Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/3138362e3231392e3230382e302f32312d3234203d3e20323632393936.roa
File:                     3138362e3231392e3230382e302f32312d3234203d3e20323632393936.roa (raw, json)
Hash identifier:          SguBp8J9qC+KgmuitepL2scLirN4G8Ou84BU187xMyc=
Subject key identifier:   2F:14:CC:F9:5A:27:31:DE:B0:C7:8F:C9:73:3C:0B:38:9F:ED:E7:DB
Certificate issuer:       /CN=0A0E1035A424A928603BB73BF73FD98C8EAAE900
Certificate serial:       6CDD3D1C41911D66C26E90A5AC924AC599EB97D0
Authority key identifier: 0A:0E:10:35:A4:24:A9:28:60:3B:B7:3B:F7:3F:D9:8C:8E:AA:E9:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A0E1035A424A928603BB73BF73FD98C8EAAE900.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/3138362e3231392e3230382e302f32312d3234203d3e20323632393936.roa
Signing time:             Tue 26 Jul 2022 14:00:00 +0000
ROA not before:           Tue 26 Jul 2022 13:55:00 +0000
ROA not after:            Wed 26 Jul 2023 14:00:00 +0000
asID:                     262996
IP address blocks:        186.219.208.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dd:3d:1c:41:91:1d:66:c2:6e:90:a5:ac:92:4a:c5:99:eb:97:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0E1035A424A928603BB73BF73FD98C8EAAE900
        Validity
            Not Before: Jul 26 13:55:00 2022 GMT
            Not After : Jul 26 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6a:2b:c4:a6:30:5d:34:95:6b:b3:e9:05:ad:
                    09:83:d5:ff:31:49:ee:e4:fe:92:34:9e:17:de:c1:
                    3e:cc:66:db:3f:11:d0:31:6c:96:06:a2:91:2c:1b:
                    78:43:50:c7:ad:f6:2c:96:e9:7e:9f:da:60:49:22:
                    30:7b:61:69:13:a2:4d:a4:a4:9a:1a:6c:b3:b6:1e:
                    10:3c:8b:08:d1:62:17:6b:e0:eb:3e:c4:a7:31:75:
                    fc:ab:25:7f:a6:3b:56:42:38:4c:44:49:fc:b7:8d:
                    07:fd:31:f1:16:ee:cd:12:d7:3e:8c:6a:78:db:d1:
                    68:98:b7:f0:90:29:67:6e:94:76:41:93:ec:54:b4:
                    7a:ff:7e:68:64:7e:8b:5c:09:5b:29:3f:e0:b0:77:
                    9b:f4:25:b8:1a:14:e4:c8:e5:7b:58:02:a2:41:4e:
                    dc:a7:50:72:5e:d8:61:88:54:ea:69:e0:d2:0f:d5:
                    7e:a3:a4:01:b8:81:12:24:a2:60:fe:ef:0d:fb:cb:
                    83:61:2a:30:15:e4:ef:c1:86:ec:c5:58:02:44:a1:
                    1b:e7:6c:06:05:3c:78:67:eb:fb:b2:f9:2b:88:9f:
                    21:df:f0:81:8a:c4:37:72:21:61:9a:4e:89:72:f5:
                    ef:f6:e4:7d:1e:b0:09:47:fb:d5:7b:3a:92:0b:44:
                    f5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:14:CC:F9:5A:27:31:DE:B0:C7:8F:C9:73:3C:0B:38:9F:ED:E7:DB
            X509v3 Authority Key Identifier:
                keyid:0A:0E:10:35:A4:24:A9:28:60:3B:B7:3B:F7:3F:D9:8C:8E:AA:E9:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/0A0E1035A424A928603BB73BF73FD98C8EAAE900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A0E1035A424A928603BB73BF73FD98C8EAAE900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/3138362e3231392e3230382e302f32312d3234203d3e20323632393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:03:02:68:3d:bf:92:7d:cb:09:24:b5:7b:4f:dc:9b:a5:2e:
         66:ff:fc:2c:c0:fa:7f:47:7e:b4:c6:c6:6c:91:aa:6e:a7:70:
         7e:43:7f:7c:ec:db:be:61:c5:16:21:d4:62:64:4a:b1:e7:ba:
         8e:40:ef:56:02:46:4a:97:fd:01:13:66:f2:1c:1a:d2:d7:5d:
         ae:df:56:0f:fe:5b:2d:9d:98:0a:0a:c3:84:be:2d:67:96:d2:
         91:84:30:21:90:66:39:e3:0b:9c:50:23:9d:61:c6:98:9f:35:
         99:aa:77:55:e0:97:69:05:b6:61:f9:5f:f3:e1:e1:35:a9:19:
         d9:fe:16:fc:14:39:36:4a:5a:0c:e8:24:a1:85:da:a9:9e:c4:
         1b:a7:16:37:e4:27:a1:4f:f0:8b:3d:8d:3d:fc:ff:ee:bc:9d:
         dc:25:59:ab:c9:72:cf:3e:39:0d:11:68:c5:ce:10:bb:cf:5d:
         c1:8c:eb:07:ba:d9:4e:b3:76:59:6b:fd:b2:89:20:ef:43:5e:
         a0:8e:91:e9:2d:53:05:8b:34:72:14:6b:97:90:c5:ad:4e:aa:
         3d:0a:d4:aa:e5:47:81:ff:9b:15:61:5d:a0:d2:00:52:6a:e5:
         bf:82:18:16:84:17:3b:0a:59:e1:9b:64:2e:06:e8:5c:52:7c:
         9e:2e:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org