Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3230382e302f32332d3233203d3e20323633303236.roa
File:                     3138362e3234392e3230382e302f32332d3233203d3e20323633303236.roa (raw, json)
Hash identifier:          ToQ6otEZouNwB49CLWkLeBazaObJVt1hUyyQljAJpRs=
Subject key identifier:   A6:80:02:8E:AC:6A:03:BD:38:9B:C1:91:95:F1:26:77:1E:F1:36:0B
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       19802A017D4242BFE27E77EBC5E40DC1C342F1C3
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3230382e302f32332d3233203d3e20323633303236.roa
Signing time:             Thu 15 Jun 2023 20:03:13 +0000
ROA not before:           Thu 15 Jun 2023 19:58:13 +0000
ROA not after:            Thu 13 Jun 2024 20:03:13 +0000
asID:                     263026
IP address blocks:        186.249.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:80:2a:01:7d:42:42:bf:e2:7e:77:eb:c5:e4:0d:c1:c3:42:f1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Jun 15 19:58:13 2023 GMT
            Not After : Jun 13 20:03:13 2024 GMT
        Subject: CN=A680028EAC6A03BD389BC19195F126771EF1360B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:a6:23:e5:9e:6d:18:74:6d:f7:1f:21:e1:
                    dc:b3:0c:c6:61:90:1c:96:ce:f1:6e:e2:a2:93:fd:
                    79:63:b0:c0:4d:01:1e:80:ca:d5:6e:a0:7c:3d:3e:
                    c6:f5:20:d3:83:1e:ae:f9:4e:e9:c5:00:a6:f1:2b:
                    50:de:3e:bd:1c:ec:68:84:0a:35:88:19:ef:36:ad:
                    62:48:5c:a4:7a:35:8c:bc:63:b3:f0:07:3b:02:d5:
                    e0:33:af:13:b2:60:35:2c:66:74:3d:46:e0:1e:52:
                    ee:71:2c:59:0a:b7:2c:27:16:cd:90:20:9b:c4:7b:
                    17:2b:0a:8e:d1:41:db:7f:23:32:e1:d3:7a:2f:ef:
                    b3:78:aa:1c:01:05:44:3a:b1:33:38:36:81:11:53:
                    9e:3f:8d:f0:53:81:03:75:40:0f:b5:cb:f5:31:47:
                    3f:02:e9:a7:06:71:12:c9:48:e7:d1:27:6b:ae:9d:
                    f2:32:38:b5:8c:d8:ea:90:f4:97:e5:6a:f7:14:24:
                    0d:cc:97:05:8b:92:48:33:34:5f:10:fd:a3:5e:a4:
                    8f:04:cc:eb:cb:ab:f5:b6:79:ba:fd:30:b2:69:d9:
                    46:21:ec:e7:2c:0c:77:b6:86:61:c6:7c:6c:4c:3e:
                    ba:7a:72:ea:d8:d9:64:b7:54:eb:40:fe:33:d0:6a:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:80:02:8E:AC:6A:03:BD:38:9B:C1:91:95:F1:26:77:1E:F1:36:0B
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3230382e302f32332d3233203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:50:ef:db:10:83:0b:c3:6e:50:c0:92:6d:19:6b:8b:36:8d:
         c2:5a:9d:d0:1d:06:2c:62:4f:3c:de:2a:89:8c:ba:74:25:77:
         eb:0d:fb:d8:24:57:3a:86:e5:de:5c:33:20:94:11:98:16:63:
         97:bf:75:a6:b6:59:91:52:fc:6f:79:80:12:f6:0b:9f:46:83:
         f2:cd:16:63:0d:f9:38:c4:c9:6b:16:0d:65:40:92:12:73:e4:
         cf:2b:fe:a4:bd:49:39:48:93:c0:d2:16:fe:cf:bf:9c:9d:2d:
         f6:d2:2b:22:41:e2:18:1c:20:b5:a7:9c:34:2e:9d:8e:53:cd:
         e6:26:e8:59:50:7c:37:33:e0:50:33:f8:9b:3a:48:d2:20:2c:
         40:25:c7:40:33:bd:41:1c:96:54:90:96:b4:93:81:6d:f5:d0:
         b2:6b:1d:3a:24:f4:da:53:f2:07:6c:ee:c3:78:b1:8f:5a:e1:
         0d:fa:0f:2c:78:03:75:cc:2d:e9:6a:dd:a1:20:8a:b2:fa:d0:
         6e:d6:73:ef:ef:52:b5:21:e9:69:54:0c:09:7f:a2:2d:0f:b0:
         bb:bb:75:54:80:d5:e8:17:c0:40:bb:98:2c:44:4c:e4:e2:6a:
         f3:19:c9:c5:ec:12:aa:70:2a:38:8d:d2:e9:87:0b:e1:61:2b:
         ef:b2:a2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org