Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e312e302f32342d3234203d3e20323632373039.roa
File:                     3138372e3131312e312e302f32342d3234203d3e20323632373039.roa (raw, json)
Hash identifier:          d9PahNecVu0ZrtpbM6ejDlf+WXbfeBHSez/mvxAepBQ=
Subject key identifier:   1A:72:9C:63:68:31:17:EA:98:29:73:FB:8A:65:96:8F:AC:56:33:30
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       3AD6F7737BCD3F3BCD41F0A2FAEA7EDD24A12D51
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e312e302f32342d3234203d3e20323632373039.roa
Signing time:             Thu 20 Apr 2023 14:41:51 +0000
ROA not before:           Thu 20 Apr 2023 14:36:51 +0000
ROA not after:            Thu 18 Apr 2024 14:41:51 +0000
asID:                     262709
IP address blocks:        187.111.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d6:f7:73:7b:cd:3f:3b:cd:41:f0:a2:fa:ea:7e:dd:24:a1:2d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: Apr 20 14:36:51 2023 GMT
            Not After : Apr 18 14:41:51 2024 GMT
        Subject: CN=1A729C63683117EA982973FB8A65968FAC563330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:79:a7:10:5e:04:73:e4:6c:c3:b4:81:f3:
                    9d:17:ce:f1:c5:82:97:5a:82:bf:c5:80:c0:7f:54:
                    4e:41:5c:4b:a7:d3:d3:41:2f:38:11:5f:61:7b:32:
                    f1:89:d2:a1:07:c4:40:2b:c7:01:06:7c:94:b8:f2:
                    a4:00:00:ed:2d:b9:aa:22:6d:a9:e6:2e:cf:51:4a:
                    6e:ea:d2:81:81:eb:4b:7d:9c:0c:31:17:f9:62:db:
                    45:ae:e3:17:e0:b0:7a:b9:2a:19:36:48:91:06:5d:
                    fd:eb:d4:7e:4f:8a:2d:98:33:e8:b7:ce:0c:1d:45:
                    71:a6:16:73:b8:1d:68:a0:3b:60:f5:7a:9d:2a:c1:
                    df:02:10:3b:00:25:89:e5:af:9e:ec:3a:c2:29:d7:
                    82:4c:86:4f:90:be:e5:40:39:a5:17:cd:5c:b4:0b:
                    e3:d7:1b:2c:8b:83:02:d7:78:7e:b4:11:b6:99:21:
                    47:44:9c:a9:08:19:cd:96:40:3f:61:e5:8a:d7:f2:
                    00:e9:2d:de:01:90:0e:56:76:fd:f6:3a:8c:67:be:
                    7b:23:ad:d3:b6:20:82:87:a9:5c:38:78:86:d4:19:
                    1b:5c:6f:f5:7e:fa:eb:5b:e9:56:5a:c4:bd:2f:1a:
                    db:72:ca:64:f7:2a:d2:e9:c8:25:e0:6b:55:0d:3a:
                    b1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:72:9C:63:68:31:17:EA:98:29:73:FB:8A:65:96:8F:AC:56:33:30
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e312e302f32342d3234203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:dc:d5:72:26:fd:ca:91:c4:d3:db:73:25:fc:4f:fe:0a:33:
         2a:72:b0:86:d1:eb:51:9c:e0:d5:ef:75:65:30:1d:29:a7:5d:
         71:6e:a0:8b:c6:38:fa:75:33:48:a0:c0:61:99:9e:81:32:55:
         05:5e:19:73:36:39:5e:d8:1b:cb:f7:bc:f5:c3:bb:81:ae:77:
         6b:75:f3:2d:94:29:a0:09:fc:c3:19:2f:95:2b:8b:b6:db:aa:
         eb:2e:b0:1d:03:c3:da:01:60:f6:1f:31:69:cb:a5:70:15:61:
         5a:96:f2:35:2e:40:7a:5f:ff:aa:78:f5:13:f3:c3:ea:86:81:
         a0:31:79:d2:9a:ea:49:20:03:e2:ac:a0:0f:ea:f8:36:1d:48:
         77:01:8c:31:81:73:ae:0d:77:33:58:a0:fc:5c:78:e6:6c:cd:
         25:8e:8e:9e:11:42:77:66:ed:48:5b:95:b2:58:57:dd:48:6a:
         e9:49:7a:d7:35:d9:64:d9:18:1c:8e:1a:48:21:5f:f8:5d:d7:
         39:88:85:95:22:b4:d4:62:92:18:d5:e0:45:11:5c:e5:a3:21:
         e9:28:71:eb:fa:d3:aa:2a:29:05:07:dd:42:76:d1:11:a0:ec:
         08:0d:47:b6:29:bf:b0:e4:c2:2b:54:a6:a8:fe:2b:8e:a2:7c:
         e1:e0:58:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org