Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/1/3138362e3232372e3233322e302f32322d3232203d3e203533313937.roa
File:                     3138362e3232372e3233322e302f32322d3232203d3e203533313937.roa (raw, json)
Hash identifier:          dMy00uyKooo9z0qqBt0XJ6WzVPL69/OLdMziUBSjkC4=
Subject key identifier:   68:08:1F:58:99:1F:84:00:D6:B1:E8:DA:C6:D7:92:60:D5:10:1F:CE
Certificate issuer:       /CN=260CD613FEE20BDD0AC6C7A4537BD63B7FA65E48
Certificate serial:       17ABB179BF4B4633AA072C2BBAD0E80F4E0228B8
Authority key identifier: 26:0C:D6:13:FE:E2:0B:DD:0A:C6:C7:A4:53:7B:D6:3B:7F:A6:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/260CD613FEE20BDD0AC6C7A4537BD63B7FA65E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/1/3138362e3232372e3233322e302f32322d3232203d3e203533313937.roa
Signing time:             Sat 12 Aug 2023 01:05:37 +0000
ROA not before:           Sat 12 Aug 2023 01:00:37 +0000
ROA not after:            Sat 10 Aug 2024 01:05:37 +0000
asID:                     53197
IP address blocks:        186.227.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ab:b1:79:bf:4b:46:33:aa:07:2c:2b:ba:d0:e8:0f:4e:02:28:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260CD613FEE20BDD0AC6C7A4537BD63B7FA65E48
        Validity
            Not Before: Aug 12 01:00:37 2023 GMT
            Not After : Aug 10 01:05:37 2024 GMT
        Subject: CN=68081F58991F8400D6B1E8DAC6D79260D5101FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:c6:f1:af:f3:b1:a4:7e:38:4c:48:40:60:
                    99:0c:23:c3:46:f0:8b:1a:09:bd:ad:9b:8c:3a:45:
                    50:ca:4e:d6:0d:63:1b:a4:75:c8:94:4a:a7:69:f4:
                    d9:72:f4:f6:ab:0c:54:5d:35:21:0d:c7:b7:8a:45:
                    e9:f7:8f:7b:e3:87:64:e6:5a:39:7d:d8:4e:f2:75:
                    cf:f7:fe:dc:bc:19:59:bc:b9:e3:0f:0c:9c:cb:ea:
                    dc:df:fa:98:47:18:4b:3b:a7:9d:f8:70:64:a5:4b:
                    99:6b:b6:7e:e5:6c:d7:26:de:3d:64:6c:35:4f:85:
                    4d:50:e6:99:0d:f9:f0:e5:34:96:04:61:21:6a:ee:
                    4e:08:5e:62:a8:2d:45:06:2f:54:22:57:02:1b:cf:
                    cb:90:1f:9b:b3:9d:3f:da:16:f7:90:4c:27:21:11:
                    7d:9d:6a:ed:39:d1:41:c1:86:92:44:ab:23:fb:b4:
                    99:1d:c2:fa:80:50:7e:11:0d:f8:cf:d6:fd:14:77:
                    e4:b4:e9:31:08:8c:92:96:b5:eb:1e:a1:cd:63:75:
                    bc:22:d1:3f:e5:1a:5b:b2:bb:d8:b3:09:d8:24:d8:
                    e7:b7:ce:04:0e:43:b9:e3:be:de:67:f9:76:92:7b:
                    a9:a7:70:ab:0d:ef:cd:6a:0f:0c:dc:89:8d:2a:c7:
                    f6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:08:1F:58:99:1F:84:00:D6:B1:E8:DA:C6:D7:92:60:D5:10:1F:CE
            X509v3 Authority Key Identifier:
                keyid:26:0C:D6:13:FE:E2:0B:DD:0A:C6:C7:A4:53:7B:D6:3B:7F:A6:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/1/260CD613FEE20BDD0AC6C7A4537BD63B7FA65E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/260CD613FEE20BDD0AC6C7A4537BD63B7FA65E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/1/3138362e3232372e3233322e302f32322d3232203d3e203533313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:28:df:07:ee:b0:fa:06:35:5c:35:90:19:27:f6:01:d7:b5:
         9d:95:67:0d:3e:ab:e3:5a:0d:22:2d:08:a4:0a:57:65:2b:c5:
         cf:42:49:99:26:5b:0d:4d:f1:17:f6:56:a7:5d:c9:83:74:59:
         a8:26:e4:3b:29:77:14:9d:6d:7b:1a:9b:b9:b9:3a:8a:7b:bd:
         3f:8f:17:4b:a6:9f:b8:2a:b2:77:7e:13:a0:e3:ff:a9:61:36:
         7f:e0:ea:b9:78:74:6d:66:a9:cb:0a:8e:52:ce:4a:1e:ed:60:
         08:14:85:fa:3e:42:26:c4:39:fc:97:13:04:83:ba:d7:1a:a7:
         a0:eb:38:e4:d3:50:39:14:cc:f7:ab:68:00:e3:c3:8b:16:94:
         2c:1f:00:f1:9c:7a:e7:1a:9a:1d:a4:3b:04:87:d8:87:aa:ec:
         70:06:f9:ed:3c:c1:a2:02:76:3b:d8:69:6b:2e:96:6d:3c:e7:
         47:d9:e6:11:b8:97:c3:52:04:a3:c8:8e:89:2f:5b:9b:e5:51:
         a3:0e:0d:04:09:f2:34:d7:7f:8b:ed:73:e7:1b:cc:57:b9:67:
         be:a5:3f:4b:de:d7:0c:df:15:75:ee:23:ee:2a:78:b4:bb:13:
         9d:58:66:2c:42:bb:96:ee:0f:b9:68:4e:fc:bf:0c:1b:b4:d5:
         75:c7:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:31 2023 by rpki-client on console.sobornost.net