Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232332e302f32342d3234203d3e20323633323634.roa
File:                     3138362e3230392e3232332e302f32342d3234203d3e20323633323634.roa (raw, json)
Hash identifier:          IYISmYl1/V333LrpxYTleO1V2PJjXpFXnsfQ6I9BB2s=
Subject key identifier:   92:35:41:FB:3D:7B:F8:41:62:A8:72:3B:3B:E3:CD:66:81:93:07:88
Certificate issuer:       /CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
Certificate serial:       32B5AE531DD9F5C2C327DB7438B012CE8307E3C3
Authority key identifier: B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232332e302f32342d3234203d3e20323633323634.roa
Signing time:             Tue 02 May 2023 16:07:13 +0000
ROA not before:           Tue 02 May 2023 16:02:13 +0000
ROA not after:            Tue 30 Apr 2024 16:07:13 +0000
asID:                     263264
IP address blocks:        186.209.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b5:ae:53:1d:d9:f5:c2:c3:27:db:74:38:b0:12:ce:83:07:e3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
        Validity
            Not Before: May  2 16:02:13 2023 GMT
            Not After : Apr 30 16:07:13 2024 GMT
        Subject: CN=923541FB3D7BF84162A8723B3BE3CD6681930788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:66:6a:da:6e:2f:22:0f:11:00:ae:5a:31:fb:
                    de:15:36:27:bf:56:38:f2:9c:00:d8:8d:d7:62:9f:
                    85:20:cb:7c:27:6a:61:48:26:c2:1a:38:29:2f:b8:
                    ac:8e:2c:37:12:69:29:4f:21:e0:b0:bb:d5:d0:7d:
                    5e:ed:fb:e5:60:e3:11:88:67:fa:6f:98:e0:9b:e1:
                    2c:aa:14:43:4f:fe:57:1f:39:5e:84:d6:7d:bb:ae:
                    69:f5:9d:9d:2c:71:b9:46:05:ab:75:f6:aa:ab:55:
                    a2:5c:1b:e0:15:07:08:3e:57:f1:07:0d:6e:0d:0b:
                    45:60:0d:8d:be:34:c1:78:be:4d:dd:28:96:93:95:
                    7c:4b:4d:93:64:c2:e9:9e:12:8f:c6:6e:21:95:66:
                    db:e3:57:3c:4f:92:f6:b4:cc:f0:8b:08:4f:bf:fa:
                    ea:06:19:ca:cb:18:6c:7a:45:51:f6:cb:30:ce:22:
                    ef:b7:4c:26:d8:6f:19:32:92:1b:29:ec:a0:c5:91:
                    a4:19:51:7d:60:a0:5a:53:40:ae:7b:00:cd:94:8d:
                    07:a4:74:a4:72:e9:31:93:14:a7:d4:9e:4f:a1:78:
                    8d:99:52:58:18:bb:43:6a:ce:cd:c9:48:15:63:cf:
                    71:cc:5c:71:14:a9:3e:c8:c7:70:29:f5:56:d2:4c:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:35:41:FB:3D:7B:F8:41:62:A8:72:3B:3B:E3:CD:66:81:93:07:88
            X509v3 Authority Key Identifier:
                keyid:B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232332e302f32342d3234203d3e20323633323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:8d:54:12:71:75:ea:50:ca:38:bd:aa:71:c5:76:30:de:48:
         78:71:22:35:31:bd:13:bb:ef:be:0c:a3:6b:38:10:71:ce:53:
         24:21:75:a5:d8:95:fb:32:68:d8:13:ac:46:87:f0:07:7a:1f:
         4d:73:8d:05:99:48:43:51:88:0c:24:ba:65:9b:90:5d:fd:e4:
         63:db:05:02:93:f6:5e:7c:9d:4e:84:2f:7b:87:1a:ff:9a:4d:
         9f:c7:bd:7e:d4:5f:92:f0:32:92:4d:bf:0d:f7:8f:10:49:c4:
         b8:0a:d1:81:75:16:67:51:0b:62:10:4a:10:a6:3a:0a:47:0e:
         66:c0:67:79:a8:eb:ef:aa:b4:74:01:2c:4d:3a:f0:2f:35:fa:
         ac:76:c4:b8:59:a2:9e:e4:34:73:be:ca:e0:3a:33:36:49:62:
         6a:19:b7:3b:22:bd:b2:f6:6e:f4:df:56:cf:96:f3:03:5e:ad:
         2f:ee:e5:fd:65:ce:53:01:87:6e:a8:5e:14:26:a8:91:01:92:
         ef:ac:2b:95:c6:f7:89:ae:61:9e:62:05:02:b5:ec:35:36:2b:
         20:3a:52:59:47:89:c7:85:dc:07:68:1b:35:0a:bc:5a:73:fe:
         8c:9e:04:36:a8:ef:dd:a0:92:4e:51:bb:82:5a:91:17:42:e2:
         3b:ad:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org