Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3134382e302f32342d3234203d3e20323632343933.roa
File:                     3136382e3132312e3134382e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          LVUmx7/Z8ayeo1xuT+6ai67KrpWvxRVGGTT4tZrNiLM=
Subject key identifier:   4A:B7:FF:DF:4E:00:76:89:C3:7D:1A:95:D9:E1:10:25:8E:69:1F:4E
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       1A7A8EE8918A8C2B2F16390F4CE13768D901900D
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3134382e302f32342d3234203d3e20323632343933.roa
Signing time:             Sun 14 Apr 2024 02:05:39 +0000
ROA not before:           Sun 14 Apr 2024 02:00:39 +0000
ROA not after:            Sun 13 Apr 2025 02:05:39 +0000
asID:                     262493
IP address blocks:        168.121.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7a:8e:e8:91:8a:8c:2b:2f:16:39:0f:4c:e1:37:68:d9:01:90:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr 14 02:00:39 2024 GMT
            Not After : Apr 13 02:05:39 2025 GMT
        Subject: CN=4AB7FFDF4E007689C37D1A95D9E110258E691F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:27:25:16:db:93:ca:b2:54:5b:b5:40:fd:
                    0c:8e:05:59:7c:88:a0:cc:b6:a2:fe:30:8f:73:f9:
                    d6:17:b6:2c:29:55:c7:15:db:08:42:96:a8:bc:eb:
                    82:e2:dc:60:02:15:74:93:03:5a:be:9d:28:02:e3:
                    9f:76:e4:02:17:23:85:fc:89:47:d1:9e:0a:31:6a:
                    6d:a3:60:1c:59:43:e2:e8:78:ad:87:52:ba:5b:cb:
                    ac:1f:81:9e:9a:45:90:fc:34:64:47:56:f7:50:ba:
                    74:90:a5:ab:6f:1a:b7:cd:9b:9f:24:0d:1e:5e:08:
                    19:d0:0b:21:68:34:78:77:15:75:14:67:77:98:f6:
                    8c:b8:5c:e7:60:10:1a:96:a2:e1:3c:24:7a:cb:c3:
                    df:b8:85:b5:39:68:29:9c:17:64:8a:79:3e:fc:6d:
                    6c:d5:f0:0b:03:76:3d:e5:c1:d7:a1:65:26:3c:27:
                    e4:1d:cc:71:55:7e:4d:c0:3d:2e:33:bc:ff:b9:bc:
                    3f:49:df:e7:7b:15:75:75:dd:77:7a:16:5b:d7:47:
                    0d:52:85:0c:cb:b4:43:77:08:90:ba:45:ba:df:e9:
                    32:27:16:1b:30:27:f5:f7:eb:82:72:ca:24:b3:a5:
                    21:f9:0e:70:e8:33:9d:fd:ac:f3:94:b5:5d:04:50:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B7:FF:DF:4E:00:76:89:C3:7D:1A:95:D9:E1:10:25:8E:69:1F:4E
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3134382e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:6e:19:10:f0:c9:f6:3a:6b:3e:01:1c:9c:70:62:cf:88:ba:
         b8:c4:bc:45:d2:03:7c:74:a8:c6:c7:e3:cd:ed:a5:10:76:1b:
         48:95:fb:f7:c2:c3:db:7a:da:9a:5b:02:0c:80:0b:5a:a0:53:
         25:10:de:44:36:ac:d3:e5:5f:e1:0e:c0:47:2b:c0:ed:f0:8b:
         a5:28:b2:06:7d:60:52:2d:e1:00:9a:1c:b8:1a:06:87:1a:8b:
         eb:51:60:4a:97:37:b2:fa:25:20:e1:a3:36:bb:9b:8a:be:ef:
         28:d0:47:81:b0:bf:5f:26:36:fa:b7:ca:8e:c2:9f:44:94:e5:
         a5:38:fb:5a:ed:71:6f:ab:34:10:04:53:67:bc:3c:1d:ff:ee:
         8c:41:c4:5e:9f:1c:9a:36:3b:bf:d6:50:23:ee:68:e6:36:4f:
         1b:4d:18:ca:d2:95:eb:60:11:61:c1:5d:9a:05:45:28:67:55:
         3b:32:30:23:f5:9a:1a:10:05:15:3a:d5:b1:60:41:40:0a:cd:
         3d:55:e5:b3:d7:59:77:d1:af:0a:b5:3b:c6:90:32:bf:ad:78:
         02:52:5b:01:e2:36:74:74:b5:03:4a:32:98:de:00:c7:b2:da:
         6c:e6:15:53:86:b0:4e:3a:53:34:57:bc:66:d4:82:a0:4d:b3:
         b1:2f:40:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org