Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa
File:                     3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa (raw, json)
Hash identifier:          ZMmsBYR9AYmK+3XKk8LRQwr1lMT+ZQQMhfpVifHt57U=
Subject key identifier:   43:91:51:34:9C:14:A0:73:DA:AF:2D:22:DA:20:3C:34:C2:9E:5F:5B
Certificate issuer:       /CN=A1BC8FB094C814E640DC6D745931F287DB08EF8D
Certificate serial:       37E1D8934EC58E7294AD07513BA4C58BD9008021
Authority key identifier: A1:BC:8F:B0:94:C8:14:E6:40:DC:6D:74:59:31:F2:87:DB:08:EF:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BC8FB094C814E640DC6D745931F287DB08EF8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa
Signing time:             Sat 01 Jul 2023 13:26:49 +0000
ROA not before:           Sat 01 Jul 2023 13:21:49 +0000
ROA not after:            Sat 29 Jun 2024 13:26:49 +0000
asID:                     262996
IP address blocks:        186.219.208.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e1:d8:93:4e:c5:8e:72:94:ad:07:51:3b:a4:c5:8b:d9:00:80:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BC8FB094C814E640DC6D745931F287DB08EF8D
        Validity
            Not Before: Jul  1 13:21:49 2023 GMT
            Not After : Jun 29 13:26:49 2024 GMT
        Subject: CN=439151349C14A073DAAF2D22DA203C34C29E5F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:49:b5:60:40:6b:d5:0e:b4:7c:1a:c9:ea:
                    76:ab:92:03:90:cd:66:9f:b9:6f:c2:55:0f:71:40:
                    a1:4f:32:4a:be:6f:9e:60:2c:b9:90:81:82:fa:07:
                    9c:cb:75:d6:b6:73:ae:a7:16:ec:d2:93:97:41:ab:
                    c6:fd:1d:77:e1:17:dd:86:be:8b:56:5c:eb:b0:2c:
                    25:be:60:46:9b:57:5f:e6:c2:f8:1a:ce:8c:d1:4d:
                    72:e1:89:0b:11:35:c8:f9:95:6b:72:d5:a4:f1:73:
                    37:dc:58:5e:de:dd:78:eb:4f:26:3d:9f:a2:ea:c0:
                    2c:2e:c7:f1:de:62:e4:4e:25:e8:24:b8:50:bd:55:
                    f4:da:4c:6d:45:73:59:bc:0b:da:bf:21:1d:26:2c:
                    8c:77:36:5b:c0:ff:e8:a7:95:3b:e1:bb:24:50:6e:
                    0b:ae:9d:64:a2:1b:73:b5:ae:b5:a6:ae:11:72:e2:
                    a5:a8:b7:9d:98:7b:3b:bb:b7:4e:a7:4e:4a:22:ef:
                    b0:bc:1a:9c:9a:4c:d7:6e:9a:88:cd:c0:f9:17:e6:
                    c7:e0:6a:93:16:f5:82:40:d6:27:d8:b1:36:05:d4:
                    e3:48:50:3f:fa:de:70:ec:66:0b:6e:da:54:64:b0:
                    9e:57:48:6e:e0:88:7f:e6:24:66:90:14:a6:18:16:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:91:51:34:9C:14:A0:73:DA:AF:2D:22:DA:20:3C:34:C2:9E:5F:5B
            X509v3 Authority Key Identifier:
                keyid:A1:BC:8F:B0:94:C8:14:E6:40:DC:6D:74:59:31:F2:87:DB:08:EF:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/A1BC8FB094C814E640DC6D745931F287DB08EF8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BC8FB094C814E640DC6D745931F287DB08EF8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:6f:47:4c:56:21:af:30:da:2f:c3:76:9f:8d:fc:7d:b5:1e:
         81:03:d3:ed:00:43:0d:4d:55:79:c3:4e:e9:89:51:28:29:57:
         41:73:ab:e5:ca:20:fa:fc:0b:9d:a8:28:33:78:bc:90:b7:dd:
         61:82:53:cd:5d:17:28:59:ed:8e:02:35:3f:b2:0d:8d:a4:b9:
         33:00:6a:69:fc:de:35:21:bd:77:4c:cf:25:78:40:a1:9e:88:
         bc:d4:aa:1f:89:e0:6a:2c:23:e2:a2:67:75:e5:6b:a7:3f:45:
         45:11:ba:1c:ca:11:60:ad:40:c7:96:1e:44:c7:0f:2f:27:3d:
         54:e0:c5:82:30:a1:9c:f1:45:d5:5f:f7:ce:3b:1c:3c:2e:2c:
         7e:03:6c:e5:71:7a:7a:6b:e7:10:4e:dd:d7:5e:74:90:f0:02:
         9e:8d:a9:16:47:0d:20:d0:fd:6f:01:24:49:b0:72:ec:d9:0f:
         82:a3:c2:40:03:cd:86:60:91:f0:e9:af:ba:97:45:14:76:e3:
         5b:41:7a:99:9a:e5:3b:84:f8:79:26:e1:fc:73:2a:fa:8b:00:
         7f:7e:f7:f9:05:20:72:d7:47:fa:83:02:80:2e:10:ae:54:76:
         f5:b4:20:ca:b7:da:17:3f:1c:81:5d:c8:8c:b2:cb:20:cb:db:
         6e:a5:2d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:32 2024 by rpki-client on console-ams.rpki-client.org