Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37322e302f32342d3234203d3e203532353830.roa
File:                     3138362e3139352e37322e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          o4KIK4IdrQxK/ISK4RBr2BSTzmfcWWASzHOdfTXO9zU=
Subject key identifier:   2C:11:A4:1B:3F:98:25:EF:08:F0:B2:68:FB:E2:E7:C0:DF:34:7C:C7
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       35CAC4CE2BA617B9A9C9EA5BDE0052F1FB266ECD
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37322e302f32342d3234203d3e203532353830.roa
Signing time:             Mon 23 Oct 2023 20:26:51 +0000
ROA not before:           Mon 23 Oct 2023 20:21:51 +0000
ROA not after:            Mon 21 Oct 2024 20:26:51 +0000
asID:                     52580
IP address blocks:        186.195.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ca:c4:ce:2b:a6:17:b9:a9:c9:ea:5b:de:00:52:f1:fb:26:6e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Oct 23 20:21:51 2023 GMT
            Not After : Oct 21 20:26:51 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:9c:20:74:0d:29:40:13:6d:36:be:97:b6:
                    41:0e:9b:d8:76:34:79:6c:93:75:ce:91:21:70:fe:
                    5e:69:36:e2:20:60:f0:69:18:3b:fa:26:fe:20:95:
                    cc:f9:56:91:e3:d7:df:55:f3:eb:b4:db:d1:b0:77:
                    40:bb:56:6d:77:70:27:30:00:10:95:23:67:80:04:
                    ad:3d:57:57:be:fb:56:c8:cc:5e:f5:fb:d3:4b:be:
                    c2:1a:d7:d0:57:29:cc:62:86:ff:19:c5:28:92:13:
                    d7:86:fe:56:c1:ad:5a:5a:9d:c0:f3:e4:71:8c:df:
                    fe:e5:e8:ea:50:30:32:b1:2c:c8:ad:9e:da:4a:fa:
                    10:96:a5:4b:48:92:5b:10:c9:8f:6d:73:38:79:94:
                    82:b7:01:5f:f4:0c:7e:40:16:8b:16:e7:62:84:db:
                    66:d0:43:e8:7c:18:51:97:a5:33:dd:f9:4a:af:7b:
                    91:89:b7:e7:5b:ba:03:7a:e6:b3:f0:17:96:87:31:
                    d0:83:7f:89:cb:0a:07:2d:86:06:58:2d:79:4a:24:
                    cb:6e:1b:50:30:7b:f2:bb:00:6c:ae:f1:05:d2:34:
                    e9:68:98:bb:23:3f:38:ca:00:9e:1a:11:5f:cc:5a:
                    85:19:ef:cf:01:35:55:03:ea:8f:29:40:c1:a2:48:
                    89:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:11:A4:1B:3F:98:25:EF:08:F0:B2:68:FB:E2:E7:C0:DF:34:7C:C7
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37322e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:4b:20:c8:6f:12:fd:cd:43:ce:d3:06:22:03:3d:10:68:e2:
         8d:ac:dc:eb:71:f7:be:12:e2:86:78:de:c6:08:60:3f:50:d9:
         55:f2:6a:e4:06:25:25:6e:5b:b1:18:bf:93:dd:a4:d4:1b:b4:
         00:97:32:4a:29:12:84:60:31:eb:66:4c:b6:97:a8:fb:97:46:
         18:56:96:7a:b7:72:14:71:2e:b8:b3:5c:81:0e:7a:ac:40:d8:
         ce:5c:ec:84:c0:35:26:25:c4:c8:c8:eb:87:87:bb:45:7c:5b:
         e1:6e:e3:f1:84:9b:21:64:80:4a:e3:14:23:4e:6d:81:2b:1a:
         59:54:60:56:aa:04:5a:6f:6a:cb:9f:01:3f:98:0f:9c:fe:19:
         17:8e:5a:de:77:fd:44:3d:82:c5:1a:97:68:5b:bf:2c:51:d2:
         2b:8d:23:ac:1c:15:0d:c3:6f:01:1b:78:ff:75:7c:29:1b:6d:
         56:c6:03:8e:94:40:fb:c5:1b:cb:e1:6c:3f:75:bc:aa:2d:2b:
         5c:8e:a2:dc:60:34:9e:92:44:37:9d:64:ff:07:e5:6f:66:56:
         fb:27:1e:d1:77:6d:fe:bc:75:94:d3:a8:4c:5d:30:74:12:94:
         66:a7:f8:c5:25:e8:0a:6a:be:22:26:ae:f6:47:44:6f:3a:96:
         ad:c7:d4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org