Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa
File:                     3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier:          VdBulBd5Gq2F8j3yiCTkvhJOH2j8UWklyToq+Lx49Os=
Subject key identifier:   39:AB:45:E0:D2:16:A4:FB:0F:49:7B:A3:A8:19:BA:8F:04:68:88:27
Certificate issuer:       /CN=B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342
Certificate serial:       6F8632CABE45A864676F1FE9F576F1F7695256EB
Authority key identifier: B5:FA:5D:2C:3F:2A:BD:D7:0A:6F:C2:F0:1F:3F:B6:90:EC:38:03:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa
Signing time:             Thu 01 Feb 2024 01:42:34 +0000
ROA not before:           Thu 01 Feb 2024 01:37:34 +0000
ROA not after:            Thu 30 Jan 2025 01:42:34 +0000
asID:                     265393
IP address blocks:        168.194.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:86:32:ca:be:45:a8:64:67:6f:1f:e9:f5:76:f1:f7:69:52:56:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342
        Validity
            Not Before: Feb  1 01:37:34 2024 GMT
            Not After : Jan 30 01:42:34 2025 GMT
        Subject: CN=39AB45E0D216A4FB0F497BA3A819BA8F04688827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:75:35:be:12:23:9d:14:ea:fd:59:1c:47:06:
                    bd:ca:42:25:6c:44:32:f9:2c:f3:ea:60:5d:07:88:
                    ee:8c:be:21:a5:e5:74:89:a3:6b:ab:20:f0:86:3d:
                    fd:3a:02:05:54:35:c7:56:04:a1:5a:a9:92:79:83:
                    6c:ab:f1:7b:c5:0d:49:a3:14:58:68:a8:99:a5:36:
                    57:d2:1d:55:c0:f6:71:5e:1d:6a:c6:94:a2:9c:2d:
                    37:cd:86:31:99:09:93:9c:ad:90:9f:11:1f:27:7e:
                    8b:f1:74:f8:1a:d7:9d:56:b0:66:26:00:ee:10:f4:
                    7d:a6:2e:7f:bf:20:32:28:e8:3b:bd:b4:05:f5:51:
                    b3:18:23:c0:a9:97:5e:8e:3d:fd:57:cf:2c:21:b3:
                    46:b9:78:e5:80:e6:3b:93:35:4a:03:71:a2:5f:e3:
                    b0:99:e2:a4:aa:8e:6c:dd:b6:3e:ed:bb:24:8a:87:
                    91:66:8c:58:70:b2:7a:c2:e8:22:89:99:9b:ab:68:
                    e6:93:86:f0:ab:89:c6:18:99:1d:23:44:c3:3e:8a:
                    f0:47:b6:cc:ae:cc:88:0a:a1:b6:0a:26:8c:de:a2:
                    72:fd:de:36:ec:ab:3b:f8:e8:1b:c8:cb:1b:1d:2d:
                    b7:4f:ed:6f:47:de:5c:c4:cb:a4:68:85:40:1b:4a:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AB:45:E0:D2:16:A4:FB:0F:49:7B:A3:A8:19:BA:8F:04:68:88:27
            X509v3 Authority Key Identifier:
                keyid:B5:FA:5D:2C:3F:2A:BD:D7:0A:6F:C2:F0:1F:3F:B6:90:EC:38:03:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5FA5D2C3F2ABDD70A6FC2F01F3FB690EC380342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:9c:5f:24:44:b3:a0:61:9d:3d:98:c8:6a:63:17:4a:29:2f:
         bd:a0:81:47:e5:f4:93:b1:6c:f8:3c:5c:d6:f5:67:47:f4:1f:
         b6:f9:7e:fa:64:28:96:38:0e:e4:78:28:8e:8f:64:70:c4:ab:
         a3:53:2f:be:e2:56:48:71:ad:a4:7c:8f:10:84:27:9b:13:ef:
         5d:ad:a7:e0:52:b4:af:dc:de:09:35:57:5e:e6:f6:15:a1:66:
         ee:c6:dc:62:68:f7:e9:5b:60:aa:f0:38:26:d3:c8:75:74:b3:
         1e:8b:a8:1b:2b:c0:01:3b:45:d4:fd:3e:71:69:ae:2c:39:2e:
         8f:0e:33:03:1d:cd:d5:aa:47:71:1d:01:3f:b6:a4:3f:46:8d:
         88:85:e1:db:ba:6b:99:58:8f:fb:68:6e:df:00:c2:10:a5:c4:
         e6:a8:e7:c2:d0:8f:9c:47:d1:b6:71:28:e8:0b:07:0b:16:7d:
         3c:24:c1:0e:60:e9:6e:d9:95:19:45:f5:29:b0:d5:15:81:a0:
         4a:53:c7:38:a8:d3:6e:45:9e:f1:22:5b:eb:b6:b4:13:9b:0d:
         45:1c:95:97:7d:d2:d0:75:1b:9e:f8:57:94:d9:55:a0:f7:22:
         90:dd:44:71:f6:fb:fb:b1:bc:43:98:9b:18:7a:7b:13:ae:cb:
         64:ba:2f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org