Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3138362e3235302e3138382e302f32322d3232203d3e20323633353534.roa
File:                     3138362e3235302e3138382e302f32322d3232203d3e20323633353534.roa (raw, json)
Hash identifier:          A/8U9BxQRDWZBiERvNNUfL2h6BZ7A56wpAdlnxQ0yZY=
Subject key identifier:   A2:F8:9C:46:FA:48:21:36:83:93:1D:1C:B0:43:04:8A:0D:D0:83:A4
Certificate issuer:       /CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
Certificate serial:       5A0BA777E0A44E5D3C2B99F84B0806AA414CC9D3
Authority key identifier: 6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3138362e3235302e3138382e302f32322d3232203d3e20323633353534.roa
Signing time:             Wed 28 Dec 2022 20:20:01 +0000
ROA not before:           Wed 28 Dec 2022 20:15:01 +0000
ROA not after:            Wed 27 Dec 2023 20:20:01 +0000
asID:                     263554
IP address blocks:        186.250.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0b:a7:77:e0:a4:4e:5d:3c:2b:99:f8:4b:08:06:aa:41:4c:c9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
        Validity
            Not Before: Dec 28 20:15:01 2022 GMT
            Not After : Dec 27 20:20:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:65:59:27:3a:50:b9:69:fb:65:65:2f:03:2b:
                    47:77:6e:b5:37:f3:24:52:01:4d:dc:69:9a:cb:c6:
                    10:3e:63:f1:d6:69:ff:19:37:07:e9:91:f3:08:6e:
                    d2:f0:52:8c:d1:3a:c3:0e:ed:78:f4:e9:41:d8:4b:
                    e9:c2:c9:95:e6:ed:c0:91:eb:db:4a:18:07:f2:50:
                    df:43:07:bd:97:04:b3:a3:b5:bb:c7:9b:54:aa:c9:
                    28:c2:bb:99:e7:f8:de:40:4b:3e:2a:a6:66:86:eb:
                    22:71:af:85:1a:64:03:f6:1a:0d:ac:1a:3e:93:83:
                    84:01:1e:19:e8:31:ec:c0:a7:62:14:e6:7e:fc:a3:
                    88:ba:2f:dc:90:25:68:bd:4b:3e:52:63:c9:d4:0d:
                    15:ba:89:7e:4d:3d:c1:1a:4d:d1:76:47:f9:36:ff:
                    87:6d:0f:b0:8f:01:4e:d2:39:85:73:85:ce:dc:df:
                    28:d3:44:94:42:58:9a:d8:27:de:d5:35:b8:e4:cf:
                    03:e2:e0:64:1c:97:8c:f6:b7:00:d4:68:e3:57:e0:
                    2f:3b:16:ea:c1:61:85:6c:d0:0a:90:a6:2b:cc:57:
                    e1:6a:94:5d:7e:99:20:88:6b:00:45:39:41:82:3b:
                    eb:b2:a2:08:f1:f7:2a:64:05:f6:8f:da:99:ae:fd:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:9C:46:FA:48:21:36:83:93:1D:1C:B0:43:04:8A:0D:D0:83:A4
            X509v3 Authority Key Identifier:
                keyid:6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3138362e3235302e3138382e302f32322d3232203d3e20323633353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:34:a7:2a:18:e5:43:fc:9c:d3:a3:81:f4:eb:e1:87:70:ea:
         dd:de:f1:95:eb:d5:66:a5:eb:36:7e:80:35:b3:3a:76:2d:b0:
         3e:f1:b4:54:03:a3:41:b0:9a:aa:8f:ad:49:19:af:85:69:90:
         57:97:c7:75:bc:0e:cb:eb:0a:f0:47:71:74:05:0d:2d:b6:a7:
         21:21:60:04:b6:8e:84:47:7b:a1:d9:0a:4b:eb:ac:29:59:47:
         92:42:a4:ba:f6:99:36:e3:35:77:4c:c1:53:1a:9c:34:2b:a6:
         65:4e:92:68:85:00:c2:bf:52:a3:b7:ad:e0:05:57:6c:2c:b7:
         a0:e5:ef:4c:7b:35:6b:f1:33:9e:dc:26:b3:9c:65:de:b7:d0:
         28:c4:d4:f6:3e:32:d7:9a:d0:17:cf:f1:cf:98:a3:0e:93:83:
         8d:70:21:c4:0c:a5:b2:ba:21:89:71:f1:94:37:58:25:bb:4d:
         11:6b:2e:2d:2c:2a:74:4d:f3:6e:2c:76:d3:d0:7e:43:62:78:
         89:dd:96:8e:56:61:8c:6e:ef:b3:22:4f:20:74:38:35:d4:e2:
         d9:25:3e:15:68:8c:de:fc:42:99:f5:ab:81:42:91:59:eb:aa:
         73:bc:60:64:29:b0:8c:82:25:66:61:28:c7:35:be:a7:52:da:
         b3:dc:d8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org