Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3138362e3233332e3235322e302f32332d3233203d3e20323632343931.roa
File:                     3138362e3233332e3235322e302f32332d3233203d3e20323632343931.roa (raw, json)
Hash identifier:          ubNdZCatWbI6b6kfjJ39ucHgFvz3uiunP9hguUfIKG4=
Subject key identifier:   E3:BC:20:55:18:3E:A8:14:6D:0A:32:05:0B:0A:8E:BD:D4:E0:EA:25
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       05360A3F11FBFC37B5F6A47E6B179C41FE0BC794
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3138362e3233332e3235322e302f32332d3233203d3e20323632343931.roa
Signing time:             Sat 26 Nov 2022 02:48:01 +0000
ROA not before:           Sat 26 Nov 2022 02:43:01 +0000
ROA not after:            Sat 25 Nov 2023 02:48:01 +0000
asID:                     262491
IP address blocks:        186.233.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:36:0a:3f:11:fb:fc:37:b5:f6:a4:7e:6b:17:9c:41:fe:0b:c7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Nov 26 02:43:01 2022 GMT
            Not After : Nov 25 02:48:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:16:9d:a3:6a:96:3b:0f:c7:f9:81:6f:65:1e:
                    f9:4a:54:50:7b:63:94:e7:5a:fa:e8:d1:2f:7d:f3:
                    11:43:b5:08:d2:08:40:e7:5b:cf:00:1f:e4:e2:a4:
                    3e:f9:66:f2:7e:12:9a:03:a6:5b:bc:91:3f:fb:84:
                    a9:c0:64:86:94:5c:44:9e:51:ca:04:45:1b:cc:8e:
                    bd:4f:e8:fa:a0:65:48:58:ea:92:ad:88:0a:9e:5b:
                    fc:03:b5:af:2e:c9:be:39:6f:84:ab:bb:55:cf:70:
                    db:f7:1c:75:a2:20:76:c7:da:8b:e9:06:3a:f8:3f:
                    da:0d:30:61:c9:f6:f0:18:07:9a:9c:53:87:db:aa:
                    34:fd:53:64:80:1f:6b:84:0a:4e:be:b9:63:7c:77:
                    63:af:d2:25:6e:73:02:55:6f:77:4e:b7:57:55:09:
                    0e:83:d6:1d:1e:ef:25:ee:31:b6:5a:8e:24:ac:bf:
                    97:e6:38:e8:66:08:69:82:37:70:ec:8e:20:11:87:
                    bd:de:91:6d:88:af:c8:49:39:8e:60:d5:d2:85:46:
                    ca:4b:e8:45:17:74:66:9d:0f:55:29:df:04:24:b5:
                    ba:6c:ff:a9:cd:7a:2e:da:d2:ea:b7:33:d6:9d:13:
                    20:f1:95:84:a6:b6:5e:58:91:50:df:0a:dd:30:1e:
                    6c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BC:20:55:18:3E:A8:14:6D:0A:32:05:0B:0A:8E:BD:D4:E0:EA:25
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3138362e3233332e3235322e302f32332d3233203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:57:a2:52:72:b4:e4:c8:1d:bf:13:3b:f0:e6:ba:d8:29:05:
         57:39:f8:b7:80:de:20:80:f1:f6:b4:aa:f4:f9:13:0e:7d:18:
         fe:af:4f:ea:34:37:9e:e9:14:00:19:49:44:8f:7b:06:b7:d4:
         ad:9c:f6:46:ae:33:56:a4:ba:b2:0f:2d:66:7f:d7:af:4e:0b:
         45:2e:cb:73:2f:79:60:c5:5a:41:9b:79:80:14:56:ec:c9:9d:
         f8:ab:ba:65:39:8d:22:a3:45:46:41:3c:e3:2d:b6:a7:3f:f1:
         74:91:61:55:d6:78:4c:d9:69:4c:bd:9d:50:1a:b2:57:ab:dd:
         d6:9b:52:ba:d4:34:f9:d6:6c:e4:bb:55:0e:c6:82:c2:66:7a:
         54:cf:e2:ad:f0:04:65:11:63:a3:62:10:8f:d2:15:2b:fd:f1:
         37:0c:70:82:c4:05:9e:98:c3:b5:4f:fd:5a:fc:3c:62:c8:8f:
         a9:2b:f2:90:85:71:fc:76:98:43:56:c2:99:a6:2e:a0:2a:6d:
         69:c7:3e:eb:e6:24:74:f8:42:de:73:5f:1e:fd:b6:4b:8e:2e:
         05:9d:58:ec:5f:32:3a:93:9c:d6:bf:c8:24:59:e7:b2:06:3b:
         32:b9:59:bb:54:97:04:c9:2c:bb:16:37:3a:f2:2e:38:86:2b:
         e8:97:99:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org