Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138362e302f32332d3233203d3e20323632353332.roa
File:                     3138362e3234392e3138362e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          lLetkccmgHZ3gnjYvWKbN5guJXoaxDkYWiD8YsVXGMA=
Subject key identifier:   4E:B0:1C:2F:55:FD:66:D3:70:C4:F0:4C:AF:B1:6D:66:02:8C:3B:BF
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       58FD266A2372DBF1A2509D5EC60C4450109A22A8
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138362e302f32332d3233203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:12:11 +0000
ROA not before:           Wed 28 Feb 2024 14:07:11 +0000
ROA not after:            Wed 26 Feb 2025 14:12:11 +0000
asID:                     262532
IP address blocks:        186.249.186.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fd:26:6a:23:72:db:f1:a2:50:9d:5e:c6:0c:44:50:10:9a:22:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:07:11 2024 GMT
            Not After : Feb 26 14:12:11 2025 GMT
        Subject: CN=4EB01C2F55FD66D370C4F04CAFB16D66028C3BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:b9:66:0f:ab:0e:41:ea:5f:fb:fb:27:54:
                    bf:56:93:5c:0c:ab:68:3f:98:fd:df:54:d8:0d:2b:
                    20:a5:60:d9:60:d5:ee:54:de:c6:ca:40:f6:0c:1a:
                    d6:36:86:5f:12:70:62:17:fa:a0:86:0d:3b:e6:69:
                    a1:57:38:e4:55:b6:ff:b6:ca:f2:9d:18:d9:b0:b1:
                    f9:74:da:e1:a7:bb:b4:6d:60:7e:9b:a8:a1:34:5e:
                    13:32:40:60:6a:e9:37:f5:59:70:71:f7:7c:70:b2:
                    99:70:c3:18:95:8c:0e:68:c4:57:f5:5f:8f:b5:c7:
                    7b:64:8a:dc:db:39:bc:18:48:b6:45:63:f7:64:4d:
                    ed:d7:73:82:19:2b:38:c2:37:73:fc:a6:0a:eb:dd:
                    b5:f2:6a:fc:42:04:10:0b:88:3f:83:f9:c8:89:1e:
                    3e:5b:1e:33:d5:ea:a0:30:44:a3:b5:ff:43:51:b0:
                    08:5b:84:a4:ca:4d:7d:ff:ab:af:9b:b3:7d:ba:5f:
                    87:13:45:97:24:07:57:ce:b2:56:7e:29:d8:4c:06:
                    fd:eb:05:ef:92:3d:98:d9:65:b9:90:1c:2c:f5:d2:
                    db:04:fe:0e:89:1d:8f:b1:8f:95:f1:dd:10:1a:7e:
                    1e:27:1c:a9:bf:a5:e4:b4:d5:54:4e:e2:8b:3f:5f:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B0:1C:2F:55:FD:66:D3:70:C4:F0:4C:AF:B1:6D:66:02:8C:3B:BF
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138362e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:74:c4:57:b9:0a:44:48:3a:ee:fd:07:0f:f5:14:36:ea:b4:
         e8:b9:5a:62:0e:40:86:5b:9b:14:85:a8:42:76:4e:b5:32:c8:
         ba:4a:1d:91:ae:07:0e:2e:0d:3f:26:0c:4a:8a:9f:09:a5:9e:
         4d:06:a6:9e:04:96:59:9e:48:ff:34:4f:7f:4a:00:ef:9e:76:
         b5:7c:ac:5d:56:2c:8c:f6:35:a7:b4:72:3d:c8:bb:23:6b:e2:
         cc:38:ce:f2:46:dd:10:df:e9:e4:18:21:84:a5:5f:46:55:a1:
         d3:25:87:7a:bd:8e:c7:1f:f3:5a:a5:c1:08:cc:04:c2:9a:e2:
         4a:72:4c:a2:0a:e6:f2:e5:31:87:90:17:aa:17:d3:fb:e6:75:
         44:a4:cc:c3:cb:1b:cf:af:8d:a8:b4:b1:26:ac:84:0e:0b:1b:
         96:09:d9:49:e2:4a:ea:bd:f4:c6:7e:bc:e3:46:41:b0:e3:96:
         91:d9:27:ad:93:ca:5b:c0:42:95:2e:26:f2:ff:f2:71:9c:cf:
         ff:be:8e:c3:40:9d:46:b9:1b:21:bd:f8:b2:d8:e0:eb:15:f8:
         1e:41:56:3e:f9:63:28:c3:56:20:26:8b:19:eb:5e:c1:ae:4f:
         1a:58:16:d2:50:2d:07:98:00:17:eb:56:db:95:a3:af:25:e0:
         32:b7:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org