Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3138362e3233332e3235322e302f32322d3232203d3e20323632343931.roa
File:                     3138362e3233332e3235322e302f32322d3232203d3e20323632343931.roa (raw, json)
Hash identifier:          zpQcHyomMklp43LvHfFLKeVqTf0KN2Hw7iLToI1LJY0=
Subject key identifier:   64:2E:51:9E:62:14:21:51:07:01:AB:72:09:5D:C9:B7:8D:02:15:D3
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       3624C725686056296383D7285C553C9CFEEEA212
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3138362e3233332e3235322e302f32322d3232203d3e20323632343931.roa
Signing time:             Sat 26 Nov 2022 02:48:01 +0000
ROA not before:           Sat 26 Nov 2022 02:43:01 +0000
ROA not after:            Sat 25 Nov 2023 02:48:01 +0000
asID:                     262491
IP address blocks:        186.233.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:24:c7:25:68:60:56:29:63:83:d7:28:5c:55:3c:9c:fe:ee:a2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Nov 26 02:43:01 2022 GMT
            Not After : Nov 25 02:48:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3e:53:29:f7:09:d6:af:53:72:9e:99:82:80:
                    f1:a8:b1:cb:72:d1:a7:9e:3c:1d:b4:68:16:b9:cb:
                    ce:0a:7c:b7:06:9a:f5:d9:e9:59:8c:8b:58:c5:b0:
                    33:87:c0:26:28:49:26:6c:29:4c:b1:50:41:de:1c:
                    e4:ce:8e:66:e6:33:d2:0a:bc:e8:05:70:a1:de:71:
                    e7:dc:b0:d3:e6:13:0a:85:23:e4:41:ff:b1:33:34:
                    2f:d1:fc:29:14:1b:70:e2:32:cf:62:e1:fd:52:96:
                    e3:58:a4:03:39:a0:ad:d0:ff:bf:d8:20:e8:08:f3:
                    74:1f:ef:9d:79:a8:5c:fd:a9:e1:97:4e:72:8a:c4:
                    6a:c2:fd:6f:ba:11:d8:81:94:cf:79:a9:a8:76:57:
                    56:b5:9b:46:8b:24:a2:9c:c0:db:e7:69:aa:26:a3:
                    d3:8d:52:7b:27:8a:33:3e:c5:37:f2:26:86:13:fd:
                    6e:71:64:ef:94:ce:73:a3:18:fc:e4:7e:29:df:b8:
                    c0:2c:89:26:fb:eb:a3:5c:db:71:f1:95:6e:bf:d2:
                    60:1f:6c:5f:a4:80:f3:f1:68:c9:7f:ef:a7:d2:a8:
                    0b:4f:af:e9:2f:d4:ec:e6:2c:f1:79:e8:27:e3:24:
                    55:c3:cc:33:4b:fe:5b:97:d5:f9:42:f4:cf:b2:84:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:51:9E:62:14:21:51:07:01:AB:72:09:5D:C9:B7:8D:02:15:D3
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3138362e3233332e3235322e302f32322d3232203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:e3:c0:85:0f:51:1c:99:81:99:42:92:e8:33:b2:6d:c7:9a:
         ca:a8:3c:ba:45:62:8f:59:ea:0f:59:ee:9f:e1:a2:e6:b9:65:
         bc:f3:fc:91:b9:f4:e7:5c:e9:a5:d8:98:f2:53:c0:73:97:f5:
         08:55:c7:9b:a0:06:07:a7:96:dd:33:4c:51:8a:00:30:ec:34:
         a8:9a:59:65:f6:69:9b:aa:1d:32:82:17:a7:bc:74:30:a8:5e:
         1a:1c:85:13:25:68:7c:fe:bf:88:9a:70:21:0f:68:44:14:7c:
         ae:c3:c0:b6:40:ed:10:de:93:61:3b:70:93:54:b9:47:7a:4c:
         08:b6:d7:c0:63:4d:a9:ac:de:13:d5:a3:ae:22:ec:1a:9d:cc:
         24:57:09:26:34:b1:6c:94:70:6d:54:77:9e:1b:8a:c1:f2:56:
         5f:3f:f6:05:94:52:bd:76:70:49:dd:24:79:bd:89:e0:aa:89:
         1b:7f:34:fb:a9:8a:76:aa:63:87:19:02:0e:7a:4d:67:8e:a0:
         a8:d9:f6:e7:b7:1c:24:b2:6f:b2:d4:e7:1d:f1:e2:95:89:55:
         e2:0b:69:bc:03:1e:9d:63:75:0d:9e:61:af:7c:dc:ab:f6:a2:
         0e:27:a4:68:fd:c3:45:e5:09:d3:87:cc:5e:cf:05:09:75:92:
         ca:a3:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org