Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3231312e302f32342d3234203d3e20323633303236.roa
File:                     3138362e3234392e3231312e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          Y95T2Px+BSWEuDudXYShfIymS2YahgLOzlvfCYYgH8I=
Subject key identifier:   32:99:19:65:04:5E:B0:69:D3:20:2B:5A:7C:D3:79:46:21:FE:71:6F
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       6A01481ADE187EABE0A929CC71BF7DA2DFC43056
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3231312e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 15 Jun 2023 20:03:14 +0000
ROA not before:           Thu 15 Jun 2023 19:58:14 +0000
ROA not after:            Thu 13 Jun 2024 20:03:14 +0000
asID:                     263026
IP address blocks:        186.249.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:01:48:1a:de:18:7e:ab:e0:a9:29:cc:71:bf:7d:a2:df:c4:30:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Jun 15 19:58:14 2023 GMT
            Not After : Jun 13 20:03:14 2024 GMT
        Subject: CN=32991965045EB069D3202B5A7CD3794621FE716F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e6:40:2d:bf:4b:47:11:e1:c4:35:a5:f3:f3:
                    4a:34:23:82:03:80:cd:02:03:4f:2b:01:69:5a:f7:
                    99:e1:19:48:4b:25:b3:1a:3d:ba:de:92:a4:1f:b2:
                    7a:60:d6:67:f4:77:8e:d5:36:df:c3:1d:e0:fc:f8:
                    44:e3:a0:e8:1c:cf:6e:ee:70:24:3f:7b:de:27:cd:
                    bb:20:9a:d3:22:2f:02:a3:90:23:f2:5e:de:8e:68:
                    a0:22:0b:3b:6f:f5:7e:88:43:8a:1c:15:9b:cd:9f:
                    b5:48:12:91:92:0e:e8:a3:64:9e:48:99:d7:65:e4:
                    cc:39:b9:b9:fa:8d:87:f2:cb:06:fa:21:08:3a:09:
                    94:13:3a:09:88:dd:55:c3:29:df:1e:03:52:a7:f1:
                    3a:31:7e:8d:4d:d8:d0:cb:cf:3d:1a:b3:eb:0e:84:
                    e4:04:3a:0c:61:0f:6e:51:94:b7:9b:49:11:78:b5:
                    16:b0:d5:ca:16:ad:8f:5a:fa:40:ac:72:eb:9a:34:
                    cb:83:85:bb:86:c5:2e:a3:42:80:91:02:2b:9c:40:
                    94:84:91:54:95:d2:f9:df:03:12:29:03:f0:c6:31:
                    f6:04:98:ef:42:eb:87:fa:90:ed:7d:53:a5:d2:c7:
                    21:12:4b:b0:2f:06:21:11:6c:a8:0b:b2:16:96:70:
                    0f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:99:19:65:04:5E:B0:69:D3:20:2B:5A:7C:D3:79:46:21:FE:71:6F
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3231312e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:ec:23:8e:dd:b0:db:f9:7d:b3:3a:63:7e:d6:a0:62:f8:b2:
         37:0a:22:b4:7a:ee:9b:07:b5:1e:3b:6c:53:95:dd:11:39:d1:
         64:bc:30:e3:c7:f8:94:f7:93:9d:1e:82:0e:45:64:52:1c:17:
         d3:81:4e:12:22:bc:3c:85:07:0a:62:83:e7:2e:66:e4:fc:6f:
         ee:23:67:1e:db:0e:b1:70:0d:22:72:09:81:9a:49:44:4a:5f:
         56:2a:fc:37:64:a1:05:03:ca:00:da:f5:13:b0:75:cb:fe:72:
         8a:e1:61:1d:8e:41:e6:98:fc:e0:9c:d3:34:8c:59:0e:22:15:
         69:67:98:a0:00:37:b6:7a:0c:d7:df:b3:fe:c7:5c:7d:01:8c:
         6e:cf:31:a8:25:9d:c0:7e:65:b3:cc:8f:33:09:ae:ed:1b:32:
         06:0a:fd:6c:50:0d:75:5a:e3:f6:fa:97:d0:c4:ac:6d:c5:7e:
         bf:de:02:47:0c:35:16:e1:d4:0b:6c:30:f4:10:15:69:bf:de:
         fd:79:16:6d:49:62:8a:cc:15:00:9a:2d:38:3d:b7:2f:e6:e8:
         66:8d:19:47:82:18:d0:21:c8:62:4f:a8:e3:98:d2:e6:af:c4:
         55:f9:13:a0:b2:7a:de:9a:cc:c8:c1:ba:1a:c9:b5:ec:e0:c1:
         fb:aa:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org