Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/0/3136382e3139352e3138382e302f32322d3234203d3e20323635343339.roa
File:                     3136382e3139352e3138382e302f32322d3234203d3e20323635343339.roa (raw, json)
Hash identifier:          ep3SsJURgwY8B6B/GiJNlal6aJkPJZtpc7vw4H1yn/g=
Subject key identifier:   FD:EF:70:50:54:81:96:CB:6D:29:A4:A7:09:CE:EF:4F:7E:16:A0:14
Certificate issuer:       /CN=D51A679483A81F432A557B026F36D9650FD61E78
Certificate serial:       06EC64FE4FCFEA071686D320200D8995F3FA9C7C
Authority key identifier: D5:1A:67:94:83:A8:1F:43:2A:55:7B:02:6F:36:D9:65:0F:D6:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D51A679483A81F432A557B026F36D9650FD61E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/0/3136382e3139352e3138382e302f32322d3234203d3e20323635343339.roa
Signing time:             Sun 28 Jan 2024 00:14:37 +0000
ROA not before:           Sun 28 Jan 2024 00:09:37 +0000
ROA not after:            Sun 26 Jan 2025 00:14:37 +0000
asID:                     265439
IP address blocks:        168.195.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ec:64:fe:4f:cf:ea:07:16:86:d3:20:20:0d:89:95:f3:fa:9c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D51A679483A81F432A557B026F36D9650FD61E78
        Validity
            Not Before: Jan 28 00:09:37 2024 GMT
            Not After : Jan 26 00:14:37 2025 GMT
        Subject: CN=FDEF7050548196CB6D29A4A709CEEF4F7E16A014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:dd:45:58:56:1b:28:42:5b:18:06:8d:36:
                    79:32:ba:1a:54:b2:02:f4:1b:96:f9:b2:55:03:7b:
                    61:55:da:89:36:3f:a2:07:aa:ac:ea:88:1d:f0:f0:
                    b0:8b:e6:f3:c4:f6:02:e7:e9:27:f4:34:ec:32:53:
                    f3:de:56:00:b4:fa:93:e6:65:25:c9:60:99:3e:d5:
                    81:f8:65:ad:72:37:69:f1:d0:25:58:5a:a3:3b:ee:
                    4d:a9:89:51:3b:24:07:63:22:4b:85:71:09:66:fd:
                    a3:04:01:a4:54:69:34:31:35:a1:f6:46:8c:8b:b1:
                    5c:03:a0:cc:3e:33:d9:42:8e:d3:f7:83:71:2a:98:
                    25:cc:76:35:14:19:11:d6:77:ff:53:e9:d4:6d:d9:
                    18:7c:45:3e:a2:5f:73:7c:d3:19:c8:bb:0e:cc:5a:
                    07:2c:84:2d:ec:5a:ad:26:0b:e3:2c:d4:e5:d1:e4:
                    68:38:a9:ee:e5:83:2c:fe:2e:6a:d0:40:40:d4:6d:
                    72:41:72:d1:5c:3e:42:49:c2:be:51:4b:37:f4:9f:
                    81:c2:9e:eb:1b:66:ee:85:4c:f9:b6:4e:37:eb:09:
                    95:b5:b2:5a:ca:06:cf:68:e5:a5:06:62:20:b2:f9:
                    5d:d0:ac:da:9e:c5:1f:5d:98:19:cb:73:9a:c8:21:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:70:50:54:81:96:CB:6D:29:A4:A7:09:CE:EF:4F:7E:16:A0:14
            X509v3 Authority Key Identifier:
                keyid:D5:1A:67:94:83:A8:1F:43:2A:55:7B:02:6F:36:D9:65:0F:D6:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/0/D51A679483A81F432A557B026F36D9650FD61E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D51A679483A81F432A557B026F36D9650FD61E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/0/3136382e3139352e3138382e302f32322d3234203d3e20323635343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:b1:cf:42:1b:f6:57:6b:b8:5a:57:0d:ec:92:6f:45:fe:0a:
         ae:b3:53:49:03:06:3e:8e:e2:24:29:96:2e:8b:b5:c9:62:16:
         50:20:f1:6a:c6:5b:44:ec:ce:30:24:90:82:fe:7c:5a:9e:37:
         d5:76:86:e3:60:12:46:ae:05:ec:21:e4:32:12:4b:18:0f:38:
         15:84:cd:24:72:6a:55:31:42:68:44:b4:cb:a0:a2:e9:4b:12:
         df:f4:a2:85:56:79:92:a1:84:13:0c:3a:84:48:49:a7:a1:f8:
         f0:54:2b:12:07:d4:4e:cc:48:47:82:e6:4d:15:20:0b:f0:da:
         c0:2d:3f:c5:d4:62:88:03:6a:b3:cc:57:bb:15:59:86:90:03:
         5a:c3:1b:90:f6:03:1c:d9:11:9f:18:9a:70:05:ba:80:8d:ef:
         21:b2:dd:e3:5f:cc:e0:86:67:af:68:56:9a:cb:0c:ae:6e:28:
         9a:43:57:55:00:cc:c2:f2:5f:c1:1e:f3:d1:a4:cf:e9:66:9d:
         f8:4f:97:45:9a:d5:37:27:09:1a:56:15:64:34:1b:5c:ef:e9:
         20:f8:9d:8f:b8:0a:29:87:24:3c:b2:f6:99:0c:63:58:d3:8d:
         4e:19:bf:ce:f4:78:2f:c0:12:31:45:eb:d5:ea:31:64:d2:49:
         a9:2a:21:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org