Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/3136382e3139362e3133362e302f32322d3234203d3e20323634333637.roa
File:                     3136382e3139362e3133362e302f32322d3234203d3e20323634333637.roa (raw, json)
Hash identifier:          lPUcojKXGILeX2yJNLklZi9/E9Fjf/ec+wcy2kY1MCM=
Subject key identifier:   08:5E:F7:18:69:A5:E3:27:A7:65:39:73:3E:0D:5A:2B:66:0B:48:E6
Certificate issuer:       /CN=5075EA9FA288700040BED023F3D40B2EAFF02ADE
Certificate serial:       034E0EE01FBE218DCBCFC745C446A27B40E464AA
Authority key identifier: 50:75:EA:9F:A2:88:70:00:40:BE:D0:23:F3:D4:0B:2E:AF:F0:2A:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/3136382e3139362e3133362e302f32322d3234203d3e20323634333637.roa
Signing time:             Thu 05 Oct 2023 01:38:18 +0000
ROA not before:           Thu 05 Oct 2023 01:33:18 +0000
ROA not after:            Thu 03 Oct 2024 01:38:18 +0000
asID:                     264367
IP address blocks:        168.196.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4e:0e:e0:1f:be:21:8d:cb:cf:c7:45:c4:46:a2:7b:40:e4:64:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5075EA9FA288700040BED023F3D40B2EAFF02ADE
        Validity
            Not Before: Oct  5 01:33:18 2023 GMT
            Not After : Oct  3 01:38:18 2024 GMT
        Subject: CN=085EF71869A5E327A76539733E0D5A2B660B48E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:10:62:d6:1b:e5:ba:dd:e5:b7:1b:4f:b5:
                    64:90:a4:fe:de:ca:d1:d2:14:8c:9d:58:ef:4b:7a:
                    99:2a:83:77:9b:1e:9c:fa:4a:44:25:cd:36:a2:8b:
                    dd:26:46:10:5e:bf:83:81:a8:27:dc:64:3b:48:0b:
                    cc:ef:75:11:f6:d1:11:cf:b2:14:f4:d5:38:95:0f:
                    7b:57:69:94:7c:ea:fe:bf:f7:df:8b:7f:9a:6b:0a:
                    31:26:e6:f8:de:20:71:fc:d3:c4:41:11:b3:f4:5c:
                    ea:9e:75:ce:98:73:97:6b:10:0c:5c:8a:66:79:58:
                    b6:9a:34:78:b4:c9:17:5d:1c:10:14:26:c6:20:bf:
                    eb:d9:07:ff:20:a0:c9:0c:95:28:10:4f:b5:ca:4a:
                    88:17:a4:20:a2:0e:ca:7a:7b:65:41:59:7d:61:69:
                    c2:f4:c9:57:dd:af:de:44:b9:ca:97:13:74:dc:97:
                    ff:1e:a3:d2:be:65:c8:d1:38:52:06:88:cc:a5:b0:
                    9f:42:2e:e5:c6:31:ff:70:82:ef:1d:55:a7:56:33:
                    af:7c:4f:f5:99:8a:89:e3:19:ef:c3:41:50:10:8d:
                    00:26:18:df:b6:8c:32:20:be:8e:3b:be:12:77:93:
                    7b:c3:50:bb:14:16:bb:3a:bd:3c:79:92:d4:ee:7d:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5E:F7:18:69:A5:E3:27:A7:65:39:73:3E:0D:5A:2B:66:0B:48:E6
            X509v3 Authority Key Identifier:
                keyid:50:75:EA:9F:A2:88:70:00:40:BE:D0:23:F3:D4:0B:2E:AF:F0:2A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/3136382e3139362e3133362e302f32322d3234203d3e20323634333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:4b:e7:48:bc:88:d2:64:d4:42:c4:38:f1:7f:63:ff:01:bc:
         93:9f:6d:ce:d0:e6:b8:aa:cf:c7:57:3c:8d:b5:13:d0:a5:bc:
         97:cb:72:c1:5b:79:11:75:aa:5d:72:72:73:6e:af:a6:9b:41:
         ce:2d:35:b7:71:88:fb:f5:69:1a:6d:b7:64:b2:fe:9b:21:ff:
         06:ac:0a:fa:5b:07:c7:47:73:83:eb:7e:f2:d6:ef:e0:3c:17:
         8a:65:6f:9a:44:4f:ad:16:1f:40:81:7b:4d:8f:fb:a3:8d:e4:
         1d:e9:be:76:38:49:c2:13:95:3c:61:41:6b:3c:c3:b8:57:8b:
         96:a0:be:31:0d:dc:37:6a:5d:28:99:d3:93:87:7b:41:3b:13:
         74:2f:43:41:90:d1:e7:17:04:80:6a:d5:1a:8a:af:55:5b:93:
         9e:c1:74:7f:f6:78:e0:26:34:fc:fa:14:38:8b:29:94:7c:14:
         42:56:a5:8a:28:6a:81:f9:82:32:5d:5a:e1:84:26:85:5d:32:
         5f:10:27:84:5a:a5:e5:e6:34:37:62:ed:34:37:3d:47:a9:89:
         4d:56:0c:34:05:b6:67:c6:2e:cf:dd:53:5b:c7:2a:81:e2:33:
         61:79:e4:7f:48:2e:c4:67:b4:c5:df:6e:33:d1:04:69:46:67:
         c8:dc:42:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org