Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31322e302f32342d3234203d3e20323632373039.roa
File:                     3138372e3131312e31322e302f32342d3234203d3e20323632373039.roa (raw, json)
Hash identifier:          iP2rYzfskBkB0aUeSP9mjlnQUzp7PZRVGX4ylCVZ/uM=
Subject key identifier:   62:0B:DB:74:1C:55:E2:71:49:A2:E2:75:2B:21:9B:2A:25:B9:71:48
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       64359D6126ABDD56DC8DABE059F56E4124A1D366
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31322e302f32342d3234203d3e20323632373039.roa
Signing time:             Sun 23 Apr 2023 20:49:21 +0000
ROA not before:           Sun 23 Apr 2023 20:44:21 +0000
ROA not after:            Sun 21 Apr 2024 20:49:21 +0000
asID:                     262709
IP address blocks:        187.111.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:35:9d:61:26:ab:dd:56:dc:8d:ab:e0:59:f5:6e:41:24:a1:d3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: Apr 23 20:44:21 2023 GMT
            Not After : Apr 21 20:49:21 2024 GMT
        Subject: CN=620BDB741C55E27149A2E2752B219B2A25B97148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f6:8f:d4:5e:aa:0a:51:cc:bd:a7:12:27:ab:
                    1c:79:e9:da:3f:86:95:8d:08:c9:92:ef:30:30:f3:
                    df:6d:0e:4b:05:00:a6:ff:cf:48:15:42:59:dc:4f:
                    aa:b5:be:e2:3b:3a:64:01:50:a7:5e:e7:d2:6c:df:
                    20:d4:e3:31:9b:d9:bb:14:4e:83:46:48:99:f8:b3:
                    54:57:6b:d0:60:e9:2b:b7:3f:8f:93:90:3d:03:c2:
                    d7:f6:27:4c:6d:eb:7a:8b:b7:4f:3e:21:a9:0b:16:
                    51:8e:fb:3e:93:42:4b:f6:df:e4:08:63:9c:7f:13:
                    9f:87:a5:4d:c1:ef:79:41:6a:00:12:57:61:ee:b2:
                    24:bc:01:bc:1f:10:a0:34:4a:a5:90:33:1f:e9:fa:
                    fe:37:c9:8a:43:8e:b3:aa:58:f0:a7:44:e8:dc:50:
                    19:bd:a4:e2:22:33:07:66:fe:a8:10:5b:af:1f:05:
                    35:4c:03:9f:1b:c9:99:8b:7f:1f:1d:53:70:51:e6:
                    fd:37:4b:24:eb:49:bf:0a:a9:6c:51:76:eb:d3:74:
                    1d:1c:bb:b9:89:67:a9:b7:56:af:ea:2d:e6:cd:ae:
                    24:11:02:9b:a6:7b:b0:03:40:c1:6f:e5:54:a5:b9:
                    d7:a0:a2:07:b7:02:45:d0:07:40:65:3f:20:8a:2d:
                    a8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0B:DB:74:1C:55:E2:71:49:A2:E2:75:2B:21:9B:2A:25:B9:71:48
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31322e302f32342d3234203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:eb:3b:70:a3:7a:0e:00:89:9e:af:62:70:4b:85:6a:63:
         69:ac:cd:fd:4c:e9:b8:6f:e1:af:bf:c1:1e:ed:92:54:49:46:
         c8:d6:4b:1b:b4:9f:50:a5:f0:0a:9d:99:83:8e:88:ed:c5:f3:
         91:fe:d4:e0:12:8f:e9:fc:d1:4f:cb:0c:4e:54:8a:f3:3b:a6:
         70:37:57:c5:06:8d:6f:16:a1:f6:86:b9:fa:d1:fe:87:4e:f6:
         b6:66:01:94:47:8a:2c:63:01:48:3f:6f:55:a9:0f:22:0f:02:
         29:35:86:fb:f6:84:b9:8c:6d:58:db:f0:07:b4:1a:f8:7f:6e:
         73:ef:7a:60:08:57:ef:52:cf:ac:4b:04:2c:04:26:c8:d0:a3:
         bc:6a:4c:72:08:1c:4c:47:47:77:5f:f0:7a:44:a0:ce:6f:01:
         69:af:73:fa:95:2b:50:ba:31:fa:5a:ef:75:e0:d4:c8:b0:cb:
         fb:78:09:8d:20:73:8b:65:9c:f5:9f:e7:51:ad:f2:e7:ca:c8:
         0c:3a:0c:56:3d:bd:f0:86:a6:5d:66:24:45:63:ed:6e:54:09:
         b4:8f:0e:0c:29:8d:99:59:89:e1:14:ab:06:bc:3a:88:32:6f:
         82:3e:16:08:a0:f7:e3:62:c8:4f:cd:a5:96:e5:c5:76:20:21:
         65:93:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org