Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa
File:                     3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa (raw, json)
Hash identifier:          Mxt9R9RZGKd/c928djdgkCllY7rWRbd4YGhIFBrsLJY=
Subject key identifier:   EA:87:47:80:5C:DE:A0:10:7B:B7:94:EC:ED:ED:4F:CF:31:BF:DE:30
Certificate issuer:       /CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
Certificate serial:       1FA632CE0BF7FA3B3C9628159844D014385AF442
Authority key identifier: 8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa
Signing time:             Tue 16 Jan 2024 20:01:40 +0000
ROA not before:           Tue 16 Jan 2024 19:56:40 +0000
ROA not after:            Tue 14 Jan 2025 20:01:40 +0000
asID:                     263289
IP address blocks:        168.196.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a6:32:ce:0b:f7:fa:3b:3c:96:28:15:98:44:d0:14:38:5a:f4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
        Validity
            Not Before: Jan 16 19:56:40 2024 GMT
            Not After : Jan 14 20:01:40 2025 GMT
        Subject: CN=EA8747805CDEA0107BB794ECEDED4FCF31BFDE30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:f2:b2:27:37:26:a4:e6:74:cc:7f:4d:4f:
                    4e:18:bf:fc:d5:7f:85:2e:75:b2:31:1b:af:59:73:
                    fe:bc:b4:53:ac:25:69:92:45:24:90:8e:c8:50:42:
                    25:b5:a6:c4:8c:f5:6d:df:96:e1:bd:a5:05:ad:b4:
                    a0:3f:52:60:bb:2c:9c:f5:10:d2:f6:96:1a:0f:d1:
                    41:6f:fe:ac:24:64:84:2f:b7:e2:18:af:6e:0f:69:
                    fd:6f:ec:ca:42:86:bb:03:6b:4d:a6:72:29:53:7a:
                    bc:f6:75:38:72:13:19:9c:c5:84:2a:e6:36:9a:8e:
                    9f:45:07:63:70:74:bd:7c:8e:37:f5:c5:6b:9d:2a:
                    df:3f:47:e2:0a:05:dd:d6:bf:cc:ee:07:c4:41:e9:
                    41:29:7f:e6:81:3b:73:fb:3d:e7:45:bf:d0:6d:d5:
                    c2:20:7d:7d:0c:ff:b4:ba:4e:ec:02:2c:9b:0c:e0:
                    17:51:a9:52:9c:47:aa:b1:99:94:b3:99:00:2f:74:
                    9a:49:6f:fe:60:42:47:d5:9e:5a:06:fd:a2:fd:1c:
                    bb:eb:de:3a:7b:4d:fb:bd:ff:44:0c:3a:0a:f5:58:
                    33:0c:d6:11:c1:ef:e2:86:95:85:ea:ee:53:97:41:
                    81:ae:7a:9e:0f:6f:68:cb:a2:2c:30:a3:5c:72:0a:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:87:47:80:5C:DE:A0:10:7B:B7:94:EC:ED:ED:4F:CF:31:BF:DE:30
            X509v3 Authority Key Identifier:
                keyid:8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:93:20:93:7b:9f:ce:6c:6d:2a:59:cc:b9:c7:d2:e5:90:be:
         37:fd:14:f9:5f:19:78:fd:bf:7c:5d:46:0f:be:a2:49:d9:ec:
         67:ee:26:67:31:07:ea:23:e8:11:44:3f:21:16:26:fe:e1:67:
         9f:6c:0e:18:5f:0e:d6:50:a5:ef:5b:48:3b:db:cc:cd:e9:50:
         b7:fb:39:bb:4c:8c:a4:a2:20:45:e2:f0:ff:58:cf:59:04:c7:
         30:f3:48:39:97:d7:ee:95:26:cc:ed:9a:d4:ea:5a:15:25:2c:
         df:d6:45:b1:9f:6d:d2:41:10:d8:b2:ca:b7:73:e9:b2:0f:e2:
         c4:45:61:ff:26:a4:21:19:e5:f3:e6:8f:f8:56:e1:43:37:3e:
         a6:f7:8d:1a:0d:dd:5d:f8:1f:58:b6:3c:a9:80:5a:ca:db:fe:
         ed:6e:6c:50:0c:1a:65:35:65:f0:59:7f:3b:24:41:a3:16:14:
         3b:64:6c:56:06:8e:97:bd:85:37:11:53:f5:21:80:cb:e6:56:
         0a:35:33:ba:a2:d4:93:ce:ec:a7:78:40:45:73:4d:74:53:0b:
         00:9b:0f:7f:d1:9d:03:3b:e2:dc:24:15:51:c4:78:03:0d:dd:
         71:02:c6:ab:30:08:ee:a8:39:ae:24:5a:12:05:fe:4c:e0:2b:
         7c:55:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org