Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e362e302f32342d3234203d3e20323635343036.roa
File:                     3136382e3139352e362e302f32342d3234203d3e20323635343036.roa (raw, json)
Hash identifier:          asnuVB5pn+G4REimiVOY8O5X+nbBV/2lU9nvqzsWw0I=
Subject key identifier:   4E:A9:BA:B7:AA:E6:76:D0:7A:C0:51:38:2A:76:06:F8:40:F3:7D:6F
Certificate issuer:       /CN=0946ABC0E4F85CE0FC04F4D0512F90597B724859
Certificate serial:       7F8E19A01BD56E5AC30FC53C6BD1F2EC9882C9B7
Authority key identifier: 09:46:AB:C0:E4:F8:5C:E0:FC:04:F4:D0:51:2F:90:59:7B:72:48:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0946ABC0E4F85CE0FC04F4D0512F90597B724859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e362e302f32342d3234203d3e20323635343036.roa
Signing time:             Tue 02 Jan 2024 15:47:36 +0000
ROA not before:           Tue 02 Jan 2024 15:42:36 +0000
ROA not after:            Tue 31 Dec 2024 15:47:36 +0000
asID:                     265406
IP address blocks:        168.195.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8e:19:a0:1b:d5:6e:5a:c3:0f:c5:3c:6b:d1:f2:ec:98:82:c9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0946ABC0E4F85CE0FC04F4D0512F90597B724859
        Validity
            Not Before: Jan  2 15:42:36 2024 GMT
            Not After : Dec 31 15:47:36 2024 GMT
        Subject: CN=4EA9BAB7AAE676D07AC051382A7606F840F37D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:95:8b:4a:1e:04:f6:6f:2e:0f:45:1c:1c:
                    1e:93:33:8c:28:c2:a4:99:3b:5b:74:87:8f:eb:63:
                    0d:98:14:86:a1:6a:0e:99:cd:75:44:4f:f0:61:ec:
                    f9:68:f1:4d:df:58:96:6b:89:3e:61:14:bb:50:b5:
                    f0:d0:26:59:0f:20:db:1f:ab:32:85:c3:ba:9f:ce:
                    9a:80:1e:07:36:bf:68:10:d6:b7:e7:96:ab:ef:89:
                    05:88:3c:8b:03:8e:6e:eb:58:2c:cd:be:23:53:69:
                    ea:c8:46:25:85:8c:c2:1f:d1:46:17:ba:ce:4d:f6:
                    13:cb:db:b8:e0:20:7f:0b:1f:28:54:42:fe:83:23:
                    0c:7f:89:d6:d7:f6:75:10:bd:cb:14:7e:13:bf:39:
                    08:89:8d:72:f2:16:cd:3f:85:3f:89:16:f8:de:66:
                    58:35:2c:73:7a:3b:0f:c5:e4:22:5b:2b:24:e8:1b:
                    b4:37:ad:d8:43:91:b7:ca:ba:c5:fc:20:b7:1f:6b:
                    76:3f:9d:4d:3c:dd:5b:09:0b:37:35:c4:17:e6:af:
                    b9:d0:fc:b6:83:8c:4f:26:28:49:ef:35:33:b3:7c:
                    92:5f:60:7b:29:55:79:85:5c:ac:a2:ae:bc:30:db:
                    38:f7:dd:a3:91:d8:82:bb:a4:06:14:0b:a2:d8:be:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A9:BA:B7:AA:E6:76:D0:7A:C0:51:38:2A:76:06:F8:40:F3:7D:6F
            X509v3 Authority Key Identifier:
                keyid:09:46:AB:C0:E4:F8:5C:E0:FC:04:F4:D0:51:2F:90:59:7B:72:48:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/0946ABC0E4F85CE0FC04F4D0512F90597B724859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0946ABC0E4F85CE0FC04F4D0512F90597B724859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e362e302f32342d3234203d3e20323635343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:26:d5:26:b9:3f:cf:e5:4b:50:8f:77:13:1c:cc:cf:60:21:
         31:58:e7:a3:7e:4e:7b:62:af:29:d1:27:0d:f2:b0:7f:95:32:
         ec:5c:0e:6f:f6:68:13:e0:c0:8f:b5:84:60:9f:0e:a1:b1:34:
         1e:d4:f9:07:ca:18:0c:a9:ba:b5:4d:2e:fa:d4:ae:ee:99:60:
         f7:ba:f9:f6:5e:02:49:bb:3c:4a:32:3d:9e:78:a7:73:1a:fc:
         b8:84:69:81:2f:ae:8f:3d:00:4e:9d:70:ad:11:28:f8:f6:61:
         c9:dd:21:60:a1:50:1c:be:c9:fd:8f:54:23:0c:b9:ad:61:12:
         ab:a4:fc:26:e6:97:98:20:cc:e3:91:da:1e:fc:de:66:c6:0b:
         2d:8c:f1:23:e7:1c:ba:1c:b7:36:6c:06:d6:1e:18:c9:df:a9:
         d4:9d:ec:4f:47:ac:b5:be:a1:5d:53:6b:73:ff:f9:e1:a0:eb:
         da:b6:ca:32:eb:e5:24:73:b8:bb:95:5f:11:60:65:00:e2:b2:
         8b:f2:9e:a4:68:14:cb:40:82:12:a1:cf:d7:58:f2:ad:30:6c:
         db:89:2d:d2:8d:46:20:47:7e:4c:82:5d:de:aa:f2:1a:67:8e:
         2b:2b:27:11:6b:0f:ba:c0:32:5d:5a:ae:58:36:f5:d7:fd:0f:
         f4:24:9c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org