Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3138362e3235302e3138392e302f32342d3234203d3e20323633353534.roa
File:                     3138362e3235302e3138392e302f32342d3234203d3e20323633353534.roa (raw, json)
Hash identifier:          4Hif1Oa7GsXF4xh8iEzoew1TDvdTJxLRXTxcFBATEy4=
Subject key identifier:   5F:65:19:36:A2:0B:66:28:6C:4D:80:67:FC:4A:99:E8:BB:E3:EF:E2
Certificate issuer:       /CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
Certificate serial:       265F9A7007FAE73C3F85E35FA066D598FA93498C
Authority key identifier: 6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3138362e3235302e3138392e302f32342d3234203d3e20323633353534.roa
Signing time:             Wed 28 Dec 2022 20:20:00 +0000
ROA not before:           Wed 28 Dec 2022 20:15:00 +0000
ROA not after:            Wed 27 Dec 2023 20:20:00 +0000
asID:                     263554
IP address blocks:        186.250.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5f:9a:70:07:fa:e7:3c:3f:85:e3:5f:a0:66:d5:98:fa:93:49:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
        Validity
            Not Before: Dec 28 20:15:00 2022 GMT
            Not After : Dec 27 20:20:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:95:26:fd:26:1e:5d:a4:11:dc:e8:cf:7c:f6:
                    63:59:ec:f8:b7:bf:ef:75:0a:e3:e3:b0:c2:5c:4d:
                    95:68:c0:1b:84:d4:24:94:11:d7:7d:68:de:5a:3c:
                    4e:2f:24:7a:a8:82:a6:b4:ee:2a:0b:02:4f:90:65:
                    38:50:35:a1:fb:aa:a1:56:c4:8b:69:01:12:22:ec:
                    15:67:11:d9:09:b7:ff:7b:6b:5f:bd:ab:44:a3:73:
                    1d:7f:88:4b:83:3e:9e:a4:44:a0:7f:90:46:0c:5e:
                    7a:ce:32:6a:2e:cd:7e:5c:c7:33:d0:d7:f2:f8:6f:
                    3c:db:b5:3c:b2:be:cd:f8:bd:2f:ba:31:76:aa:0a:
                    f8:1f:ed:7e:3d:a0:9c:bc:2b:0b:f6:cf:4a:a3:57:
                    48:ff:0a:74:3c:92:e1:4f:2d:7e:e0:d6:c1:78:d6:
                    44:1a:c1:f1:98:0a:92:f9:7c:5f:f7:c6:03:61:e7:
                    7c:50:26:b4:1c:e5:44:e4:02:77:50:dd:02:84:63:
                    ea:e4:1b:e3:e8:3a:bf:89:f5:89:6b:73:6e:11:cd:
                    c7:ab:8c:fb:4e:5c:80:cb:69:38:49:fb:d4:56:a8:
                    db:4b:82:2d:52:57:54:00:02:9d:11:5a:40:4a:6a:
                    7f:c1:58:e1:20:f9:d8:e9:56:3b:b7:1b:50:19:43:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:65:19:36:A2:0B:66:28:6C:4D:80:67:FC:4A:99:E8:BB:E3:EF:E2
            X509v3 Authority Key Identifier:
                keyid:6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3138362e3235302e3138392e302f32342d3234203d3e20323633353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:35:e8:1a:0e:6b:f0:a3:3d:da:3a:77:e0:d6:81:3d:90:dc:
         11:c3:06:60:1e:aa:64:06:57:1c:b5:28:19:69:fa:93:0d:ba:
         27:74:9e:7d:31:c7:b7:e3:0d:c4:a0:5f:50:94:51:db:b8:c8:
         98:4e:66:07:15:e1:bd:65:62:54:5f:81:33:65:61:23:9d:8c:
         b7:cc:a8:85:60:3c:68:9b:c3:fc:2b:79:ae:d0:cb:6a:3e:71:
         31:29:09:f0:c9:9e:97:05:4f:77:08:1f:a9:de:7c:2a:0f:59:
         0e:95:d1:79:00:40:b3:38:0f:5a:7b:b8:c2:71:76:06:81:11:
         1e:79:ac:6f:af:19:6f:e9:b9:1f:af:6f:3c:0c:ea:f7:24:07:
         e3:b8:37:3b:ad:2e:e5:3d:8c:16:8f:cc:c3:fa:b2:49:90:d5:
         86:e0:0c:b1:09:d8:aa:ea:39:b3:39:b8:67:23:ee:a7:95:62:
         46:01:4b:7b:88:6b:40:1e:be:61:9e:83:6e:9e:17:2c:5f:8d:
         f6:92:61:88:5f:ae:d8:63:4d:56:69:9b:09:d0:22:c5:6b:ae:
         6c:d3:32:4e:c5:f4:1c:24:d2:36:46:db:ca:8a:0d:c3:4e:50:
         1e:b4:c7:69:4d:16:1a:a1:3d:a8:b7:32:61:66:e0:54:98:af:
         cb:ed:ea:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org