Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3231342e302f32342d3234203d3e20323633303236.roa
File:                     3138362e3234392e3231342e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          bvMCAwmlAMX44vD1gE9SRGX03h67AwzWeghFBBdopqE=
Subject key identifier:   94:37:E0:60:6C:00:9B:C0:65:1F:06:8A:73:05:2D:7E:6E:5E:11:76
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       0A9FE924C78DDCB4175B4369B5A2123B7A9DFC0F
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3231342e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 15 Jun 2023 20:03:11 +0000
ROA not before:           Thu 15 Jun 2023 19:58:11 +0000
ROA not after:            Thu 13 Jun 2024 20:03:11 +0000
asID:                     263026
IP address blocks:        186.249.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9f:e9:24:c7:8d:dc:b4:17:5b:43:69:b5:a2:12:3b:7a:9d:fc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Jun 15 19:58:11 2023 GMT
            Not After : Jun 13 20:03:11 2024 GMT
        Subject: CN=9437E0606C009BC0651F068A73052D7E6E5E1176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:f6:da:3b:18:ae:4f:a4:0e:7d:50:61:bb:
                    79:14:b1:e1:89:e4:b2:14:b0:db:6a:e6:48:6f:88:
                    d5:b2:c6:02:6d:4b:0c:01:5d:56:ab:6e:ff:c3:13:
                    e2:a9:06:a1:76:bc:3b:99:0e:c0:c9:f5:8a:db:db:
                    d9:87:66:16:e0:2f:9a:dc:b8:94:ac:c2:76:b1:53:
                    a6:40:1f:fe:a5:c4:67:7f:5e:3c:ce:4e:f0:c9:92:
                    7c:17:3c:e0:a5:67:96:1a:c0:2a:c9:71:68:7a:0d:
                    e9:d2:d6:83:9b:4c:72:f6:68:f5:30:b4:8f:be:ac:
                    39:5b:42:48:0f:33:c0:97:0c:74:c7:3a:e1:bf:7a:
                    4c:05:bb:a4:43:d7:d9:b5:d5:2e:2c:2c:d7:0a:4f:
                    0c:f5:24:6b:8a:7b:63:69:43:50:22:b7:07:ca:81:
                    87:7e:87:8a:ec:f1:d8:a7:79:5d:8e:82:55:4f:f9:
                    f4:de:f8:6a:15:97:90:bf:24:69:8f:c4:8d:32:9f:
                    e0:1d:d5:db:24:ff:79:41:6b:a0:22:da:da:02:e6:
                    42:11:1c:db:01:3d:3a:90:c5:02:e9:26:bf:e7:56:
                    3d:6f:67:a1:c0:89:7a:3f:29:ac:c0:93:a4:b5:c9:
                    f1:46:6b:18:49:20:23:aa:9c:c7:0e:5e:69:60:02:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:37:E0:60:6C:00:9B:C0:65:1F:06:8A:73:05:2D:7E:6E:5E:11:76
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3231342e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:0c:9a:8b:ec:b8:9f:c7:18:5a:3c:3d:69:eb:7d:df:d9:5f:
         d7:14:5d:34:e5:94:3e:34:25:89:35:bb:0f:7d:ec:cd:ad:cf:
         b0:af:09:72:67:7a:47:0f:f9:40:2b:47:f3:f8:d4:1f:c6:3e:
         a7:c8:02:85:94:ad:de:e7:3c:c3:c2:3e:d2:0d:39:1c:f5:87:
         83:61:ff:31:b4:60:08:6a:be:78:53:bd:cb:3b:74:6f:e1:66:
         7d:a1:dc:b6:a0:f5:0a:16:75:c1:18:fd:c5:f8:af:08:6c:6f:
         e8:91:25:c6:0f:b2:26:94:26:fc:86:7e:f9:22:bf:13:b0:4e:
         bc:61:11:50:b3:b1:90:d1:5d:7d:a6:7f:3a:66:67:07:fd:c7:
         18:60:30:c9:d0:7c:17:28:8b:93:73:24:55:6c:31:1e:72:2d:
         de:9e:2d:b0:c5:af:57:22:ee:fe:40:cf:58:8e:74:43:a4:2a:
         ab:19:40:a4:3e:62:b5:4c:2a:92:28:92:c2:b8:c5:f7:e1:a3:
         57:56:fc:bb:da:ee:ee:40:3d:e6:06:dc:06:21:47:ac:1f:ff:
         e2:31:5d:83:bb:b5:f3:a0:66:a0:8a:12:ed:99:e6:82:16:7d:
         12:b2:f1:37:02:d0:c0:7b:65:30:df:e7:cd:31:df:8e:be:3d:
         34:ad:f4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org