Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e372e302f32342d3234203d3e20323635343036.roa
File:                     3136382e3139352e372e302f32342d3234203d3e20323635343036.roa (raw, json)
Hash identifier:          Wf3Cv791wK2I4j1U8jfG5HdCHjt6mF7539QO3iSK2Xw=
Subject key identifier:   8A:53:38:96:04:D9:3C:29:06:C0:15:34:5D:BD:66:32:61:47:6E:16
Certificate issuer:       /CN=208FFAFD8389347E0A0F0B5521884A995EB099DA
Certificate serial:       5042444028F5498B8FAC588C7BCB4AB98286DE1D
Authority key identifier: 20:8F:FA:FD:83:89:34:7E:0A:0F:0B:55:21:88:4A:99:5E:B0:99:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e372e302f32342d3234203d3e20323635343036.roa
Signing time:             Fri 13 Jan 2023 15:27:48 +0000
ROA not before:           Fri 13 Jan 2023 15:22:48 +0000
ROA not after:            Fri 12 Jan 2024 15:27:48 +0000
asID:                     265406
IP address blocks:        168.195.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:42:44:40:28:f5:49:8b:8f:ac:58:8c:7b:cb:4a:b9:82:86:de:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208FFAFD8389347E0A0F0B5521884A995EB099DA
        Validity
            Not Before: Jan 13 15:22:48 2023 GMT
            Not After : Jan 12 15:27:48 2024 GMT
        Subject: CN=8A53389604D93C2906C015345DBD663261476E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:8e:33:78:91:91:75:d5:ed:48:3c:42:4d:
                    35:c2:ef:d6:35:01:b6:1e:57:53:64:d1:02:3d:f5:
                    cb:84:eb:89:a5:3b:fe:b5:0e:67:d6:eb:ec:28:14:
                    af:29:b9:1c:ba:ec:33:1a:25:f8:20:91:bd:c1:7b:
                    2a:64:85:35:34:69:d8:1c:ce:b6:54:0c:a9:e8:ea:
                    6c:aa:8d:77:ba:9f:3a:66:f7:44:0d:87:68:2f:be:
                    6b:4e:bf:fe:62:ab:f3:6d:0b:9f:7c:ef:38:6f:97:
                    71:f0:e8:a9:30:69:ee:08:fd:d8:96:f5:6d:19:3d:
                    81:92:83:13:2a:d1:c8:91:0d:0d:40:64:97:02:13:
                    d0:49:38:1a:03:98:c9:c9:13:11:ae:77:01:12:1b:
                    cc:52:79:2b:8a:05:60:46:ec:57:f8:f5:66:2e:22:
                    c1:e5:f2:ca:9d:0c:45:e7:88:ea:77:2a:86:a4:ba:
                    43:37:d8:0b:dd:70:db:d9:fb:54:42:4a:67:f3:d0:
                    e2:05:4c:da:d0:8c:52:43:cc:af:a1:04:26:50:cc:
                    c2:b9:c0:6f:ab:88:31:0c:6e:aa:b1:4e:94:5c:4e:
                    ca:c2:7c:f2:27:30:3c:06:47:aa:a1:96:58:72:48:
                    e0:17:e6:7c:dc:c8:90:05:93:6f:51:01:d4:c1:7f:
                    3c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:53:38:96:04:D9:3C:29:06:C0:15:34:5D:BD:66:32:61:47:6E:16
            X509v3 Authority Key Identifier:
                keyid:20:8F:FA:FD:83:89:34:7E:0A:0F:0B:55:21:88:4A:99:5E:B0:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e372e302f32342d3234203d3e20323635343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:6f:3f:3f:27:20:75:e6:a5:87:ef:f6:d2:6c:26:0f:e1:7b:
         6d:40:ee:9d:76:de:48:8d:61:33:81:2b:3a:f6:22:ef:8f:18:
         8a:37:05:dd:c4:55:9a:29:57:f4:9e:b8:38:43:c4:21:55:48:
         8a:9f:f4:c7:4a:0e:67:ee:c4:19:be:4b:85:c6:9d:43:8b:5a:
         18:92:36:4f:dd:36:a2:b3:e9:45:74:db:10:32:3c:73:7c:58:
         9d:a1:4c:be:d9:8b:65:f2:9f:c7:b4:93:f8:4c:2f:96:5f:75:
         e2:71:9c:8e:ee:c0:ef:18:f2:e2:69:05:f5:df:2f:50:52:0f:
         f4:75:1b:13:0e:a0:1f:e9:c7:71:29:4a:d8:87:ec:b9:8b:d8:
         43:f1:33:08:77:e5:ff:d1:cb:29:69:40:7f:d8:f9:71:83:16:
         d5:24:e5:b0:2a:d7:0b:f5:4c:7b:81:15:21:54:d8:1c:c0:fe:
         91:20:26:9e:88:e8:53:5d:20:3f:72:09:90:f8:e9:2c:07:3f:
         8b:dc:4c:76:31:fc:57:18:8b:6e:c2:bd:5d:bb:5d:11:64:12:
         2b:ad:3d:55:80:88:4d:51:2c:14:68:a8:49:1f:52:8d:b4:32:
         63:77:4a:e4:7c:ec:34:6e:62:fc:fa:e0:35:dd:3a:7e:09:bb:
         09:73:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org