Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/1/3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa
File:                     3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa (raw, json)
Hash identifier:          u2CAdo/KTItaJAXDB/4SW+RNPHCpDkiQqdQNcOnnxso=
Subject key identifier:   BA:95:8C:03:D1:E6:E5:C7:B9:8E:66:F6:B2:53:A0:58:FC:71:E2:E7
Certificate issuer:       /CN=2D796204BFA07353ACB0D88D6C851A4393700E99
Certificate serial:       7B8A7FE46804968F3A1EDCFBD5423B40E287DA31
Authority key identifier: 2D:79:62:04:BF:A0:73:53:AC:B0:D8:8D:6C:85:1A:43:93:70:0E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D796204BFA07353ACB0D88D6C851A4393700E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/1/3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa
Signing time:             Wed 03 Apr 2024 21:43:59 +0000
ROA not before:           Wed 03 Apr 2024 21:38:59 +0000
ROA not after:            Wed 02 Apr 2025 21:43:59 +0000
asID:                     262972
IP address blocks:        186.227.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8a:7f:e4:68:04:96:8f:3a:1e:dc:fb:d5:42:3b:40:e2:87:da:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D796204BFA07353ACB0D88D6C851A4393700E99
        Validity
            Not Before: Apr  3 21:38:59 2024 GMT
            Not After : Apr  2 21:43:59 2025 GMT
        Subject: CN=BA958C03D1E6E5C7B98E66F6B253A058FC71E2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:44:fb:5a:7d:86:25:f0:c8:bc:b3:7b:c5:
                    d8:40:1d:70:f0:26:7c:12:1b:92:c1:71:b5:db:1e:
                    3b:a8:17:29:7b:94:63:50:e9:31:ed:30:e5:61:80:
                    e0:c4:3a:56:b9:4a:3f:29:f0:42:90:1a:b7:50:80:
                    32:24:17:90:3c:ed:98:f5:81:8a:d2:13:ea:40:71:
                    15:73:76:69:fd:40:5b:a8:e9:fd:c3:dd:6c:a7:5c:
                    db:50:44:4d:3b:72:e9:8a:f0:fa:e1:fa:37:99:90:
                    80:35:f2:df:95:54:16:60:19:40:fd:d0:a1:6f:d9:
                    ec:e5:f5:8d:06:f9:3d:6e:7c:97:1a:8a:b5:22:5d:
                    07:49:b2:d7:03:8e:77:c4:db:5e:b1:52:50:a2:68:
                    87:67:45:91:37:0f:a5:d2:8f:b7:7c:31:a6:24:3c:
                    c0:cc:ea:1b:ad:a3:d4:f3:f2:dd:27:87:e7:6b:49:
                    51:48:77:95:fc:7c:e6:61:ec:d9:9b:24:f7:48:87:
                    d8:74:63:37:2d:46:5f:ce:3b:17:8b:a8:8e:87:a5:
                    94:15:03:c8:f3:bb:03:33:f7:69:9e:a2:95:13:8d:
                    9e:4e:a4:5f:59:1b:3c:fc:48:22:6a:92:27:bd:0c:
                    88:05:f7:6c:e3:7e:17:ff:96:f5:ea:87:d5:96:72:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:95:8C:03:D1:E6:E5:C7:B9:8E:66:F6:B2:53:A0:58:FC:71:E2:E7
            X509v3 Authority Key Identifier:
                keyid:2D:79:62:04:BF:A0:73:53:AC:B0:D8:8D:6C:85:1A:43:93:70:0E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/1/2D796204BFA07353ACB0D88D6C851A4393700E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D796204BFA07353ACB0D88D6C851A4393700E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/1/3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:0f:1e:f2:9d:a5:f6:cd:86:f8:48:03:1a:2b:f9:74:3a:2f:
         01:97:38:53:04:19:5c:b9:42:9d:55:89:52:31:a2:5a:31:2f:
         f6:4a:ca:33:3d:66:18:c2:42:57:05:98:2b:e0:74:36:cd:ef:
         d8:ee:7f:f3:d9:8c:4a:f8:29:a4:9b:00:c5:eb:69:69:ad:29:
         cd:eb:2c:a1:50:31:0c:c5:9d:9d:00:53:61:2c:27:e5:bf:44:
         23:c9:4e:21:64:1d:15:3d:b4:2b:75:58:b1:97:1d:a5:2d:3e:
         a7:aa:cd:d5:91:e7:17:0c:93:c7:b7:f4:e2:c1:e2:23:40:e0:
         8c:d6:d3:02:f8:3f:b6:a4:80:08:ed:5c:b7:db:c9:68:5e:91:
         df:af:c8:fa:ac:49:91:3c:5a:3c:d4:43:7c:e5:90:ab:98:7b:
         9a:18:04:d5:a9:2d:58:5d:ea:61:0f:71:76:7c:cd:08:73:b1:
         64:77:12:6c:2e:00:c4:4b:e4:9f:04:48:3d:bf:44:1f:76:eb:
         85:b8:04:5c:e1:fd:db:08:d0:44:61:ae:f9:5d:58:d4:18:c7:
         c7:e0:45:93:39:89:4f:46:6a:41:8b:85:6a:de:c3:e7:b3:6a:
         62:16:3d:c1:9b:d2:43:fe:e3:58:cf:96:35:54:d8:af:39:ef:
         b0:85:d9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org