Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3139302e302f32332d3233203d3e20323632353332.roa
File:                     3138362e3234392e3139302e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          Np1PVzaafUFYaQbtc7AoVRZbAB9q5pRRyxCgTK6uibA=
Subject key identifier:   BC:53:02:55:1F:B6:11:51:77:DC:5B:07:78:72:3D:BF:3D:87:13:D1
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       2ACBA3A24F30E505616980C1E46BB9E109919F3B
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3139302e302f32332d3233203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:12:03 +0000
ROA not before:           Wed 28 Feb 2024 14:07:03 +0000
ROA not after:            Wed 26 Feb 2025 14:12:03 +0000
asID:                     262532
IP address blocks:        186.249.190.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cb:a3:a2:4f:30:e5:05:61:69:80:c1:e4:6b:b9:e1:09:91:9f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:07:03 2024 GMT
            Not After : Feb 26 14:12:03 2025 GMT
        Subject: CN=BC5302551FB6115177DC5B0778723DBF3D8713D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:4a:aa:0b:a9:20:7e:b7:6e:0c:04:ea:df:
                    f7:33:0d:fd:a0:5c:00:12:f6:09:32:c5:b0:1c:a4:
                    bc:77:33:c1:fc:6d:00:26:6e:ac:54:ee:39:56:c4:
                    3c:ad:96:37:73:98:12:d3:6d:63:2c:40:5d:97:8f:
                    3a:91:93:3a:ba:ce:ec:ae:0a:18:41:b9:8a:8d:90:
                    89:82:9b:45:31:a8:b1:5b:9f:5b:50:c5:82:1f:2d:
                    fa:e0:8b:d0:23:34:b8:da:53:23:97:91:25:40:73:
                    58:9c:45:8f:81:e2:ee:6c:04:58:52:51:13:f3:21:
                    f9:f5:7e:a9:b6:81:ed:f6:17:56:86:82:d3:ea:15:
                    af:65:29:3b:60:3c:86:7d:f4:c5:bf:b9:3b:df:7f:
                    05:1c:8d:58:a7:73:fb:d6:d6:0c:2f:ef:f6:c9:3b:
                    9d:ed:00:37:b5:5c:bc:35:38:64:2d:73:c3:bb:f1:
                    ec:fe:34:0e:49:6e:1d:ed:8e:a5:03:29:50:c2:68:
                    b3:a2:dd:41:d8:8f:d5:2e:fd:a8:ec:f9:31:a6:ab:
                    b5:5f:88:31:fe:16:c9:7b:eb:0f:50:ca:a7:65:a6:
                    c9:45:73:83:1f:7d:42:c2:42:6f:be:f5:13:15:fd:
                    af:61:17:2e:a3:0a:6f:aa:fb:ab:1e:4d:5a:31:77:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:53:02:55:1F:B6:11:51:77:DC:5B:07:78:72:3D:BF:3D:87:13:D1
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3139302e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:d9:98:99:7d:39:87:37:3d:45:8f:b5:e9:80:87:64:b6:55:
         96:41:eb:a7:e5:62:a8:4b:b2:b7:eb:d8:63:75:08:ce:8a:28:
         24:f3:80:81:4d:f0:4e:58:8f:f8:c7:3c:69:44:f4:4d:d2:59:
         a1:4c:4a:83:f2:fb:37:4e:80:bc:b5:73:07:28:68:90:2c:44:
         8f:53:b3:0d:70:98:14:e7:69:ac:e1:31:b4:cc:0a:2f:34:c7:
         97:cd:fc:23:70:40:1b:b3:62:46:24:28:1e:a9:df:ef:e0:1a:
         c6:3a:28:57:28:a8:29:05:99:3a:a1:24:47:8e:74:6a:ed:5f:
         3f:e3:e3:ae:2a:0f:85:c5:e5:4d:27:2d:0a:14:1d:15:5a:46:
         a2:60:b3:32:13:58:c6:eb:e5:e3:ce:71:ef:e5:25:3c:c1:e8:
         f0:ee:8f:92:a6:33:6a:a3:2d:f2:ab:4c:ce:9d:d9:cb:d2:e2:
         b0:ca:f5:30:0b:2f:2f:ab:5d:93:9b:c3:d5:a7:c2:dd:25:02:
         19:e6:16:63:3c:9a:fc:5b:b2:31:bb:88:1e:f9:cd:a3:01:d3:
         e7:6c:c9:22:d6:20:c6:12:79:f3:53:29:f1:61:6f:87:18:04:
         38:8f:e5:1d:1f:bd:7b:37:c8:76:2f:bc:ea:fb:56:81:0b:25:
         6b:8f:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:32 2024 by rpki-client on console.sobornost.net