Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/3138362e3231392e3132302e302f32312d3234203d3e203631383930.roa
File:                     3138362e3231392e3132302e302f32312d3234203d3e203631383930.roa (raw, json)
Hash identifier:          g5ACVtmydGRrYAYVdDUzIxnudCKOdGoVBLIiIZVgRdA=
Subject key identifier:   FB:80:9B:3C:C2:14:9C:D8:33:D0:50:74:7A:EB:17:52:C4:7C:F0:05
Certificate issuer:       /CN=5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05
Certificate serial:       44999471B3403538CBAE8F46653413E0728C1A0B
Authority key identifier: 5A:8C:AA:67:AD:0E:B2:D7:CC:2B:8E:1D:F5:55:EA:81:F5:85:3E:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/3138362e3231392e3132302e302f32312d3234203d3e203631383930.roa
Signing time:             Tue 12 Sep 2023 13:09:12 +0000
ROA not before:           Tue 12 Sep 2023 13:04:12 +0000
ROA not after:            Tue 10 Sep 2024 13:09:12 +0000
asID:                     61890
IP address blocks:        186.219.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:99:94:71:b3:40:35:38:cb:ae:8f:46:65:34:13:e0:72:8c:1a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05
        Validity
            Not Before: Sep 12 13:04:12 2023 GMT
            Not After : Sep 10 13:09:12 2024 GMT
        Subject: CN=FB809B3CC2149CD833D050747AEB1752C47CF005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:ae:83:96:ab:83:1c:50:02:0f:7b:1a:f6:
                    ce:97:6f:e8:e5:ea:be:7e:7b:45:09:8a:a5:52:fd:
                    c9:08:3a:b9:93:ff:e0:19:4e:99:4b:aa:f7:4f:45:
                    05:6a:3a:8a:9f:d1:35:84:04:bd:c3:8e:45:e5:30:
                    90:1e:f3:96:4a:c8:ca:d2:ef:00:dc:9a:d8:9c:86:
                    b7:83:ed:28:62:10:94:ae:80:3b:ff:46:02:c3:a8:
                    5c:48:b7:f3:46:4d:1a:8f:8a:a4:d1:01:c9:69:ea:
                    e4:31:38:5a:f6:b1:51:2e:c3:be:ba:ea:09:52:f8:
                    d0:7a:52:68:06:be:50:65:bd:4e:e1:bd:b5:e7:5d:
                    84:1c:84:8f:8c:a2:38:b4:01:af:7d:e2:94:6e:57:
                    e4:ff:29:e3:80:1d:c6:8e:90:a2:ab:4a:83:20:b1:
                    d6:c6:82:15:f8:b6:4f:52:dc:ea:91:e8:a5:d0:64:
                    89:90:61:a9:a7:ba:bd:e3:8f:f8:b4:fe:6a:14:ac:
                    68:39:97:1f:d6:ed:8c:87:9b:7c:d4:1e:df:b5:ac:
                    a8:37:88:c7:dd:3e:5c:dd:31:89:07:d0:71:c8:de:
                    16:2f:31:ef:e3:19:7a:da:b0:a2:5f:8e:77:30:66:
                    91:ad:ff:fc:ae:a5:94:9b:e3:75:1b:e7:f8:a2:ab:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:80:9B:3C:C2:14:9C:D8:33:D0:50:74:7A:EB:17:52:C4:7C:F0:05
            X509v3 Authority Key Identifier:
                keyid:5A:8C:AA:67:AD:0E:B2:D7:CC:2B:8E:1D:F5:55:EA:81:F5:85:3E:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/3138362e3231392e3132302e302f32312d3234203d3e203631383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c1:6d:ab:9d:e8:18:a1:3a:cd:84:c9:5d:57:56:58:f0:45:3f:
         d8:f7:f7:0d:79:c5:20:43:bc:f7:8c:ed:9f:35:db:a0:b3:d6:
         ab:76:10:52:7c:65:7d:6f:88:ce:90:b0:a3:0a:77:21:31:64:
         77:29:75:6f:62:27:e1:d4:90:e0:a0:34:c2:b8:77:4d:1d:de:
         af:1f:6e:b2:79:74:c4:2d:05:4b:2c:2c:66:d1:bf:6d:b8:c7:
         60:b5:68:ab:1a:89:0b:b9:b8:13:31:c8:35:4c:83:75:5a:66:
         a2:f1:f1:16:2e:3e:b0:b8:45:63:49:41:0e:14:81:b3:13:ac:
         84:98:d5:a5:44:a9:36:37:26:4c:ad:8a:9a:97:15:35:36:46:
         1d:2e:a7:dc:2f:83:cb:c1:4c:53:c3:76:bd:01:cd:e1:01:b9:
         e4:63:7c:12:f6:c4:a4:51:07:a9:cd:95:10:9a:e0:d7:4d:3f:
         0b:cd:ee:e3:39:80:ab:b3:c3:64:4b:5e:bd:3f:9b:7a:65:a0:
         13:93:95:e8:06:95:de:4b:49:eb:f8:f3:95:dc:e9:43:6b:7f:
         2c:f2:08:b1:f1:ef:64:7a:0d:c6:4f:b3:75:ab:49:97:63:01:
         7e:df:b0:c7:65:f9:71:da:7d:c1:ee:bf:c6:ee:ac:f0:a1:7c:
         d0:a0:21:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org