Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e342e302f32332d3233203d3e20323635343036.roa
File:                     3136382e3139352e342e302f32332d3233203d3e20323635343036.roa (raw, json)
Hash identifier:          YjOeJTodHblqa/LNfmrf74D0ZsL9HswPf3lwr9jttiA=
Subject key identifier:   4B:1D:E3:11:5E:DE:02:FC:79:EA:37:DA:F1:5D:83:A4:D5:84:E2:14
Certificate issuer:       /CN=0946ABC0E4F85CE0FC04F4D0512F90597B724859
Certificate serial:       172B4D035B9D1A9F9C24EF653180CB04D7445BE3
Authority key identifier: 09:46:AB:C0:E4:F8:5C:E0:FC:04:F4:D0:51:2F:90:59:7B:72:48:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0946ABC0E4F85CE0FC04F4D0512F90597B724859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e342e302f32332d3233203d3e20323635343036.roa
Signing time:             Tue 02 Jan 2024 15:47:36 +0000
ROA not before:           Tue 02 Jan 2024 15:42:36 +0000
ROA not after:            Tue 31 Dec 2024 15:47:36 +0000
asID:                     265406
IP address blocks:        168.195.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2b:4d:03:5b:9d:1a:9f:9c:24:ef:65:31:80:cb:04:d7:44:5b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0946ABC0E4F85CE0FC04F4D0512F90597B724859
        Validity
            Not Before: Jan  2 15:42:36 2024 GMT
            Not After : Dec 31 15:47:36 2024 GMT
        Subject: CN=4B1DE3115EDE02FC79EA37DAF15D83A4D584E214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:53:9b:0d:4c:6b:7f:31:f2:9d:6f:32:8a:
                    84:e7:1e:f2:75:12:c8:c7:9b:77:18:b9:b5:85:a8:
                    53:56:f9:e5:06:c5:45:ac:cb:38:29:db:39:a3:c5:
                    d1:63:11:30:bb:c0:09:d5:88:02:f4:e6:bb:5a:06:
                    a4:4e:ca:51:d8:79:25:26:c5:c8:61:f5:b3:a4:a1:
                    db:83:c8:e7:8a:b2:97:41:3b:d2:2f:b8:4b:09:53:
                    91:ed:79:fe:73:2c:80:44:2f:06:6a:29:1b:e9:df:
                    da:84:14:38:e5:36:47:a9:72:2e:13:64:d1:a8:04:
                    1a:f9:1d:a3:f1:e9:1c:dc:f7:9a:42:1d:e1:88:e9:
                    32:15:1d:17:37:00:cc:40:91:5c:9e:6b:9c:0e:74:
                    d1:73:3c:48:39:05:57:f7:d7:09:c3:da:77:86:2c:
                    db:ec:d1:ee:0d:5e:8d:22:d3:d7:78:1c:a2:98:6b:
                    6c:11:dc:66:26:84:32:0e:d5:61:49:d0:7d:e9:83:
                    bb:bf:87:20:49:a2:1a:91:23:c0:de:db:a2:ba:be:
                    c2:3e:a7:6c:a8:f4:76:5d:60:b9:03:9b:be:37:30:
                    a0:02:af:c3:04:f2:3f:6a:b1:e2:c8:97:3f:cf:b7:
                    14:e7:1e:81:8f:93:10:71:d8:99:f5:94:e7:ce:74:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1D:E3:11:5E:DE:02:FC:79:EA:37:DA:F1:5D:83:A4:D5:84:E2:14
            X509v3 Authority Key Identifier:
                keyid:09:46:AB:C0:E4:F8:5C:E0:FC:04:F4:D0:51:2F:90:59:7B:72:48:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/0946ABC0E4F85CE0FC04F4D0512F90597B724859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0946ABC0E4F85CE0FC04F4D0512F90597B724859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e342e302f32332d3233203d3e20323635343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:cd:21:6f:82:13:eb:11:2d:13:04:8c:e2:37:f0:04:14:ba:
         2e:94:d9:c3:39:11:8a:20:4d:da:d6:98:43:ca:6e:0a:59:0a:
         e1:fa:bf:e9:5a:40:39:e1:10:73:75:77:cb:62:9a:40:22:ea:
         da:cc:1c:08:5e:58:a4:4f:f5:38:f6:c6:db:17:5b:eb:65:8f:
         3b:fa:99:f0:74:07:74:20:7e:cc:16:2b:5a:86:00:6b:74:b6:
         f3:a8:0b:91:a3:2f:bd:75:af:c3:48:0f:f8:2c:74:87:1f:45:
         e7:eb:a2:3e:f1:20:9c:e2:3a:6b:24:a3:38:b0:57:7f:5c:9e:
         bd:a6:1c:d3:fd:a8:6c:df:22:ad:bf:26:fd:7d:bc:2d:72:b0:
         18:ad:92:58:ba:b6:98:7b:58:de:59:7f:c3:8f:5b:50:b4:90:
         9a:48:5e:18:3a:4d:ff:0b:3b:1e:4d:ac:2b:44:9c:7d:97:54:
         47:68:5a:0c:60:04:f4:cd:7f:a8:13:35:37:c3:d6:3c:31:20:
         85:0b:96:24:5d:30:56:ab:d2:0e:b8:81:bb:b5:3e:2b:52:23:
         a0:18:b4:10:cc:3e:f9:59:ff:76:4a:88:81:5d:b7:87:80:95:
         49:03:25:77:46:e4:c5:9c:35:07:6a:56:6d:46:5b:a1:3c:46:
         d9:94:b9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org