Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3135312e302f32342d3234203d3e20323632343933.roa
File:                     3136382e3132312e3135312e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          V5CTpyABrP9Lzv1VwBIqJpe57l7FYWncOJx8Bo5c/Pk=
Subject key identifier:   00:57:48:C8:94:0B:D9:36:CC:4B:F3:AE:71:45:C0:B3:2C:33:F4:B0
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       2690B2968F2C1A13A3A8FB4B91C0EB9DA0AC85DF
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3135312e302f32342d3234203d3e20323632343933.roa
Signing time:             Sun 14 Apr 2024 02:05:43 +0000
ROA not before:           Sun 14 Apr 2024 02:00:43 +0000
ROA not after:            Sun 13 Apr 2025 02:05:43 +0000
asID:                     262493
IP address blocks:        168.121.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:90:b2:96:8f:2c:1a:13:a3:a8:fb:4b:91:c0:eb:9d:a0:ac:85:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr 14 02:00:43 2024 GMT
            Not After : Apr 13 02:05:43 2025 GMT
        Subject: CN=005748C8940BD936CC4BF3AE7145C0B32C33F4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:24:b4:8c:0d:58:3a:3d:77:98:e0:65:b1:
                    c9:4c:39:a5:21:4d:47:77:eb:a6:dd:15:c6:32:43:
                    46:63:e0:ec:13:5c:e0:2e:d3:66:08:eb:46:e7:f5:
                    b8:79:28:3d:93:1e:f7:8a:8a:63:df:5a:cb:b2:81:
                    6e:e8:7e:32:32:ef:2e:32:a4:31:d2:53:2d:aa:61:
                    de:ee:d0:38:5d:ed:e5:e1:84:77:ae:52:ab:91:c8:
                    0c:2b:2e:29:fa:d3:6b:11:b1:40:e9:e2:c9:e0:29:
                    d7:00:1e:90:88:19:6e:18:71:0e:7b:a3:20:51:ad:
                    a0:f0:00:b7:7a:82:ac:70:54:21:68:c0:a3:c6:e7:
                    5e:34:73:e8:44:78:3b:46:9f:f3:59:7a:d0:32:9c:
                    3b:f0:b2:74:3e:6a:ae:19:b9:30:fe:a7:f9:5b:87:
                    37:66:23:34:79:e7:24:31:f8:9d:97:4b:ed:6d:70:
                    c0:79:a2:c0:67:67:f1:58:be:93:cf:ab:2a:0b:9b:
                    be:10:38:1c:26:00:61:b4:a1:65:f2:cb:ca:8f:e1:
                    70:de:3a:e1:1a:ab:2a:d7:f8:b1:13:0c:f8:e6:8a:
                    e2:27:62:79:0f:3d:0d:c6:93:1d:d5:8a:75:c6:aa:
                    81:03:ef:f1:27:bf:a8:2a:f2:3c:a9:4e:73:1a:53:
                    d6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:57:48:C8:94:0B:D9:36:CC:4B:F3:AE:71:45:C0:B3:2C:33:F4:B0
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3135312e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:08:f0:d9:63:1b:18:25:e9:61:04:e5:d9:34:f9:67:ac:1e:
         d1:36:d5:75:a7:2f:2b:a8:dc:63:b4:ba:ee:16:2d:9f:e9:c7:
         e4:50:0e:70:c0:f3:dc:b2:8b:65:c0:b5:78:29:6a:1e:60:9f:
         ff:91:cf:4d:7d:47:ee:cb:84:38:6a:12:74:91:82:a8:02:7d:
         5b:5f:e9:fa:e1:6f:c7:f9:57:41:75:79:d1:7c:5e:92:87:07:
         77:77:c8:a9:e4:64:c9:6e:83:a0:66:91:5a:3e:64:c5:4b:89:
         2a:af:5e:35:0b:76:93:d9:1e:c9:14:49:da:c2:58:f8:77:e9:
         a9:e0:25:b2:88:a0:8b:02:d3:0f:b2:56:8e:da:8e:ae:6b:64:
         1d:3a:43:da:7e:15:0e:d1:3d:4f:c7:52:ad:79:9d:68:41:c6:
         f4:f4:d9:73:a1:a3:e0:8c:99:41:47:04:6c:4b:b6:87:ce:d5:
         d7:38:c4:af:9e:ca:c8:d2:0a:1a:0f:f9:a7:db:8e:66:6b:fb:
         87:c7:fa:7c:81:29:b4:a2:1e:d5:ca:c2:86:cf:2d:10:81:2b:
         8d:26:4b:3a:0b:91:9a:e0:90:88:cf:b7:15:33:09:39:61:e9:
         5d:72:ec:e5:57:4d:c9:b9:93:30:59:02:6e:9f:e2:d2:83:4d:
         51:bb:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org