Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138322e302f32332d3233203d3e20323632353332.roa
File:                     3138362e3234392e3138322e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          Vc2QE6iFCeV0N9wFQXOgGwnEJ4upc0mxEWo9XQN0Hl8=
Subject key identifier:   5B:0D:E7:6D:0E:AA:CD:89:64:5E:71:5A:21:A1:0E:81:C5:F1:A5:E8
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       2151FFAD11E6FBCAB05E30BFB61C68CE322E1F78
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138322e302f32332d3233203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:12:19 +0000
ROA not before:           Wed 28 Feb 2024 14:07:19 +0000
ROA not after:            Wed 26 Feb 2025 14:12:19 +0000
asID:                     262532
IP address blocks:        186.249.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:51:ff:ad:11:e6:fb:ca:b0:5e:30:bf:b6:1c:68:ce:32:2e:1f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:07:19 2024 GMT
            Not After : Feb 26 14:12:19 2025 GMT
        Subject: CN=5B0DE76D0EAACD89645E715A21A10E81C5F1A5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:ab:6e:93:43:fb:7a:29:80:23:96:65:7e:
                    34:c5:4f:37:0f:6e:24:4c:b3:e1:a7:ed:df:bc:ff:
                    3d:b9:43:40:3c:e5:c7:c8:4c:96:1d:79:2e:7d:4f:
                    22:e3:04:50:d3:7d:2b:3c:c7:74:71:c8:28:f2:de:
                    78:36:fe:7b:a1:e7:1b:21:c2:c8:93:97:c9:0f:3d:
                    20:0a:29:b8:b9:a3:24:c5:06:e9:95:e0:b0:7c:ff:
                    b4:11:ef:52:59:9a:b8:54:e7:2b:e8:44:30:19:4a:
                    ea:6b:f6:23:b6:73:30:3f:0d:9c:be:d3:d9:4b:07:
                    08:1e:04:2e:c3:9e:d0:03:af:ed:da:5c:8a:8d:69:
                    cf:ab:30:89:70:03:cb:8b:61:2d:4b:dd:12:17:1b:
                    2c:4c:9f:17:aa:ad:99:ee:3e:e2:1b:3d:c8:b8:c9:
                    16:47:07:35:fa:db:be:3a:88:02:39:82:ab:a0:65:
                    f7:74:06:c1:88:aa:6f:ed:0e:7f:01:09:3e:87:13:
                    b6:14:aa:28:dc:6f:4e:44:60:05:8d:8a:08:40:95:
                    e1:5c:f4:c2:26:20:0b:49:dd:ce:2e:1f:86:28:97:
                    ca:f4:5e:51:e8:1a:ab:b4:c7:98:65:8f:65:bf:c2:
                    50:2c:90:48:cc:1a:68:6d:d5:5b:f1:e8:df:d6:3f:
                    74:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0D:E7:6D:0E:AA:CD:89:64:5E:71:5A:21:A1:0E:81:C5:F1:A5:E8
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138322e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:4d:4c:70:30:17:21:38:bb:8e:92:84:aa:be:7a:03:d0:4b:
         f7:a7:4e:8d:71:76:20:6f:b4:d1:4a:70:08:6a:0a:ce:c6:69:
         4c:0b:ec:fe:ea:ae:71:5d:ee:82:0e:5a:65:43:0e:00:44:f2:
         52:5f:0a:3a:f4:0f:ca:10:2c:06:d9:70:9a:8b:d9:25:1f:ee:
         5e:57:9e:95:74:60:c6:30:c8:63:21:41:f4:dd:94:6e:ec:52:
         ef:23:c6:a9:d9:e2:0c:54:52:f1:c3:b4:ad:f5:1b:f4:17:8a:
         7c:09:43:cf:76:28:8a:6c:00:1f:fc:38:ec:67:90:28:6e:cb:
         eb:be:a3:c4:5f:a5:8e:78:03:b6:eb:a0:f0:2b:7e:6a:c1:39:
         af:66:40:63:0c:b7:a5:06:33:54:b9:ff:61:78:95:9b:82:ae:
         62:64:fa:ba:b0:02:13:07:7b:35:de:a6:ae:e3:46:ae:a7:17:
         19:e6:5e:93:28:db:40:4d:62:dc:4c:6b:3d:f2:d3:42:63:b3:
         56:38:c0:f5:19:a5:8f:a0:4d:32:ca:fd:a3:e7:50:bf:d4:ff:
         11:17:e0:e4:d5:71:49:18:a7:f2:7f:f7:26:3a:bb:86:77:54:
         83:cd:54:f9:01:b9:ab:05:e0:cd:fc:af:1f:b0:64:19:1a:0c:
         4c:6a:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org