Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa
File:                     3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa (raw, json)
Hash identifier:          /+RDB+M70GVBXa2txcVJ6p89+WqKAHD8opt9dGFz15I=
Subject key identifier:   5C:AC:94:DD:58:B3:60:89:A1:A6:4C:4C:23:4F:E6:AE:3B:C6:F9:2C
Certificate issuer:       /CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
Certificate serial:       4EB7D22731CCAD7B10FE5B83D9FCBB16567E53BE
Authority key identifier: CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa
Signing time:             Sat 30 Dec 2023 05:00:00 +0000
ROA not before:           Sat 30 Dec 2023 04:55:00 +0000
ROA not after:            Sat 28 Dec 2024 05:00:00 +0000
asID:                     265477
IP address blocks:        168.197.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b7:d2:27:31:cc:ad:7b:10:fe:5b:83:d9:fc:bb:16:56:7e:53:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
        Validity
            Not Before: Dec 30 04:55:00 2023 GMT
            Not After : Dec 28 05:00:00 2024 GMT
        Subject: CN=5CAC94DD58B36089A1A64C4C234FE6AE3BC6F92C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:06:1c:f3:41:52:ee:50:5b:cd:17:ae:29:
                    74:87:d8:af:a6:d1:0a:e5:a9:6f:b5:2a:01:34:52:
                    e9:cb:e6:8f:ec:a7:b0:79:24:03:fc:97:41:20:3e:
                    33:c6:58:0d:e1:6a:62:bb:ff:f5:34:3b:50:68:e4:
                    27:78:4d:df:e2:50:e2:ac:49:10:ec:b6:d1:65:16:
                    e4:e5:c2:24:33:51:e0:4b:5b:8d:b9:6a:0a:72:82:
                    b1:80:95:4a:09:d4:8f:c2:f0:65:58:f3:32:0e:13:
                    5e:3a:4f:f4:55:8c:33:02:a7:ab:be:5e:10:9d:08:
                    09:a9:2c:9e:c6:30:4f:19:f8:78:f8:e2:d5:86:96:
                    47:c2:75:2f:eb:af:2b:a6:9d:7d:43:71:ea:fc:27:
                    79:c8:88:2e:9f:8d:08:d2:fb:69:2e:f7:2d:be:f8:
                    c7:63:f3:51:8b:b8:46:90:10:ea:ca:3e:fa:99:68:
                    97:29:3d:15:e3:0c:d7:aa:24:5f:ac:cc:a7:06:40:
                    17:01:ca:f5:4d:26:38:72:70:36:3a:98:2e:12:ae:
                    78:2c:21:5d:dc:c7:b0:80:72:7d:9c:04:07:cf:cf:
                    78:c6:e0:fb:a5:d4:8f:7c:cd:c0:62:45:79:0d:d9:
                    ec:cf:1e:a8:be:47:f8:b7:0e:de:39:44:3a:7c:bb:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AC:94:DD:58:B3:60:89:A1:A6:4C:4C:23:4F:E6:AE:3B:C6:F9:2C
            X509v3 Authority Key Identifier:
                keyid:CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:d9:85:52:67:18:12:92:c4:e3:ef:c7:28:f1:ca:dd:b2:62:
         5c:bf:bb:41:4f:3d:f4:ce:90:ae:93:c6:83:28:43:b3:44:a9:
         1a:f1:41:42:4c:09:52:d8:75:b9:8a:21:7b:92:f8:d0:6b:29:
         cf:6e:5f:da:64:20:fd:10:4a:00:46:02:cf:e0:40:1f:02:c5:
         30:89:49:c7:0c:e5:32:36:8d:fb:17:b7:f2:31:6b:40:46:70:
         87:93:64:8b:34:0b:23:ea:eb:9d:78:bf:bf:9d:e5:47:60:ca:
         a9:ea:9c:62:a5:ae:59:5b:4c:7b:c9:7d:d1:3c:ff:08:35:f8:
         53:18:b0:54:fd:86:20:49:a8:71:33:70:37:a9:cf:e6:42:83:
         e1:f3:57:1f:37:7f:d0:ee:0a:0e:f8:77:0e:1e:06:80:fc:a9:
         a0:48:b6:b5:04:4d:a7:9b:71:bc:61:6a:d1:b4:1c:79:f9:52:
         7a:98:6f:39:87:a3:78:3d:3b:7f:b3:56:aa:f0:a1:9a:c3:c3:
         98:74:eb:52:a3:d7:bc:ae:f0:9d:b1:ae:70:88:bf:a6:2c:71:
         9a:d8:df:d5:89:c2:cc:66:05:b6:d0:92:37:d5:10:bc:73:c6:
         88:ce:6f:84:db:33:3f:58:12:2d:8b:47:89:d4:22:30:ac:b7:
         96:37:15:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org