Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3133302e302f32342d3234203d3e20323633323839.roa
File:                     3136382e3139362e3133302e302f32342d3234203d3e20323633323839.roa (raw, json)
Hash identifier:          eGg+pFR5cVPoC+3NImR56rCTKb/Y9WOp1OwLkGCi5y0=
Subject key identifier:   B9:73:CC:E2:98:54:82:07:03:6B:48:A7:04:D9:44:22:8C:D0:1D:33
Certificate issuer:       /CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
Certificate serial:       0C0DFD44376813A13A77DD7C57DBDAEE51E569A8
Authority key identifier: 8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3133302e302f32342d3234203d3e20323633323839.roa
Signing time:             Tue 16 Jan 2024 20:01:41 +0000
ROA not before:           Tue 16 Jan 2024 19:56:41 +0000
ROA not after:            Tue 14 Jan 2025 20:01:41 +0000
asID:                     263289
IP address blocks:        168.196.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0d:fd:44:37:68:13:a1:3a:77:dd:7c:57:db:da:ee:51:e5:69:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
        Validity
            Not Before: Jan 16 19:56:41 2024 GMT
            Not After : Jan 14 20:01:41 2025 GMT
        Subject: CN=B973CCE298548207036B48A704D944228CD01D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:52:89:58:82:53:94:f5:a7:6b:bd:ac:72:
                    0a:37:be:59:7e:66:32:0a:46:f3:c5:bf:ba:fe:ac:
                    50:06:be:c9:ce:91:5d:b1:a1:fd:0b:47:91:a1:51:
                    d1:df:01:cf:f0:84:ee:3d:ae:17:4c:9e:52:c0:32:
                    95:88:46:fe:9e:3d:f0:2e:f7:1a:de:91:c1:28:0d:
                    f2:14:90:5e:33:45:86:aa:30:1b:61:03:ae:68:75:
                    97:87:37:09:f5:1f:8e:e9:9a:e7:ad:7f:c7:e1:76:
                    e3:3c:b4:40:51:93:1a:fc:06:75:ce:ee:26:80:d1:
                    40:fa:c7:af:3f:54:89:de:ec:93:ac:bd:17:70:5d:
                    a1:29:9d:20:e7:8c:d6:a3:ba:45:9d:73:09:8c:f6:
                    bb:3f:18:6c:10:40:99:9e:96:f6:d5:c5:8d:98:4d:
                    7a:a7:e6:9f:6c:66:a2:f1:c6:79:7e:9b:aa:ca:1a:
                    c2:14:ab:4f:f8:fa:4c:ad:f5:f0:d7:72:54:38:50:
                    3b:f4:b3:81:c0:07:9f:3b:5d:34:1c:db:e6:c0:a6:
                    78:d1:09:d2:6a:2b:2e:5b:4c:47:6a:92:41:b5:1d:
                    74:11:5d:0e:be:57:97:34:4f:67:eb:18:51:56:94:
                    af:70:e0:2c:aa:84:98:50:3c:2c:ee:b6:4d:86:1f:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:73:CC:E2:98:54:82:07:03:6B:48:A7:04:D9:44:22:8C:D0:1D:33
            X509v3 Authority Key Identifier:
                keyid:8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3133302e302f32342d3234203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:52:31:74:e0:00:70:9f:98:4f:8a:09:5b:9a:44:b8:fb:51:
         0e:d5:88:61:50:e6:9f:3f:8f:d1:2e:d1:5a:3d:ad:37:66:e1:
         62:b0:5b:3a:6c:c2:70:9e:b9:86:7d:ca:ef:dd:ce:d1:9a:5a:
         60:6b:3e:67:5d:d4:85:6b:46:39:fb:59:cb:23:ac:37:db:d2:
         dd:6f:8b:b4:af:c9:ac:8a:42:d7:19:d7:4b:4e:e6:67:96:4f:
         0e:f3:ac:ca:db:57:c2:8c:e2:1c:3c:81:b2:3d:23:25:13:ed:
         cf:df:e1:a9:f3:e1:d7:0a:56:54:0f:80:db:53:d9:8c:7b:42:
         80:06:e0:a1:10:5b:f8:d2:c1:b9:8f:1c:bc:8d:91:30:e5:37:
         c4:fd:d2:27:b2:12:ee:f7:7e:cb:b6:bb:9d:ca:89:a7:ae:1e:
         09:b6:a8:6e:1c:97:bc:58:49:22:f7:32:fd:80:15:86:44:87:
         aa:9e:11:f0:53:66:24:eb:ac:90:7b:14:f3:17:08:42:2b:91:
         db:1a:57:f0:71:4b:02:81:fe:17:f9:35:f1:22:86:82:08:33:
         b8:65:c2:e7:65:e8:5e:3b:18:2a:3f:ab:ce:dd:58:26:57:29:
         c7:31:45:2e:6e:79:de:fb:9a:d1:f9:6b:e8:d6:96:f3:80:da:
         ca:59:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org