Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31342e302f32332d3233203d3e20323632373039.roa
File:                     3138372e3131312e31342e302f32332d3233203d3e20323632373039.roa (raw, json)
Hash identifier:          UtxwlfuQjJ0Cp4k1PzScUmmvBpQHi6kHfL8pfQ1HDnk=
Subject key identifier:   66:A5:05:66:74:08:B6:C1:0F:4F:67:8D:42:14:DE:E6:3F:4B:87:C0
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       26BE915086AB76DA4B3BB7D7CC85B39051F1AE81
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31342e302f32332d3233203d3e20323632373039.roa
Signing time:             Thu 11 May 2023 12:41:15 +0000
ROA not before:           Thu 11 May 2023 12:36:15 +0000
ROA not after:            Thu 09 May 2024 12:41:15 +0000
asID:                     262709
IP address blocks:        187.111.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:be:91:50:86:ab:76:da:4b:3b:b7:d7:cc:85:b3:90:51:f1:ae:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: May 11 12:36:15 2023 GMT
            Not After : May  9 12:41:15 2024 GMT
        Subject: CN=66A505667408B6C10F4F678D4214DEE63F4B87C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:0d:95:cc:13:0d:12:fd:75:ae:40:d8:eb:
                    56:79:83:7b:18:19:6d:c7:22:9c:97:7b:f4:78:68:
                    5e:3e:60:5f:2a:e7:34:5c:ae:5b:69:61:2c:38:77:
                    17:24:9f:a3:30:02:fd:2e:e2:58:8b:66:56:98:1f:
                    b3:77:85:08:13:f1:c8:69:09:7c:9b:76:a2:d7:44:
                    b9:d2:fa:74:bf:7e:1b:43:76:a0:73:88:5a:c3:50:
                    90:e0:1b:9c:9d:53:ef:8e:8e:af:bf:77:77:81:72:
                    13:fb:2f:a8:c4:9e:75:6d:27:05:2d:22:a8:76:95:
                    eb:31:c3:3e:02:fb:6e:7c:8d:0f:2b:a8:d4:e4:18:
                    59:3c:7c:cd:33:ec:f2:20:4e:18:fc:7d:c9:32:a8:
                    02:a1:e2:f8:ed:1b:46:c1:ef:6a:ad:df:92:c6:32:
                    68:04:ab:32:07:c0:6d:5c:12:f4:c0:c1:5a:19:93:
                    22:d9:88:de:e3:82:57:74:bd:b3:b0:4e:cc:0c:82:
                    29:19:3a:5f:59:bc:f9:dc:8c:d8:bd:1c:7d:70:ae:
                    2f:d4:31:cd:c2:0e:cb:9d:d9:bf:28:07:ab:64:da:
                    d5:df:d4:f5:7d:29:d3:87:87:f5:af:34:41:f2:18:
                    8e:41:de:9f:5f:de:87:ca:49:44:4f:ea:2a:d1:4f:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A5:05:66:74:08:B6:C1:0F:4F:67:8D:42:14:DE:E6:3F:4B:87:C0
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31342e302f32332d3233203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:fc:99:f8:d8:5a:14:0f:f7:1b:33:89:d5:d2:89:ca:6c:51:
         7e:b3:ad:e0:87:82:7d:d6:d3:60:8f:f4:e1:84:bc:a3:c5:d7:
         3f:81:c9:df:39:cc:8f:30:0b:4b:a7:1e:47:99:db:d9:d1:a6:
         60:3b:b6:01:07:a7:73:bd:e7:60:d5:c5:62:c6:a1:90:aa:f9:
         ac:d6:37:94:e3:fd:94:aa:a0:93:e9:4f:c6:6d:75:80:f0:89:
         67:3a:32:cd:f5:77:b7:43:29:6d:de:0f:c3:12:96:d3:34:07:
         b7:a0:7e:c7:a5:5f:51:5a:53:8b:ac:40:79:55:ee:9d:23:34:
         31:7f:3b:86:ec:bc:af:c4:41:f4:29:fc:95:1d:95:e0:73:5d:
         20:d3:d6:8b:d2:78:12:8e:23:3a:6a:5f:37:78:1a:57:c2:00:
         82:e7:b0:2b:2f:c5:cd:91:6c:d9:d6:9f:ac:01:58:b2:96:d1:
         4d:1e:b1:20:e3:66:dc:be:da:03:35:7a:93:6c:15:3b:97:8d:
         42:ba:5a:3e:ba:9f:71:dc:39:8a:6e:cd:8f:52:31:65:a4:bc:
         ed:2b:b5:14:26:02:8b:cd:cc:7b:81:f6:87:af:b3:39:e7:37:
         c8:65:d2:08:60:67:3d:7f:4f:98:44:56:b7:f1:24:6b:50:a4:
         03:27:b7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org