Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39362e302f32342d3234203d3e20323635343137.roa
File:                     3136382e3139352e39362e302f32342d3234203d3e20323635343137.roa (raw, json)
Hash identifier:          wlgsH3R4dk+QgzyYd4OEiT0+zpo8zMqCTM+xYudWawo=
Subject key identifier:   42:9A:6E:8C:6A:84:D7:A9:75:81:DA:F1:F6:FD:C3:40:FE:DB:04:55
Certificate issuer:       /CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
Certificate serial:       3ED7897EEF9DEEDCA183EE4D65B89A10B027E252
Authority key identifier: 56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39362e302f32342d3234203d3e20323635343137.roa
Signing time:             Thu 29 Jun 2023 20:00:02 +0000
ROA not before:           Thu 29 Jun 2023 19:55:02 +0000
ROA not after:            Thu 27 Jun 2024 20:00:02 +0000
asID:                     265417
IP address blocks:        168.195.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d7:89:7e:ef:9d:ee:dc:a1:83:ee:4d:65:b8:9a:10:b0:27:e2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
        Validity
            Not Before: Jun 29 19:55:02 2023 GMT
            Not After : Jun 27 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:29:90:a1:b3:f6:6c:43:35:31:27:5a:dd:
                    0a:72:d4:10:81:70:fc:bc:8e:43:f0:c3:dd:27:9d:
                    32:29:eb:b8:1c:ff:2a:ee:e6:ff:9d:b0:03:d2:49:
                    64:40:95:f8:1b:6e:3c:f0:9b:af:d3:ec:b5:26:7c:
                    9a:37:d4:d7:19:82:0a:7d:0e:5b:b7:b8:48:7a:59:
                    24:f5:cc:3d:71:72:b4:dd:fe:15:ae:29:43:dd:d7:
                    f0:0c:a6:24:92:9c:27:22:1a:22:d2:51:86:4c:77:
                    3b:86:4c:90:00:a4:7e:17:c8:70:f4:ef:92:95:3d:
                    9a:f8:70:6f:d4:0f:8a:a7:98:07:da:26:ab:96:77:
                    5b:5f:ce:6c:d5:d4:a7:7c:f3:44:2c:17:0d:3b:e9:
                    f5:3e:d9:b4:7e:4e:6d:54:e7:4b:1a:65:d2:50:61:
                    3f:bc:ba:44:6e:b0:29:db:e1:b1:03:96:5a:3e:f4:
                    fb:99:f2:2f:33:92:6a:0c:ca:79:b2:c4:26:c8:31:
                    0a:84:bb:36:88:8a:55:fa:9d:61:0a:1c:0e:4b:dc:
                    30:9d:d3:51:22:13:17:69:06:9c:1c:73:1b:21:be:
                    86:62:be:71:47:09:cc:fc:05:db:b5:22:88:f9:ff:
                    f5:d1:cd:ad:98:10:a4:76:5f:1e:77:d6:f9:ff:1e:
                    ad:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9A:6E:8C:6A:84:D7:A9:75:81:DA:F1:F6:FD:C3:40:FE:DB:04:55
            X509v3 Authority Key Identifier:
                keyid:56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39362e302f32342d3234203d3e20323635343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:1d:84:80:c8:29:ab:3f:8d:5a:a6:27:f6:b9:14:69:27:01:
         7b:92:49:f1:47:e9:11:3c:d6:17:57:f7:36:22:22:44:82:b6:
         d5:ec:71:46:e8:6b:de:44:f8:fa:54:26:b2:8c:34:05:71:91:
         27:9d:6a:13:91:f6:11:00:10:5a:21:c9:3a:7e:30:c5:cc:41:
         e0:7f:8a:b5:0d:9d:ac:9a:cd:67:0b:1a:0c:18:b4:06:c2:12:
         b7:ab:2c:77:d8:dc:58:82:7e:49:63:06:0f:35:0c:2d:50:92:
         ac:cb:df:3c:cd:b1:8a:bb:b0:55:8c:97:67:7a:aa:d2:7e:00:
         8f:49:a9:d0:d6:77:b5:4a:ee:ab:a2:f4:59:d9:d3:18:43:9e:
         d9:35:87:83:7d:2b:18:2d:d8:49:fb:0d:03:3b:42:0b:d5:ed:
         5b:3e:fb:a4:f4:51:40:1a:12:65:cd:d9:ab:10:83:3f:54:7d:
         47:85:53:4b:b4:c5:44:88:f8:38:c6:bf:ea:6e:35:e7:bd:9a:
         a1:82:09:d7:ac:4d:8f:9b:3b:96:07:73:1f:e1:81:da:83:75:
         ef:cf:d2:bd:22:73:95:55:80:17:69:1b:03:75:51:2c:48:e4:
         8b:cb:b5:fa:84:c0:87:2b:82:35:0a:54:1b:1f:b7:c6:4f:f4:
         c3:06:66:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org