Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e342e302f32322d3234203d3e20323635343036.roa
File:                     3136382e3139352e342e302f32322d3234203d3e20323635343036.roa (raw, json)
Hash identifier:          jJyh4RaZww1Rhi3zaWyVDJNuw3hZEAzPRqvB2OrUrtQ=
Subject key identifier:   FF:D2:8C:76:9C:6C:69:74:D4:91:9F:79:6A:2B:7E:4A:55:1B:ED:02
Certificate issuer:       /CN=9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67
Certificate serial:       6860E4259B710812BFEBD7DC04C9A0BC2B9744A0
Authority key identifier: 97:30:BD:C6:3C:D0:A7:6C:9A:7D:3D:8F:A6:CB:D9:69:24:AC:BD:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e342e302f32322d3234203d3e20323635343036.roa
Signing time:             Tue 22 Aug 2023 21:26:06 +0000
ROA not before:           Tue 22 Aug 2023 21:21:06 +0000
ROA not after:            Tue 20 Aug 2024 21:26:06 +0000
asID:                     265406
IP address blocks:        168.195.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:60:e4:25:9b:71:08:12:bf:eb:d7:dc:04:c9:a0:bc:2b:97:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67
        Validity
            Not Before: Aug 22 21:21:06 2023 GMT
            Not After : Aug 20 21:26:06 2024 GMT
        Subject: CN=FFD28C769C6C6974D4919F796A2B7E4A551BED02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:b1:95:a5:d9:90:00:23:8e:18:3b:db:8c:
                    dd:67:1c:41:f2:6a:84:a0:ca:51:8f:ec:9f:64:d3:
                    f0:40:29:05:d1:16:c3:24:78:0a:87:8e:76:3b:cd:
                    66:36:57:1d:b5:bb:a5:c8:c7:25:d2:9a:d8:70:4b:
                    2e:a2:8e:e6:b3:7e:fc:72:9b:b8:99:f7:55:ba:fa:
                    3f:a3:db:68:96:69:ae:f3:50:c7:d7:bf:05:bf:3b:
                    df:cd:0a:90:f7:c9:9b:c7:77:22:86:4b:d6:b9:f6:
                    af:36:1c:e2:d2:50:24:a6:ce:90:ba:32:cb:bf:f6:
                    19:3a:41:7e:1e:49:ec:17:1a:45:91:f3:df:6e:45:
                    c6:fc:9f:f5:4c:79:ac:40:4a:17:1e:2d:cd:5e:ad:
                    12:24:34:0e:21:1a:93:01:4f:aa:d6:13:f3:c7:f1:
                    09:74:fa:41:3d:5a:e7:88:aa:6b:0b:8a:5b:2e:b3:
                    ac:4e:a8:f7:1d:07:23:54:57:dc:5b:cb:fb:28:8b:
                    a8:fb:d1:ba:9c:41:4e:98:72:6e:61:36:52:ac:31:
                    ae:82:77:6d:e8:e8:4c:c1:93:bc:7b:4d:6c:f7:84:
                    2a:33:0b:42:6d:b2:7e:7f:47:ce:21:8f:7d:1a:ff:
                    a8:be:a6:bb:b6:03:95:c5:4e:4b:dd:82:cd:95:8f:
                    7e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D2:8C:76:9C:6C:69:74:D4:91:9F:79:6A:2B:7E:4A:55:1B:ED:02
            X509v3 Authority Key Identifier:
                keyid:97:30:BD:C6:3C:D0:A7:6C:9A:7D:3D:8F:A6:CB:D9:69:24:AC:BD:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e342e302f32322d3234203d3e20323635343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:03:68:c0:7b:a2:20:70:3e:59:3f:3d:06:f3:dd:be:e9:0a:
         ea:f9:a9:5f:86:92:7f:a7:66:8f:50:6a:cd:f4:0e:00:ae:98:
         37:e1:de:29:fe:62:73:cf:a4:03:32:c1:4c:a3:a7:fe:5f:57:
         84:2c:93:e3:52:5c:70:32:1f:dd:31:e9:d1:0c:5f:be:36:ed:
         a7:55:39:64:1f:2f:55:2d:94:54:e3:47:8e:52:de:96:dc:bf:
         8d:fb:7d:c2:85:17:42:19:5d:e4:02:37:80:86:d7:a0:58:d6:
         c6:ff:c8:b0:e8:4d:e1:30:ff:85:30:e1:30:d1:30:5f:97:f5:
         67:6a:65:88:85:a5:bf:52:da:92:0d:39:da:bf:7a:f6:ac:df:
         66:b7:d8:80:0e:60:e5:e4:f4:56:c2:13:05:54:7e:cd:53:ab:
         31:b8:25:f0:47:11:18:db:a0:80:15:63:a7:62:8b:14:6d:c2:
         6d:47:d2:20:f4:51:45:66:11:83:cb:e6:b8:49:31:0e:bd:4c:
         2e:ab:ac:45:ce:e4:ae:db:11:01:4c:cc:69:39:bb:8a:9a:41:
         f6:95:bb:b5:63:b3:65:23:e2:f8:d4:6e:ea:15:51:81:7c:e7:
         0d:7d:50:3f:d6:2f:4d:b9:dd:a9:44:89:32:37:ba:8a:8a:95:
         78:b9:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org