Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36362e302f32342d3234203d3e203532353830.roa
File:                     3138362e3139352e36362e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          o0q69mAm+dVAQWAT3adL1l7oaFEilHMYqZKtjWa6lyY=
Subject key identifier:   A1:E4:87:CC:50:CB:B7:F6:84:C2:12:E3:EE:9D:C1:88:A9:7C:B2:45
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       3DD6DF3DAD81E2C583576AF93AD8F1FD8B3AC1AC
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36362e302f32342d3234203d3e203532353830.roa
Signing time:             Wed 06 Sep 2023 17:03:47 +0000
ROA not before:           Wed 06 Sep 2023 16:58:47 +0000
ROA not after:            Wed 04 Sep 2024 17:03:47 +0000
asID:                     52580
IP address blocks:        186.195.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d6:df:3d:ad:81:e2:c5:83:57:6a:f9:3a:d8:f1:fd:8b:3a:c1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Sep  6 16:58:47 2023 GMT
            Not After : Sep  4 17:03:47 2024 GMT
        Subject: CN=3082010A0282010100B9138595D088544A20AC9BE34957924755B5DB7B0A280EE2C2424EA9996902F8B5A9EC9F13728456D5680D3BC359451A83D1E1AF07FA86C1C07925F93747FE2FC40E9422F6C4D1A45998E6EDAC1089E52B049301E9C75F6624D8ED4085DBB78AAC13A49E9E62FAF6A3E1572C82CAD0E02A707E5CED07D647F7E3AF728E3750D176A95C09406D3B52F70B28CF23301989E6816CE2B97759C8F6B48F7CB6F45B890F3DB5072C3E57B77066FCAC9201C2E6DEFA5EDB8611462FAE750FFB10B2C08BF1309093DC6E5BB4DD0B325ED78DFD5FE45109644A9AC739E3AECF9E84C4E04B80E4DF8BBFCC76316FB7CD6ABA73A91C0DC3695A9839CE69A198134C467919310203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:85:95:d0:88:54:4a:20:ac:9b:e3:49:57:
                    92:47:55:b5:db:7b:0a:28:0e:e2:c2:42:4e:a9:99:
                    69:02:f8:b5:a9:ec:9f:13:72:84:56:d5:68:0d:3b:
                    c3:59:45:1a:83:d1:e1:af:07:fa:86:c1:c0:79:25:
                    f9:37:47:fe:2f:c4:0e:94:22:f6:c4:d1:a4:59:98:
                    e6:ed:ac:10:89:e5:2b:04:93:01:e9:c7:5f:66:24:
                    d8:ed:40:85:db:b7:8a:ac:13:a4:9e:9e:62:fa:f6:
                    a3:e1:57:2c:82:ca:d0:e0:2a:70:7e:5c:ed:07:d6:
                    47:f7:e3:af:72:8e:37:50:d1:76:a9:5c:09:40:6d:
                    3b:52:f7:0b:28:cf:23:30:19:89:e6:81:6c:e2:b9:
                    77:59:c8:f6:b4:8f:7c:b6:f4:5b:89:0f:3d:b5:07:
                    2c:3e:57:b7:70:66:fc:ac:92:01:c2:e6:de:fa:5e:
                    db:86:11:46:2f:ae:75:0f:fb:10:b2:c0:8b:f1:30:
                    90:93:dc:6e:5b:b4:dd:0b:32:5e:d7:8d:fd:5f:e4:
                    51:09:64:4a:9a:c7:39:e3:ae:cf:9e:84:c4:e0:4b:
                    80:e4:df:8b:bf:cc:76:31:6f:b7:cd:6a:ba:73:a9:
                    1c:0d:c3:69:5a:98:39:ce:69:a1:98:13:4c:46:79:
                    19:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E4:87:CC:50:CB:B7:F6:84:C2:12:E3:EE:9D:C1:88:A9:7C:B2:45
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36362e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:c4:df:96:46:c1:74:84:67:32:d0:35:76:0a:aa:c4:ba:24:
         fa:ac:69:e3:6f:6a:aa:19:f4:63:43:f4:6a:26:3c:c9:ef:0b:
         a9:92:6b:0e:9f:d6:d2:dd:8f:01:d9:03:d8:b6:b4:e0:81:7b:
         f5:ba:d0:e0:65:54:45:4c:7a:02:36:5c:e3:aa:f5:c5:2a:1c:
         80:f4:ea:42:0b:38:6c:61:71:1e:c4:f1:50:ae:8a:06:6e:0c:
         75:53:63:73:48:16:6f:2c:0a:54:25:78:01:50:b2:ae:e6:39:
         b1:9a:55:4e:03:bd:52:64:9b:10:f0:7c:71:38:91:ee:7d:ca:
         52:57:e6:bc:ff:91:75:04:a4:30:5a:2c:78:2f:b5:c2:ef:1e:
         c8:2c:33:83:4a:5d:2a:91:b3:84:f2:41:d7:f5:43:b4:bd:81:
         16:81:9b:c6:0f:48:7e:f9:94:7c:08:29:89:07:0b:5c:30:95:
         46:37:8b:b0:30:94:c7:8e:9a:91:8f:9c:06:d6:f6:87:97:82:
         bf:ad:2b:ee:91:17:c7:23:0d:e8:56:c9:5d:e2:53:43:d3:89:
         f7:50:9a:e4:44:14:84:5a:55:26:56:82:b8:47:2c:b7:6e:6a:
         ab:a1:56:7f:26:47:c9:d4:7a:c1:64:cd:1e:69:de:49:25:b0:
         1c:76:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org