:ea:a1:ba:13:97:fc:f9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=419A2E42DF188ACEF915C715DAE3757B6ACA80C1
        Validity
            Not Before: Dec  8 22:20:34 2023 GMT
            Not After : Dec  6 22:25:34 2024 GMT
        Subject: CN=B9A198F8A711C8CC973C208CC274168752050BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:c2:12:f8:24:c9:89:c2:15:2a:8c:42:a3:
                    14:68:ba:39:be:8d:36:d0:52:c2:d6:3b:5d:44:5d:
                    04:19:13:c9:85:25:5e:4b:34:bd:83:43:02:16:2c:
                    9b:73:b9:ce:1d:85:60:4d:17:13:0a:a1:e0:b6:dd:
                    37:8d:90:b0:95:1c:2b:69:fc:38:cf:a0:09:8f:84:
                    a1:3c:35:c3:3f:ba:38:be:c4:41:ca:02:82:03:d9:
                    a5:99:73:e5:33:c4:11:c8:6f:fc:26:57:7b:34:61:
                    2f:3e:bc:c9:53:6f:0a:a4:6f:23:a8:09:a2:27:3a:
                    b2:fc:40:d8:a3:27:70:c8:0a:88:de:d4:bb:fb:5f:
                    6f:24:cf:ea:55:b1:69:a5:9a:48:28:af:ee:fd:b4:
                    e2:9d:c3:d1:02:74:cd:47:b5:df:f3:00:2f:f9:58:
                    87:a7:4a:5c:3b:cb:44:df:6a:d9:79:21:ea:2d:8d:
                    9c:7c:27:f8:96:25:46:50:2f:02:ee:d4:e5:9c:38:
                    eb:c6:1c:df:a8:6c:fa:bd:ae:c5:84:62:1d:e8:c1:
                    10:14:e4:69:62:68:62:8b:04:25:d2:46:69:33:18:
                    5e:cb:e9:0d:05:45:07:2b:64:ab:b6:80:aa:c0:8a:
                    02:c6:52:c5:20:4d:ac:5a:a2:bf:78:7d:f5:d6:fd:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A1:98:F8:A7:11:C8:CC:97:3C:20:8C:C2:74:16:87:52:05:0B:EA
            X509v3 Authority Key Identifier:
                keyid:41:9A:2E:42:DF:18:8A:CE:F9:15:C7:15:DA:E3:75:7B:6A:CA:80:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/419A2E42DF188ACEF915C715DAE3757B6ACA80C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/419A2E42DF188ACEF915C715DAE3757B6ACA80C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:de:93:e8:1e:f3:36:5b:32:e5:55:19:7e:d8:06:e5:c9:60:
         fa:f0:ad:80:d9:28:62:25:d3:f7:a2:a4:28:aa:47:df:ee:b9:
         fd:19:37:d2:e4:d7:05:39:48:d7:32:45:63:8f:7e:3b:68:9c:
         34:5d:8b:55:24:c6:de:fd:57:fe:2f:20:9b:d9:7e:30:02:4d:
         b9:2f:eb:9b:73:85:7f:f7:98:cc:63:d0:e0:3d:c5:85:47:c8:
         c6:62:8c:f6:1b:9d:4d:57:c3:c9:0a:21:9d:28:29:0e:59:cf:
         b9:39:c7:52:04:5c:2e:31:69:4f:ca:e5:3a:81:9e:99:05:1d:
         40:10:af:c3:f0:c0:4a:a9:2f:27:64:3c:27:f6:6c:7f:ff:59:
         f6:26:67:3c:f7:39:9e:ef:f9:74:6c:97:83:66:b0:c0:a1:ea:
         72:eb:37:4a:7e:a5:53:fb:1d:78:f3:1f:da:6d:74:e1:da:4a:
         63:e4:60:ae:87:5e:a2:25:8c:97:0a:11:21:36:28:2b:6e:21:
         d9:9b:72:4d:be:7b:66:71:51:45:1f:07:a4:38:40:00:31:e4:
         f6:d2:87:c4:1e:f1:a9:85:56:10:34:2b:81:18:ac:ed:84:91:
         34:28:5a:5c:ec:37:d1:36:4e:83:66:b3:4e:ee:1f:dd:6c:04:
         ec:0f:7a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org