Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
File:                     3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa (raw, json)
Hash identifier:          Luo8LnPHkjtHUjIDmXTgTRGEdcRprGUAdbxfvBVB31I=
Subject key identifier:   D8:75:58:0F:69:BC:BB:9E:40:FE:A9:84:E3:36:1C:DF:A9:3D:EB:E8
Certificate issuer:       /CN=B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342
Certificate serial:       68F04018B50D193EF5038A7F94148368CDA1AD26
Authority key identifier: B5:FA:5D:2C:3F:2A:BD:D7:0A:6F:C2:F0:1F:3F:B6:90:EC:38:03:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
Signing time:             Thu 01 Feb 2024 01:42:49 +0000
ROA not before:           Thu 01 Feb 2024 01:37:49 +0000
ROA not after:            Thu 30 Jan 2025 01:42:49 +0000
asID:                     265393
IP address blocks:        168.194.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f0:40:18:b5:0d:19:3e:f5:03:8a:7f:94:14:83:68:cd:a1:ad:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342
        Validity
            Not Before: Feb  1 01:37:49 2024 GMT
            Not After : Jan 30 01:42:49 2025 GMT
        Subject: CN=D875580F69BCBB9E40FEA984E3361CDFA93DEBE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:19:1d:b4:65:e8:20:16:c1:b9:a5:5f:d2:
                    03:fc:7f:6e:44:4a:ac:25:83:b6:f2:80:86:1c:c3:
                    60:b1:f7:9a:ae:3c:df:b1:98:c4:19:90:8c:c2:f2:
                    0f:e2:39:db:7b:60:f8:61:89:4d:a5:ab:58:04:17:
                    6f:e8:40:99:d5:61:3e:69:61:d0:92:1d:e5:d8:0e:
                    fe:c4:3d:9c:c2:50:0c:ea:16:1c:ba:b3:4d:a8:bd:
                    1b:04:89:6d:70:11:09:2d:36:80:1d:f4:d2:24:73:
                    6e:5d:a4:d2:2e:57:88:e0:a0:be:de:62:62:38:c8:
                    31:16:ec:e5:d0:09:ee:8b:f5:b6:20:9b:1d:bf:d6:
                    90:42:5d:38:95:25:b3:a6:51:b7:f2:d3:62:c5:3a:
                    ad:89:6a:7d:9c:2d:2d:67:15:c9:96:53:df:2f:1e:
                    ae:2d:64:7e:7e:ef:86:ae:8b:4b:97:30:5a:6e:cd:
                    c0:a1:ba:df:93:c3:61:be:f2:7c:d5:b8:15:19:1d:
                    4c:99:a5:e1:52:eb:34:cb:2b:8e:bc:48:54:0d:24:
                    b5:8c:e8:3b:dc:3d:93:15:b0:c0:ef:2b:73:d8:36:
                    7b:c3:fc:9f:21:cc:fa:ec:b3:21:00:e4:0b:5a:1e:
                    10:65:23:82:35:ae:c4:58:66:ad:a0:18:3e:40:35:
                    8d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:75:58:0F:69:BC:BB:9E:40:FE:A9:84:E3:36:1C:DF:A9:3D:EB:E8
            X509v3 Authority Key Identifier:
                keyid:B5:FA:5D:2C:3F:2A:BD:D7:0A:6F:C2:F0:1F:3F:B6:90:EC:38:03:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:16:75:a3:a0:d2:d6:1f:63:a5:84:2d:96:03:87:80:ca:65:
         fd:de:69:90:9d:03:b3:11:f7:66:94:a2:e6:b3:09:9a:0c:b7:
         9f:7f:25:b4:0b:9a:40:42:89:41:35:23:73:a4:50:19:49:58:
         32:26:03:96:a3:0e:b7:3b:27:eb:41:13:6d:39:58:95:25:e8:
         f3:4f:75:27:ee:53:10:3d:a1:cc:e5:8c:9b:d2:25:3e:cf:23:
         69:81:29:bb:34:c8:51:9c:f1:7b:27:df:f3:41:e2:33:9c:9c:
         cd:5c:63:05:eb:2a:95:11:b6:c4:1b:94:09:4e:45:ce:eb:d3:
         95:30:b4:ed:9f:9f:3a:9e:1c:cb:ad:be:a6:b9:1b:ca:bb:cd:
         a4:28:d6:a3:70:a8:62:a2:3a:65:65:13:37:b8:60:f1:69:53:
         81:67:46:f2:e5:81:0a:10:3a:15:9a:f9:7e:25:08:a6:be:b5:
         13:67:c1:6b:24:fc:16:bb:f1:4b:3a:17:2e:a7:fd:e8:a6:7c:
         79:8d:47:10:61:66:e7:6f:50:3b:99:ea:15:a0:e0:0b:7c:55:
         3c:67:89:5a:3d:ce:29:84:28:b2:ec:9f:68:51:9a:82:37:53:
         73:25:87:67:fb:45:52:dc:d7:df:e0:ea:ae:56:9f:91:39:c7:
         bc:ed:62:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org