Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36372e302f32342d3234203d3e203532353830.roa
File:                     3138362e3139352e36372e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          2vRrToA06Fd/slK3bxPPxwc41++lC8MxgG6doVZX7R4=
Subject key identifier:   AC:AC:52:46:CC:45:81:45:28:BB:A1:5C:C1:4F:C2:A8:91:19:82:20
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       55671347AE05985725E4E919C566E70170501910
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36372e302f32342d3234203d3e203532353830.roa
Signing time:             Mon 23 Oct 2023 20:28:40 +0000
ROA not before:           Mon 23 Oct 2023 20:23:40 +0000
ROA not after:            Mon 21 Oct 2024 20:28:40 +0000
asID:                     52580
IP address blocks:        186.195.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:67:13:47:ae:05:98:57:25:e4:e9:19:c5:66:e7:01:70:50:19:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Oct 23 20:23:40 2023 GMT
            Not After : Oct 21 20:28:40 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:84:e9:03:d0:93:e8:37:af:cb:5e:95:e2:
                    52:c1:8b:d3:e9:3f:02:4b:94:8a:85:f7:08:24:e4:
                    08:fb:f2:ce:e5:dc:62:67:ab:ac:6c:06:df:76:e0:
                    bb:fc:ce:35:a1:3d:a6:99:3b:80:7f:89:79:b7:b5:
                    a2:27:bd:71:e5:0a:ba:95:ed:48:89:f8:f0:b1:90:
                    bf:00:a3:7b:49:01:df:ee:89:57:91:b9:a6:ce:39:
                    47:c9:44:26:d7:ba:d2:4f:5e:4b:74:d9:03:d6:1b:
                    2a:f9:7a:76:b2:67:2c:b0:68:01:db:f4:06:53:56:
                    7e:48:a6:77:3d:e2:7d:1a:3b:40:75:ab:62:e0:b8:
                    df:a0:b5:ad:2f:d0:08:0d:70:69:82:be:5d:56:18:
                    d4:48:cb:2e:20:51:03:18:6e:b6:d1:c5:b1:0c:88:
                    f3:8b:4e:ce:dc:5e:a4:22:97:8c:fa:5c:5f:1c:00:
                    8c:04:92:fc:4f:08:15:84:79:77:4f:ce:a3:7a:78:
                    48:e5:4e:94:04:14:08:ff:96:e4:40:e2:03:01:09:
                    44:ed:5d:c4:67:40:3d:61:c8:f7:66:43:e9:39:ad:
                    1d:c1:9e:bf:15:17:f2:c8:fe:4e:1e:74:db:c4:27:
                    20:93:f2:cd:ff:20:16:af:81:1f:d9:f3:6b:9d:c5:
                    9d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AC:52:46:CC:45:81:45:28:BB:A1:5C:C1:4F:C2:A8:91:19:82:20
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36372e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:d9:88:f7:69:68:6f:0e:70:2b:5d:e2:fd:58:14:41:f9:a0:
         15:38:39:99:f3:5b:72:7f:91:70:d9:1a:b4:55:89:1c:44:9a:
         25:ba:13:40:aa:5a:82:5d:18:33:7a:bc:54:d0:a0:4c:2a:03:
         c5:07:84:92:da:98:07:69:98:ca:2c:62:5e:64:5f:6b:7f:a1:
         19:48:77:da:bc:ec:15:a1:cd:07:a3:57:5b:c1:c8:01:4d:65:
         16:fc:5c:96:2b:d9:ce:05:9e:c1:5c:2a:bf:7c:7c:c3:06:f6:
         9f:8f:10:38:39:ab:71:1b:f6:59:46:da:6e:38:09:7a:78:e3:
         56:52:47:3b:5e:89:d7:37:58:6f:69:04:3c:1d:00:8d:8c:c6:
         17:c1:22:b5:73:e8:88:f6:49:5b:de:e0:b8:10:43:11:dc:c5:
         31:1c:07:a7:d8:de:b0:fe:34:4f:e7:f0:8f:e0:35:2c:5a:5d:
         19:16:56:26:f9:ed:a6:90:a0:93:ca:69:bb:cc:a3:97:97:02:
         6d:f1:7d:8d:5f:c7:15:1f:57:60:66:7d:15:be:a4:75:d6:6d:
         ed:e8:c5:13:86:cc:59:0d:95:21:ee:ba:84:ed:bc:2b:2e:e5:
         86:e2:1c:1a:5b:0c:a2:38:f2:72:9b:f9:92:23:5e:b3:8e:f6:
         fb:2b:0d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org