Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/3136382e302e3137312e302f32342d3234203d3e20323635323537.roa
File:                     3136382e302e3137312e302f32342d3234203d3e20323635323537.roa (raw, json)
Hash identifier:          Zy/kir7rxUleqgmfFOtKbmdb0nB7nHFrSpem+52wcYY=
Subject key identifier:   D9:D0:4F:3D:02:58:AE:B8:46:E2:10:51:22:BE:3C:39:D6:52:D6:49
Certificate issuer:       /CN=4CEBA16D103ABE5671D91473DCA22069846E1ADA
Certificate serial:       56F5D8C9D13C76735484EEECC9BBC83BDCB64A3F
Authority key identifier: 4C:EB:A1:6D:10:3A:BE:56:71:D9:14:73:DC:A2:20:69:84:6E:1A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CEBA16D103ABE5671D91473DCA22069846E1ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/3136382e302e3137312e302f32342d3234203d3e20323635323537.roa
Signing time:             Fri 26 Jan 2024 12:43:05 +0000
ROA not before:           Fri 26 Jan 2024 12:38:05 +0000
ROA not after:            Fri 24 Jan 2025 12:43:05 +0000
asID:                     265257
IP address blocks:        168.0.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f5:d8:c9:d1:3c:76:73:54:84:ee:ec:c9:bb:c8:3b:dc:b6:4a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CEBA16D103ABE5671D91473DCA22069846E1ADA
        Validity
            Not Before: Jan 26 12:38:05 2024 GMT
            Not After : Jan 24 12:43:05 2025 GMT
        Subject: CN=D9D04F3D0258AEB846E2105122BE3C39D652D649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:bb:58:08:e0:2d:8a:85:7e:1b:17:2f:76:
                    59:87:72:81:7d:08:f2:ba:16:76:fb:93:a4:ae:19:
                    c6:94:d5:77:9b:0b:d7:49:c7:78:b7:ce:96:a7:c5:
                    8f:9c:3c:92:bb:3e:ba:92:0f:c9:80:35:d0:73:ce:
                    f9:84:0c:3c:24:2b:45:78:80:a9:82:bb:aa:04:be:
                    1f:6e:84:92:73:39:5e:9e:1b:d1:96:24:5b:5c:ba:
                    87:64:a4:c0:7a:e7:17:30:e7:6d:11:dd:af:87:ed:
                    e8:0f:9e:f3:88:12:e1:10:bc:9e:79:f7:21:8a:dd:
                    65:95:c8:95:9f:74:c7:76:79:2f:ce:c6:c2:e6:5f:
                    d2:e5:02:4f:c5:00:b4:f2:6b:f1:20:47:7c:c8:00:
                    ed:fa:c7:a8:37:c2:26:72:50:e0:ea:70:99:ec:6a:
                    96:67:e5:20:79:ba:f7:3e:82:47:83:b1:46:7e:ff:
                    e0:6a:56:32:7d:eb:5b:bc:a6:0d:de:a6:a7:ca:4f:
                    49:ac:3f:43:d2:1e:df:b7:63:8e:03:15:ad:4f:e4:
                    82:5a:f3:23:4c:cd:0e:09:ed:36:ff:bf:11:58:0f:
                    9e:6c:7e:de:59:6f:0c:51:8f:6b:17:76:ea:96:4b:
                    04:46:df:0f:f9:8d:5e:19:38:8d:e8:b7:3d:7e:7a:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D0:4F:3D:02:58:AE:B8:46:E2:10:51:22:BE:3C:39:D6:52:D6:49
            X509v3 Authority Key Identifier:
                keyid:4C:EB:A1:6D:10:3A:BE:56:71:D9:14:73:DC:A2:20:69:84:6E:1A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/4CEBA16D103ABE5671D91473DCA22069846E1ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CEBA16D103ABE5671D91473DCA22069846E1ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/3136382e302e3137312e302f32342d3234203d3e20323635323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:7f:1e:dc:e0:62:2d:71:36:c7:44:ba:97:f8:5b:eb:d3:65:
         d6:ef:d1:12:4d:6c:e3:08:56:0a:56:fa:ea:d3:b8:2a:e8:f5:
         8e:c9:5c:3c:a0:85:9d:97:24:a1:4f:c5:56:dd:84:70:61:2a:
         e0:3c:c5:8d:ff:30:d5:f8:0e:15:a9:7e:7c:0d:81:02:f4:75:
         68:47:d1:3c:ef:2b:df:12:a9:92:46:4a:81:64:68:31:04:71:
         a8:30:7b:5b:b2:23:b6:23:99:fd:d0:08:de:af:4b:6b:0e:e2:
         32:18:63:47:d2:5d:79:23:0d:15:17:40:f9:d3:e0:55:59:5a:
         d5:8b:45:11:69:ed:ac:40:3c:3d:3f:31:c3:3b:50:4a:5d:b1:
         91:04:da:13:9e:b8:f8:27:7a:5b:a6:86:1a:0a:2e:04:93:cc:
         e2:53:4b:85:79:98:44:54:49:fa:00:cc:61:da:72:8f:7a:2f:
         2d:f8:0a:9a:72:81:a7:a8:54:c0:8e:e4:fd:e9:60:c4:cf:4a:
         4d:3b:0b:fc:42:d0:8f:6f:d1:34:c3:f6:60:0f:bf:40:3c:91:
         dd:b6:af:68:25:08:48:db:e3:f0:cc:87:a7:16:e6:05:14:08:
         af:53:8c:d4:a3:d0:a1:1f:a5:09:90:e1:bd:9e:6e:ed:66:57:
         3e:49:78:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org