Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e302e302f32322d3232203d3e20323632373039.roa
File:                     3138372e3131312e302e302f32322d3232203d3e20323632373039.roa (raw, json)
Hash identifier:          Sy8dDFVUvQHA9o4r10gMH5dy1x9JlUblonleW/qp+n8=
Subject key identifier:   41:73:0C:A5:1F:E4:C5:2E:76:F9:75:EE:90:95:52:66:00:2E:A7:E0
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       53C64CA558319DCD1B7B470BCB92FFCDFDF4A11B
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e302e302f32322d3232203d3e20323632373039.roa
Signing time:             Thu 20 Apr 2023 14:41:35 +0000
ROA not before:           Thu 20 Apr 2023 14:36:35 +0000
ROA not after:            Thu 18 Apr 2024 14:41:35 +0000
asID:                     262709
IP address blocks:        187.111.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c6:4c:a5:58:31:9d:cd:1b:7b:47:0b:cb:92:ff:cd:fd:f4:a1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: Apr 20 14:36:35 2023 GMT
            Not After : Apr 18 14:41:35 2024 GMT
        Subject: CN=41730CA51FE4C52E76F975EE90955266002EA7E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:9b:53:c1:02:32:76:5b:74:63:29:cc:60:
                    3b:e5:c4:4d:e4:dc:b6:9f:2b:20:1f:f4:86:eb:eb:
                    49:44:33:88:5a:27:93:4b:91:74:0c:8d:c5:13:94:
                    1b:02:17:9b:cc:d6:6a:68:d7:cb:a4:b1:cf:82:d7:
                    86:50:9c:8f:d1:01:70:95:26:c5:9c:3e:23:8a:32:
                    1f:a1:00:17:c7:2e:b6:16:ee:c5:79:cc:6d:72:74:
                    e6:0b:49:55:0a:2c:07:4a:50:59:32:97:40:df:59:
                    e3:9d:30:ab:44:4b:58:12:b2:82:27:a3:ab:0b:87:
                    15:f1:01:1e:ac:f9:b4:7d:26:d8:bf:3c:77:00:f6:
                    a7:09:64:c4:2a:90:33:d1:e9:57:df:ea:be:fd:78:
                    2d:fa:7f:c3:49:0d:1c:3c:fe:1a:3a:e8:07:80:e2:
                    96:c9:72:cb:d3:f1:ed:e3:3b:b9:66:d1:2f:6d:1c:
                    29:d4:40:8d:16:98:c3:0d:d1:b3:e6:2d:30:ee:47:
                    68:bb:48:ae:2d:c7:aa:00:26:93:4f:c0:b7:7c:1d:
                    45:8a:78:9f:a6:3f:76:af:ef:40:c4:06:5c:e2:76:
                    69:5c:0f:5f:04:e3:8b:06:40:7e:ea:a7:47:a0:6c:
                    ec:88:84:d8:de:07:da:39:75:a5:a9:9a:9a:73:97:
                    cf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:73:0C:A5:1F:E4:C5:2E:76:F9:75:EE:90:95:52:66:00:2E:A7:E0
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e302e302f32322d3232203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:0b:b1:9c:09:dd:78:fa:4b:f2:fe:21:f9:31:bb:e3:fc:0c:
         4d:3b:2c:1c:51:2a:65:72:b5:2c:bc:1a:46:df:f0:ac:82:4b:
         a1:a6:35:9f:6d:a5:04:f2:d9:0d:be:ac:ec:86:4e:d2:97:46:
         7a:60:9b:18:bb:23:64:13:c1:c7:c4:64:ac:d7:c0:ec:43:83:
         2a:b7:1a:b1:38:19:e9:a4:f2:0c:26:f1:58:88:b2:7a:90:f9:
         4d:75:62:fe:ed:d9:d9:b7:bf:d6:df:a4:46:10:e6:57:1e:0b:
         c8:5b:51:37:fb:c1:1d:3b:9a:71:0d:02:f6:14:cc:cb:84:eb:
         59:03:82:17:8f:7b:42:99:0c:83:e5:74:a2:e6:ba:1f:8e:b7:
         a1:6a:e7:00:1c:03:35:6a:da:24:e9:c5:bf:59:57:e1:02:18:
         00:4f:33:2d:b6:79:fc:0c:41:51:a9:a9:d7:4f:27:b1:ed:a0:
         c1:13:d0:49:90:87:50:42:29:99:e8:fb:e9:f0:cd:5e:9f:f1:
         88:b5:01:6e:44:80:85:18:a9:12:56:53:5c:1a:46:71:3a:cb:
         49:9b:bc:55:d2:5c:27:be:c8:35:cc:a3:05:96:57:36:7b:e8:
         0b:d3:d7:4b:5e:47:55:bb:74:02:b5:d4:19:11:a2:d2:f6:63:
         73:22:77:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org