Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/1/3136382e3232372e3133332e302f32342d3234203d3e20323634303039.roa
File:                     3136382e3232372e3133332e302f32342d3234203d3e20323634303039.roa (raw, json)
Hash identifier:          i2gte4jxyND7vGG7JPRZXuTreiWwyDuQUYuJA+2EBDg=
Subject key identifier:   13:79:A8:EB:B9:57:96:29:4E:FD:27:63:2C:D1:DF:A9:1A:EB:AA:69
Certificate issuer:       /CN=6081C137E9272E62F62F2918C1910F90943341EE
Certificate serial:       35A7E6D1ED96290A0959FD60DCDDADE3880DCDD2
Authority key identifier: 60:81:C1:37:E9:27:2E:62:F6:2F:29:18:C1:91:0F:90:94:33:41:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6081C137E9272E62F62F2918C1910F90943341EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/1/3136382e3232372e3133332e302f32342d3234203d3e20323634303039.roa
Signing time:             Thu 04 Apr 2024 16:01:25 +0000
ROA not before:           Thu 04 Apr 2024 15:56:25 +0000
ROA not after:            Thu 03 Apr 2025 16:01:25 +0000
asID:                     264009
IP address blocks:        168.227.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a7:e6:d1:ed:96:29:0a:09:59:fd:60:dc:dd:ad:e3:88:0d:cd:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6081C137E9272E62F62F2918C1910F90943341EE
        Validity
            Not Before: Apr  4 15:56:25 2024 GMT
            Not After : Apr  3 16:01:25 2025 GMT
        Subject: CN=1379A8EBB95796294EFD27632CD1DFA91AEBAA69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9a:26:af:0e:01:cc:59:e6:2f:d2:ac:ad:d7:
                    ed:04:c1:07:d6:1f:a7:97:e7:ca:60:c7:f7:2c:62:
                    dd:9a:87:3e:ba:ab:35:b9:ad:2e:80:fb:5a:c0:ff:
                    4f:49:2b:5f:47:8a:5f:a1:50:a6:31:37:9c:80:28:
                    f8:87:21:7e:60:47:ca:1b:59:a1:c7:be:b3:e3:b5:
                    f4:2b:93:6b:de:d4:8d:17:e4:20:70:f0:6b:87:bc:
                    f4:4f:dc:41:f5:21:bb:2f:80:6a:6f:bc:d1:46:3e:
                    6d:88:f4:0e:a7:2f:f2:26:a5:20:09:d1:d9:25:1c:
                    50:f4:18:c0:50:6b:90:e4:56:aa:42:a9:30:b9:39:
                    e8:a0:5f:83:71:6a:ac:48:19:3a:4f:a9:d8:86:a3:
                    e0:02:27:15:80:86:a4:95:02:e1:db:87:b9:75:ff:
                    83:97:6c:ad:09:3a:3b:08:ba:be:6a:14:ff:eb:cd:
                    0a:aa:cf:89:b3:df:63:c1:48:8b:ac:b9:73:6b:4c:
                    24:7d:8b:af:ce:83:c0:26:2f:fb:4e:7b:e3:c6:24:
                    37:5c:c3:bb:f2:b3:77:3e:a0:f0:c5:8d:5b:82:fa:
                    d8:f9:cf:07:8d:70:64:45:11:3b:84:94:fb:87:32:
                    67:85:f1:f8:c6:37:08:fb:6e:27:19:71:02:53:41:
                    f5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:79:A8:EB:B9:57:96:29:4E:FD:27:63:2C:D1:DF:A9:1A:EB:AA:69
            X509v3 Authority Key Identifier:
                keyid:60:81:C1:37:E9:27:2E:62:F6:2F:29:18:C1:91:0F:90:94:33:41:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/1/6081C137E9272E62F62F2918C1910F90943341EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6081C137E9272E62F62F2918C1910F90943341EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/1/3136382e3232372e3133332e302f32342d3234203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:7a:f5:76:71:80:ad:a5:de:c8:bf:4a:4c:64:86:f1:28:9a:
         ab:74:bb:e0:a3:85:f6:d7:74:60:b7:f9:e6:7b:ed:5d:33:56:
         11:4f:41:53:ba:4d:ba:78:43:f1:06:4b:1b:43:5a:c8:8a:d5:
         03:9a:4c:d9:89:5d:dd:98:fa:8e:b2:31:30:f3:a7:43:4f:49:
         88:cc:d3:c0:0b:cd:37:97:6e:11:74:4a:74:13:a8:66:82:f5:
         d5:93:a6:ef:4e:7e:7b:5d:5a:d4:6d:bd:3c:5f:dd:ac:df:e2:
         50:64:06:92:9f:6d:6d:a8:b1:3b:15:09:e9:72:13:f3:20:f7:
         4d:f5:ce:c6:fa:85:74:6f:f4:35:35:c9:71:0a:63:56:91:0e:
         82:75:35:80:52:e2:b9:7d:92:ae:e6:b4:8b:58:35:36:2d:3a:
         42:a4:b9:58:8f:4f:ea:bb:9f:bf:80:b3:ec:79:d3:ba:49:29:
         ad:ad:80:95:08:60:ca:29:4a:e3:4b:b8:de:8f:52:35:0a:db:
         a9:2e:97:e2:af:13:ac:ff:8e:5a:c2:c8:1c:2d:6a:02:de:9a:
         66:84:8b:76:56:a7:6e:c6:d8:bb:5b:49:57:f2:2c:0e:90:14:
         40:dc:0e:d1:da:6f:48:31:9b:84:e2:cc:5f:fc:b5:4d:27:98:
         cf:16:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 18:15:41 2024 by rpki-client on console-fra.rpki-client.org