Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e342e302f32322d3232203d3e203238313335.roa
File:                     3138372e38362e342e302f32322d3232203d3e203238313335.roa (raw, json)
Hash identifier:          nBGOvuanzzk5nhF1HczwvXbEY0GixOz6FD3H2lFR5+s=
Subject key identifier:   EC:30:88:9A:49:78:AD:E4:46:6D:DE:B1:13:19:63:D6:59:F9:D1:0F
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       598B0CFCF41C1A3D27AB4E2CBF0C763DCF37C238
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e342e302f32322d3232203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:18 +0000
ROA not before:           Wed 13 Mar 2024 11:58:18 +0000
ROA not after:            Wed 12 Mar 2025 12:03:18 +0000
asID:                     28135
IP address blocks:        187.86.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8b:0c:fc:f4:1c:1a:3d:27:ab:4e:2c:bf:0c:76:3d:cf:37:c2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:18 2024 GMT
            Not After : Mar 12 12:03:18 2025 GMT
        Subject: CN=EC30889A4978ADE4466DDEB1131963D659F9D10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:1a:02:76:0d:02:bb:d8:5b:60:2b:b7:2d:
                    99:12:d6:4b:11:c5:b2:47:b4:f9:b7:d7:f8:85:ab:
                    ca:56:80:f9:01:ee:22:a1:f2:5a:b3:cb:5b:3d:22:
                    73:58:3f:54:c0:97:da:01:22:7d:2e:c7:cb:15:18:
                    2e:0e:80:63:11:f9:c0:81:2b:5b:5b:93:90:53:f6:
                    34:4f:56:6c:f0:c0:3b:7d:c3:89:b6:80:11:b5:2d:
                    c1:0b:cd:e7:6f:e2:3c:ee:cc:19:a7:6a:e5:24:8a:
                    bc:4f:0a:62:66:66:03:a1:ae:f0:a5:87:a4:69:99:
                    c1:9d:f8:66:fe:09:b7:1a:d0:72:a6:0b:88:9b:58:
                    cd:0b:dc:81:b0:f5:be:d4:23:28:f3:83:73:4f:a1:
                    be:34:65:67:e5:4a:79:bc:b9:62:a5:ae:83:a2:f4:
                    be:f1:f5:28:8c:c9:f6:c6:65:f7:68:2a:c1:18:97:
                    6c:69:22:c1:2f:16:f4:62:44:8e:1d:3f:81:b6:83:
                    1a:a7:f2:08:e4:c3:bf:b4:5e:77:7c:3e:c2:85:b8:
                    ec:e0:b1:c6:aa:45:9e:9f:a7:09:53:e9:9d:da:4a:
                    6f:55:4c:54:f8:00:2b:0e:b3:fa:50:23:04:c1:ff:
                    1c:85:dc:7e:ad:fc:4d:bf:5f:f0:48:d5:9c:34:a2:
                    07:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:30:88:9A:49:78:AD:E4:46:6D:DE:B1:13:19:63:D6:59:F9:D1:0F
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e342e302f32322d3232203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:7e:83:f0:be:b6:3e:25:6c:41:66:18:4c:a2:b5:d3:57:ed:
         81:86:0e:30:f1:f6:4d:14:33:f7:88:4c:56:27:db:cc:47:9e:
         b0:9e:3d:ec:21:8b:d4:92:4b:67:24:28:c1:52:d3:7c:fd:a8:
         9c:62:c6:13:08:cf:55:06:6b:a5:56:39:27:4e:06:8c:41:c2:
         f8:6f:54:98:f7:87:d9:cc:54:4d:7e:7b:3a:f6:f1:0b:a8:f6:
         fc:03:80:3a:7f:bc:12:07:26:d1:3e:ad:8a:8f:ef:63:eb:8a:
         cd:8a:2a:0a:62:1e:a5:b4:43:f6:b5:78:60:a2:24:fc:03:3c:
         2e:0a:f8:de:58:87:fa:72:be:79:f8:d5:b9:72:41:0a:d8:9b:
         91:f0:b6:7f:e4:ac:98:d9:67:3b:3a:66:0e:1f:ba:71:16:f3:
         73:b9:00:e6:b0:15:b3:0b:09:d9:8c:66:ea:cc:71:50:24:28:
         b4:92:44:99:61:d5:e5:5a:78:ec:fc:a3:be:03:0b:eb:88:2b:
         6f:91:f5:bd:48:0e:2c:97:c4:52:d8:35:e1:c1:50:21:4b:16:
         02:c4:69:14:e7:0b:39:47:27:a0:b4:3c:f4:40:2e:b4:31:63:
         42:1b:0f:eb:86:c9:5d:72:80:dd:a3:ab:78:3a:d4:42:eb:17:
         a1:67:64:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org