Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e332e302f32342d3234203d3e20323632373039.roa
File:                     3138372e3131312e332e302f32342d3234203d3e20323632373039.roa (raw, json)
Hash identifier:          1H2xSl1m5ftW/SUza/NQzS4x5jQ/PsuRXTNxmJJM+cM=
Subject key identifier:   9B:9B:55:E2:74:70:74:3A:12:79:75:00:2E:E4:E6:84:D4:AD:8B:8D
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       5CFCCCA33954EE3A3AAB6B0E6AEA17DB0AF89BDB
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e332e302f32342d3234203d3e20323632373039.roa
Signing time:             Thu 20 Apr 2023 14:42:52 +0000
ROA not before:           Thu 20 Apr 2023 14:37:52 +0000
ROA not after:            Thu 18 Apr 2024 14:42:52 +0000
asID:                     262709
IP address blocks:        187.111.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fc:cc:a3:39:54:ee:3a:3a:ab:6b:0e:6a:ea:17:db:0a:f8:9b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: Apr 20 14:37:52 2023 GMT
            Not After : Apr 18 14:42:52 2024 GMT
        Subject: CN=9B9B55E27470743A127975002EE4E684D4AD8B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:2c:8d:1c:7c:1a:bc:fa:e2:9b:e5:82:e3:
                    67:70:a2:f3:62:de:9d:4d:bf:44:13:9d:a5:66:8c:
                    bf:5e:9a:73:f5:0c:f7:1e:5b:f8:7d:14:2a:af:a4:
                    08:46:07:84:db:4f:c5:82:36:e3:73:e4:e1:2c:a3:
                    7f:d1:a1:54:cb:d8:e0:e9:32:46:b3:bd:18:b8:8b:
                    33:c6:1a:48:48:66:90:f1:d2:88:c8:56:05:81:3b:
                    3f:ed:c4:0e:50:9e:3a:00:0f:19:d9:94:83:94:36:
                    47:ad:14:40:8e:68:f6:1f:e0:2a:f4:f8:22:b6:67:
                    ce:01:c8:b2:34:ce:bd:d5:6c:9b:04:11:db:c3:3b:
                    cf:89:7c:e7:f7:5c:64:20:aa:07:18:94:57:6d:35:
                    8a:57:11:32:33:3b:cd:1f:e6:0e:66:d5:58:9e:14:
                    30:7d:80:74:b4:5a:25:27:48:42:68:57:ff:2e:94:
                    68:64:c7:53:dc:45:0e:e9:e3:9e:7f:9c:dc:e5:51:
                    f5:18:1f:41:af:30:f1:2f:9e:94:71:7e:e8:27:26:
                    fd:8c:2e:70:66:98:69:16:5f:ac:2e:f4:78:b1:ad:
                    68:70:20:d7:ed:06:9b:0a:3b:74:18:d6:8f:7c:64:
                    10:ce:b7:79:05:89:37:62:0e:cb:1a:6a:e0:61:04:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9B:55:E2:74:70:74:3A:12:79:75:00:2E:E4:E6:84:D4:AD:8B:8D
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e332e302f32342d3234203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:85:62:95:9a:87:5d:df:3f:1e:0e:37:8b:93:63:2f:6a:02:
         9b:78:4c:47:f8:a9:db:f6:52:ca:46:e1:23:2b:33:5d:7c:e6:
         0f:dd:fe:59:db:9a:4b:ba:b1:c8:a1:aa:20:ef:1b:22:2a:e8:
         65:05:9e:40:13:3b:c6:d0:ec:e2:33:7e:27:60:66:7f:35:6e:
         a3:05:52:2e:fa:1f:9b:25:b0:aa:ff:36:ff:03:f5:61:d1:8e:
         96:a9:f3:7f:66:59:ad:12:f7:3b:40:18:9b:ce:84:78:94:e9:
         bd:7d:e9:51:64:ed:67:7b:e8:18:cb:cc:ad:92:a4:31:36:f3:
         c0:25:4e:34:fb:c4:c7:b9:1f:5c:77:c8:8d:65:ee:c7:d6:a1:
         17:e6:6f:27:2a:c8:e0:95:e7:41:cd:f9:8b:0c:23:1f:73:0a:
         d4:e5:e1:1c:84:90:97:bd:51:45:69:06:d1:e5:1a:89:29:b3:
         93:30:d5:eb:55:11:88:dc:10:08:79:e8:57:f7:12:db:3e:7d:
         35:8c:b0:74:06:d2:b2:29:d8:6a:b5:80:9b:e5:e3:39:52:b7:
         66:10:0e:f9:64:2c:49:99:f6:53:62:55:4f:cf:7d:92:0a:02:
         df:53:02:56:b9:3c:7e:65:f4:f9:1a:bb:15:51:d5:a8:a9:9b:
         31:05:3d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org