Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3233203d3e20323633323634.roa
File:                     3138362e3230392e3232322e302f32332d3233203d3e20323633323634.roa (raw, json)
Hash identifier:          bPacAWlFq83ReqTWhbmlXfLfciEmGXrUglMtJ4MZpZQ=
Subject key identifier:   E7:1D:48:58:7D:46:99:95:D9:6B:6F:91:52:E8:3D:8D:1F:15:E7:98
Certificate issuer:       /CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
Certificate serial:       1C253D93A144B2547B597F1C3BB62A8E8D57C1B2
Authority key identifier: B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3233203d3e20323633323634.roa
Signing time:             Tue 02 May 2023 16:06:47 +0000
ROA not before:           Tue 02 May 2023 16:01:47 +0000
ROA not after:            Tue 30 Apr 2024 16:06:47 +0000
asID:                     263264
IP address blocks:        186.209.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:25:3d:93:a1:44:b2:54:7b:59:7f:1c:3b:b6:2a:8e:8d:57:c1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
        Validity
            Not Before: May  2 16:01:47 2023 GMT
            Not After : Apr 30 16:06:47 2024 GMT
        Subject: CN=E71D48587D469995D96B6F9152E83D8D1F15E798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:a2:0b:30:4b:f4:50:0b:19:7b:fe:11:03:
                    dd:ed:c8:cb:69:1f:f3:fb:99:2f:0a:60:a2:41:55:
                    c5:40:07:c3:bc:7c:a7:1d:8b:24:f8:b5:9e:ad:5a:
                    69:34:c2:5c:a7:47:20:ff:84:8c:64:bd:17:0e:ca:
                    56:c2:00:e0:a2:71:8b:92:9a:29:f4:ce:a0:d2:67:
                    ae:c7:a4:5a:b5:8f:be:94:39:a5:54:46:ac:d9:2f:
                    cc:ed:bb:e2:c3:79:a6:f2:ec:1b:08:28:7f:86:e3:
                    59:fd:95:eb:95:df:6c:c0:fc:bc:a9:64:a3:21:6c:
                    60:83:94:0e:d6:b5:88:0e:68:89:c0:da:af:06:02:
                    dc:a0:1f:c8:3e:ed:47:9e:33:5a:7b:3d:9f:3c:94:
                    e9:2d:86:81:c6:15:12:93:a3:bf:df:82:20:98:ab:
                    76:33:88:aa:93:7d:d7:ac:e3:a4:e6:ef:b5:31:eb:
                    0c:2a:1e:ad:7e:c5:8a:a0:4d:ca:1b:66:28:b1:04:
                    9e:43:44:83:c0:7d:66:71:a1:08:de:a3:98:f9:0b:
                    96:e4:6e:0c:ac:f5:31:d3:b1:a7:ff:80:d0:47:a8:
                    7a:a8:cb:de:7e:7d:ee:9d:0d:c2:00:34:7c:0c:23:
                    d3:62:51:ce:4c:2b:5c:41:d1:57:0e:85:1f:e7:82:
                    c7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1D:48:58:7D:46:99:95:D9:6B:6F:91:52:E8:3D:8D:1F:15:E7:98
            X509v3 Authority Key Identifier:
                keyid:B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3233203d3e20323633323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:bb:c3:5a:e8:75:b7:8d:d1:3e:6f:9e:e5:48:2a:35:c0:ff:
         40:29:eb:67:e1:cf:54:5f:7b:84:45:49:62:3c:b8:4c:18:aa:
         0e:f2:9b:b2:fe:2e:f1:b5:83:e9:6b:fb:62:1f:5e:db:09:d3:
         27:13:36:15:7f:33:50:f6:08:af:44:de:4f:85:a0:2e:58:8e:
         db:bd:4e:25:a5:bf:94:12:e8:ed:ca:9a:ad:95:e3:56:e5:b7:
         47:31:74:f1:4a:97:f4:dc:cc:80:37:da:76:7a:ea:94:96:ad:
         51:c5:3d:18:b0:4d:f3:d8:b4:88:1f:69:bf:28:3d:c1:18:12:
         35:bc:8c:c3:d8:62:07:e7:4b:a1:02:a1:34:47:79:61:18:b7:
         d6:27:e3:1e:97:a0:0d:6e:c4:c4:f8:2b:15:23:47:a3:0b:be:
         19:0a:7c:f9:9b:01:70:a1:e0:e6:c7:5a:26:4a:3f:b8:02:c8:
         e4:5c:aa:f8:aa:36:c3:bf:bb:b5:a7:e5:d9:02:f1:69:3b:0e:
         75:09:3a:f6:87:29:5c:a3:3c:b0:7b:63:38:b7:b7:7e:b8:1f:
         53:b2:58:f1:dd:81:58:ff:3b:5b:a2:c7:52:e6:3c:e3:1b:f9:
         25:33:05:93:10:26:0e:b3:4e:1e:56:e8:c9:52:fc:81:7d:e2:
         7f:94:59:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org