Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e302e302f32302d3230203d3e20323632373039.roa
File:                     3138372e3131312e302e302f32302d3230203d3e20323632373039.roa (raw, json)
Hash identifier:          Rvxc/YHYmhvki8SaXbsQ94ylR0zon3YybSS7HXiK4Bc=
Subject key identifier:   D1:08:FB:D5:F2:29:39:A4:D5:A7:D2:C6:A9:54:20:35:F7:B8:07:53
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       44D0BBE182E85B7B123E76961B79531275919008
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e302e302f32302d3230203d3e20323632373039.roa
Signing time:             Thu 20 Apr 2023 14:41:29 +0000
ROA not before:           Thu 20 Apr 2023 14:36:29 +0000
ROA not after:            Thu 18 Apr 2024 14:41:29 +0000
asID:                     262709
IP address blocks:        187.111.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d0:bb:e1:82:e8:5b:7b:12:3e:76:96:1b:79:53:12:75:91:90:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: Apr 20 14:36:29 2023 GMT
            Not After : Apr 18 14:41:29 2024 GMT
        Subject: CN=D108FBD5F22939A4D5A7D2C6A9542035F7B80753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:83:73:ef:7b:26:c0:72:93:c5:3c:2d:43:
                    32:df:c6:bb:6e:cc:54:f0:d4:13:ac:1c:24:4f:af:
                    df:e5:01:8c:ab:0b:0b:e1:e3:d6:e8:c8:f1:c2:b2:
                    a9:8b:42:97:19:66:5f:b8:52:21:8a:9e:c7:60:5b:
                    0c:1d:9a:14:fb:96:ea:d1:8a:44:e9:c6:aa:60:84:
                    70:59:ba:64:3a:03:cc:5a:4b:32:20:83:50:7f:93:
                    ce:a5:6b:fa:a1:7f:25:be:ba:d3:9c:79:b5:02:6c:
                    ee:0e:e5:ef:41:e6:2f:62:ca:ae:56:01:6c:a7:ba:
                    ec:17:56:31:e1:11:34:0a:82:59:85:83:bf:18:cc:
                    4e:06:47:b3:85:28:e3:bf:ee:72:90:03:15:7e:30:
                    a3:bd:8a:18:2b:3b:54:18:ec:6d:17:90:6e:e0:6e:
                    b7:bf:6e:81:ba:eb:e0:fb:0c:16:d8:09:81:02:90:
                    27:16:c2:64:da:8d:3b:8e:a7:5c:da:08:bc:d7:e1:
                    fa:1c:4a:71:85:aa:2d:93:60:e9:94:80:36:63:17:
                    85:a1:9c:45:0d:05:8e:1e:28:74:15:c2:d6:da:a2:
                    6b:8c:42:8b:a9:bc:e2:4e:23:96:fc:4e:b3:09:5b:
                    48:ce:8a:d6:f4:85:e0:4b:ff:b8:0a:37:58:ad:e4:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:08:FB:D5:F2:29:39:A4:D5:A7:D2:C6:A9:54:20:35:F7:B8:07:53
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e302e302f32302d3230203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:2a:1d:78:c3:14:42:c6:36:7a:b2:41:2c:64:36:ef:71:
         8c:28:7b:0b:97:c8:5e:14:b0:44:4d:29:a4:c6:86:b8:ba:98:
         b6:56:c1:a5:dc:a2:f3:dd:f2:5b:2c:30:8a:75:51:c7:67:11:
         38:9b:d9:2d:0b:b0:8d:e2:bd:28:87:a0:d5:a7:df:45:41:b9:
         12:50:c9:43:71:c4:72:4c:47:8d:5e:84:4f:c0:fc:61:6f:64:
         b5:35:f6:b0:71:5f:9d:9d:0b:7d:35:7c:ad:7d:b1:3d:6a:4f:
         b0:92:bc:c9:f2:a3:29:c6:e8:60:27:f0:8d:72:1f:ab:25:e0:
         66:4e:2b:02:ff:a2:39:4b:0e:ef:fb:de:ac:7d:2a:e2:bb:13:
         c2:fc:0b:a4:3a:e5:16:92:78:99:6f:b9:f9:ff:8a:3c:a3:69:
         7a:46:e5:66:ae:6b:64:29:f4:e0:bb:8c:03:4d:d0:f7:0d:2e:
         b2:59:c5:36:c7:3b:68:3d:e2:52:04:1a:48:dd:52:ba:0c:09:
         5f:8a:2b:d4:b8:e0:46:14:e6:74:2f:b5:0d:b4:48:50:6c:7d:
         d7:13:91:fe:f4:6a:9a:1a:15:1a:6e:44:ac:80:9d:b4:e0:b0:
         24:00:5a:19:86:5f:68:18:70:ff:8c:6a:5e:2b:4b:af:92:1a:
         a3:d1:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org