Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3138362e3235302e3139312e302f32342d3234203d3e20323633353534.roa
File:                     3138362e3235302e3139312e302f32342d3234203d3e20323633353534.roa (raw, json)
Hash identifier:          dnD80tGylWAHTjrVpG6Us9v2X0WsARBvnEQaoUrMxtU=
Subject key identifier:   82:D7:51:E0:AB:87:8E:D1:C2:B5:4C:45:E6:6D:A5:10:98:A8:2E:1A
Certificate issuer:       /CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
Certificate serial:       05A9EE5CB76F59A01C6B7C0A83475A9AD4BB17F2
Authority key identifier: 6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3138362e3235302e3139312e302f32342d3234203d3e20323633353534.roa
Signing time:             Wed 28 Dec 2022 20:20:00 +0000
ROA not before:           Wed 28 Dec 2022 20:15:00 +0000
ROA not after:            Wed 27 Dec 2023 20:20:00 +0000
asID:                     263554
IP address blocks:        186.250.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a9:ee:5c:b7:6f:59:a0:1c:6b:7c:0a:83:47:5a:9a:d4:bb:17:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
        Validity
            Not Before: Dec 28 20:15:00 2022 GMT
            Not After : Dec 27 20:20:00 2023 GMT
        Subject: CN=3082010A0282010100E0E9DC87396333FD56F057C74B3ACD66E2EBF6132CFBF61D540A33462098B84BF415D6441A434DE426D326FC97D2F5673C2929A47E581340DBD53F2939EB7CC92852AD7F32EFE16B2A2C54D9A81505BDE30FBEA79CAB330F913CAB4E6F08918ED31ED99C1489C4D1B5418AEB5596F09A35799B4864A24CF579F2073794D949C619E88C91D6BC81629EE9DF1CB3B9CDAE217D805AD82D63FA2A9A538B61167CFCB5CF62E72AD13506C091F17987A147FC71C6CE71E156A2CCFACBCA26599EC5F1B7D04472CFD2366C0679DBC54FFA36690D35A418CA84C834A9D83930B22E60C3DAE1CA3E1882301FD913EB6F6967F440744A7999D93196582BC10B3EE6ED242D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e9:dc:87:39:63:33:fd:56:f0:57:c7:4b:3a:
                    cd:66:e2:eb:f6:13:2c:fb:f6:1d:54:0a:33:46:20:
                    98:b8:4b:f4:15:d6:44:1a:43:4d:e4:26:d3:26:fc:
                    97:d2:f5:67:3c:29:29:a4:7e:58:13:40:db:d5:3f:
                    29:39:eb:7c:c9:28:52:ad:7f:32:ef:e1:6b:2a:2c:
                    54:d9:a8:15:05:bd:e3:0f:be:a7:9c:ab:33:0f:91:
                    3c:ab:4e:6f:08:91:8e:d3:1e:d9:9c:14:89:c4:d1:
                    b5:41:8a:eb:55:96:f0:9a:35:79:9b:48:64:a2:4c:
                    f5:79:f2:07:37:94:d9:49:c6:19:e8:8c:91:d6:bc:
                    81:62:9e:e9:df:1c:b3:b9:cd:ae:21:7d:80:5a:d8:
                    2d:63:fa:2a:9a:53:8b:61:16:7c:fc:b5:cf:62:e7:
                    2a:d1:35:06:c0:91:f1:79:87:a1:47:fc:71:c6:ce:
                    71:e1:56:a2:cc:fa:cb:ca:26:59:9e:c5:f1:b7:d0:
                    44:72:cf:d2:36:6c:06:79:db:c5:4f:fa:36:69:0d:
                    35:a4:18:ca:84:c8:34:a9:d8:39:30:b2:2e:60:c3:
                    da:e1:ca:3e:18:82:30:1f:d9:13:eb:6f:69:67:f4:
                    40:74:4a:79:99:d9:31:96:58:2b:c1:0b:3e:e6:ed:
                    24:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D7:51:E0:AB:87:8E:D1:C2:B5:4C:45:E6:6D:A5:10:98:A8:2E:1A
            X509v3 Authority Key Identifier:
                keyid:6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3138362e3235302e3139312e302f32342d3234203d3e20323633353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:73:61:9c:db:40:d2:e5:a1:29:38:53:0f:63:35:75:6e:49:
         63:b8:46:e8:ca:b4:7b:31:60:35:ba:58:6f:92:b6:e3:41:19:
         e2:07:52:f8:30:9b:7f:fa:dc:1b:69:42:91:6d:57:40:e7:bb:
         bb:e1:86:aa:82:5e:9d:82:24:19:83:87:bc:1a:93:a1:59:99:
         59:cd:b8:eb:bf:87:9b:ed:f4:c3:12:a2:42:5b:eb:82:7a:f5:
         bb:29:56:d4:6c:3d:8c:f5:b4:03:0b:e8:b2:20:54:7c:e4:46:
         44:bf:49:22:9f:53:2a:10:44:9c:1b:7f:a4:9f:d4:40:3e:bd:
         91:58:11:44:1a:1b:65:ed:19:b9:5c:db:50:30:46:73:60:04:
         1e:22:8a:2e:df:37:89:ad:81:a5:cf:35:c8:54:08:af:a1:4b:
         0c:ca:21:6d:02:0c:7e:0e:0b:97:f7:b5:97:29:40:08:c1:0b:
         22:5c:30:5c:07:55:87:d8:c0:49:57:ad:2b:18:17:52:38:38:
         4d:04:e5:1d:a1:f3:41:04:dc:73:45:81:3f:0e:77:fc:9c:3a:
         03:6d:2d:fe:0b:d6:ad:b9:99:2f:7a:2d:fa:39:18:0c:2b:13:
         9d:bc:bf:c6:bc:fa:c8:8b:ba:df:32:cd:99:bd:e2:b6:78:4b:
         ef:29:eb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org