Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3231302e302f32332d3233203d3e20323633303236.roa
File:                     3138362e3234392e3231302e302f32332d3233203d3e20323633303236.roa (raw, json)
Hash identifier:          1yYNUhTG+wvCVOVUPzRZTy1QFTwjE6hvT0nU1EQf2x4=
Subject key identifier:   94:20:4B:4F:49:98:B1:2E:B1:34:A0:BE:AD:57:F1:EF:62:F8:DE:6C
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       12E3ADAF484A761F743E160869AC32FCFEFEB253
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3231302e302f32332d3233203d3e20323633303236.roa
Signing time:             Thu 15 Jun 2023 20:03:10 +0000
ROA not before:           Thu 15 Jun 2023 19:58:10 +0000
ROA not after:            Thu 13 Jun 2024 20:03:10 +0000
asID:                     263026
IP address blocks:        186.249.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e3:ad:af:48:4a:76:1f:74:3e:16:08:69:ac:32:fc:fe:fe:b2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Jun 15 19:58:10 2023 GMT
            Not After : Jun 13 20:03:10 2024 GMT
        Subject: CN=94204B4F4998B12EB134A0BEAD57F1EF62F8DE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:0e:ec:11:c4:50:92:60:57:66:cf:7a:f4:
                    ff:6b:e2:d8:6e:dd:b3:1c:a8:12:60:bd:0c:cb:d5:
                    ee:e7:d1:a1:c2:94:9c:79:11:fb:17:b7:6f:9f:14:
                    69:28:bc:c0:64:be:7c:fb:ca:cd:f3:bc:55:49:5b:
                    94:fa:ab:64:a2:f8:f6:6a:9b:b2:17:e6:97:14:d5:
                    b2:95:96:75:10:b2:b3:de:32:a4:c3:85:a6:19:c3:
                    86:34:d9:6a:e6:0d:ce:f0:1c:f1:21:40:2e:46:67:
                    fb:c3:68:66:d5:c4:91:0d:c8:9f:72:7c:8d:54:02:
                    4e:d7:72:0d:c7:bd:32:4e:50:eb:fb:73:7f:b7:43:
                    63:9d:fc:4e:72:96:c8:29:be:9e:ca:c1:64:f9:3e:
                    86:da:75:6d:4b:37:8b:62:48:61:de:14:41:af:9a:
                    86:68:e7:37:39:9a:43:34:35:23:5d:a6:b4:40:5d:
                    8c:3f:a7:71:7b:f1:f7:f1:31:d8:be:50:b0:56:aa:
                    40:bc:b1:f7:f5:de:b7:93:db:5a:93:d9:69:04:f0:
                    ad:b5:b8:cb:d0:fc:e1:a6:e7:e0:2e:d6:62:96:17:
                    e7:8b:2c:53:8b:08:49:eb:0b:bf:f6:7a:76:52:2f:
                    39:6a:ae:ef:4c:c9:aa:8e:4b:6d:b1:44:1a:1a:ca:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:20:4B:4F:49:98:B1:2E:B1:34:A0:BE:AD:57:F1:EF:62:F8:DE:6C
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3231302e302f32332d3233203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:81:84:59:33:72:62:da:45:58:b3:5d:c5:8c:c3:7e:5d:ec:
         0f:45:1c:bd:ce:8d:ce:2e:f8:35:55:b2:3a:db:2e:35:42:32:
         df:63:61:bb:95:6a:5a:5a:de:25:13:8a:e2:05:ee:c8:c5:f2:
         17:ba:a7:0b:b7:07:cf:8c:cb:f9:bb:81:4c:e5:ee:ea:0e:9a:
         99:c3:a3:52:af:be:da:46:fb:e6:1a:e4:9d:62:2a:39:cb:1e:
         f1:f2:6a:b1:4e:a3:e0:2f:b1:f4:8c:8e:af:cc:2c:96:15:b7:
         8f:f5:db:b2:80:2a:a9:55:20:49:f5:a8:c2:b0:d4:1c:ba:c4:
         93:1a:bc:a4:56:e6:f4:4b:90:81:a0:83:20:55:12:75:47:c1:
         d4:27:f1:bd:35:b6:ba:61:10:2a:38:cf:31:19:50:c7:fe:05:
         91:a8:aa:b7:ff:1d:65:05:f3:3e:e9:a2:d0:fd:c3:22:38:8a:
         1a:73:82:ce:28:7d:9b:a9:bd:34:92:80:35:09:3f:c3:36:cd:
         cf:f6:59:57:60:9a:d6:36:9d:98:63:45:45:39:8b:db:6c:ab:
         a2:6d:55:11:a3:cb:ff:74:04:5a:f7:30:96:0c:b2:09:c8:6c:
         91:1a:f3:70:91:49:b3:0a:b0:d5:99:d6:28:51:a9:90:5b:2b:
         81:c8:4b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org