Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31312e302f32342d3234203d3e20323632373039.roa
File:                     3138372e3131312e31312e302f32342d3234203d3e20323632373039.roa (raw, json)
Hash identifier:          U7AwMF1Zsg1K7dePBdv4BeL/kAqWkti5PYUyJz0ObAA=
Subject key identifier:   E6:BC:70:A5:44:72:55:59:94:05:94:1F:73:69:94:5C:65:85:EF:51
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       5D8971A56981049CC58A6A96FEED323F6C95ACBD
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31312e302f32342d3234203d3e20323632373039.roa
Signing time:             Sun 23 Apr 2023 20:49:26 +0000
ROA not before:           Sun 23 Apr 2023 20:44:26 +0000
ROA not after:            Sun 21 Apr 2024 20:49:26 +0000
asID:                     262709
IP address blocks:        187.111.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:89:71:a5:69:81:04:9c:c5:8a:6a:96:fe:ed:32:3f:6c:95:ac:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: Apr 23 20:44:26 2023 GMT
            Not After : Apr 21 20:49:26 2024 GMT
        Subject: CN=E6BC70A5447255599405941F7369945C6585EF51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:56:19:aa:34:da:98:a6:ec:f6:38:65:ed:
                    80:40:b2:da:6d:a5:9f:2c:50:3b:d6:b6:07:b7:5f:
                    0d:08:fb:62:6b:d1:11:83:38:64:3c:57:63:7f:b5:
                    c7:c3:c0:e0:67:17:fe:b3:8f:d3:c5:3f:bb:53:3c:
                    e1:18:61:9b:c6:1a:0e:d7:fc:32:84:52:8a:cd:70:
                    59:bc:15:96:00:48:c4:7a:f8:ef:28:1a:68:98:38:
                    bc:80:48:32:a3:f5:f4:01:a7:49:6a:e3:09:a3:04:
                    4c:d2:cf:da:49:b1:b6:be:52:f1:bf:bd:39:c7:4f:
                    a6:fc:d7:fe:a0:de:cf:7b:ef:ed:8c:8a:43:a2:28:
                    46:cc:6e:cf:f1:7d:a7:cc:a5:bc:39:7d:7d:91:35:
                    45:6b:f6:d6:a6:3a:00:41:2f:7d:ea:aa:a8:60:38:
                    e9:80:1e:de:85:c6:d4:45:3e:ba:37:6c:95:89:7d:
                    d0:e7:f0:72:33:c2:be:d2:9b:8f:56:8c:9f:fe:ae:
                    ee:96:4c:1b:88:d9:5a:b3:41:d5:79:4d:af:ae:3e:
                    64:c3:a6:52:ac:58:aa:ca:18:b6:d8:ce:f2:b9:6b:
                    ed:9a:14:d1:c4:4b:6e:74:11:67:59:9d:f6:3e:69:
                    a9:0d:5f:51:f4:e9:23:e7:b5:0f:8a:b9:c3:ba:96:
                    5f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BC:70:A5:44:72:55:59:94:05:94:1F:73:69:94:5C:65:85:EF:51
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31312e302f32342d3234203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:0e:1a:c5:ea:65:45:3c:77:6b:46:4b:bc:cb:2a:6c:de:ba:
         af:aa:60:3f:5c:f4:e3:43:bb:64:b7:0a:8b:9c:19:ff:37:a4:
         e3:84:ea:fe:7d:2d:53:7b:da:b3:73:06:f1:13:ed:2a:96:9e:
         79:81:56:74:44:32:27:c5:b8:10:2f:92:e2:b8:29:a5:ce:6d:
         cf:c3:14:f3:b3:f4:6c:9e:8b:65:a4:4f:7c:57:3a:af:c9:b4:
         85:61:c2:1f:f0:ed:59:c5:be:9b:71:28:32:cd:06:c9:ae:ce:
         8f:30:ae:90:18:05:9c:be:6e:8a:01:7e:21:2c:ce:ea:f6:2c:
         3b:d3:0e:41:1a:d4:58:db:96:4d:84:a5:d4:56:a5:19:28:7e:
         0f:7d:55:b3:b5:ae:e3:92:c3:2c:a4:17:d7:45:67:fd:87:27:
         f3:92:ea:4d:a6:ed:31:c3:53:74:3b:1a:05:c8:e7:c3:b8:8f:
         6d:0d:73:0f:86:b4:ba:ae:6f:66:77:ac:97:ee:10:41:58:4d:
         d0:94:d8:9b:fb:28:0c:bd:b1:5b:a7:c1:98:e8:b9:b4:f8:cb:
         4c:1c:20:36:54:17:6f:bd:2e:de:b9:65:00:a1:aa:d3:eb:7a:
         b9:ed:42:1b:b8:92:0b:a3:d8:1b:f9:d6:f1:e8:dc:3a:98:ab:
         45:a8:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org