Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/3136382e3230352e3232362e302f32342d3234203d3e20323634383637.roa
File:                     3136382e3230352e3232362e302f32342d3234203d3e20323634383637.roa (raw, json)
Hash identifier:          tuD+u8Bc+88M+uhbU70hZrxXYokQwebQHCusscXuvks=
Subject key identifier:   04:1A:A1:02:DD:42:66:61:27:15:68:95:8F:05:93:E6:BB:90:1B:B7
Certificate issuer:       /CN=A81080075593D65A04DB9FC78CAC8CA9E1EE8246
Certificate serial:       161E23BA824854D37C292FA96E218029DFC96849
Authority key identifier: A8:10:80:07:55:93:D6:5A:04:DB:9F:C7:8C:AC:8C:A9:E1:EE:82:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/3136382e3230352e3232362e302f32342d3234203d3e20323634383637.roa
Signing time:             Fri 29 Dec 2023 13:31:23 +0000
ROA not before:           Fri 29 Dec 2023 13:26:23 +0000
ROA not after:            Fri 27 Dec 2024 13:31:23 +0000
asID:                     264867
IP address blocks:        168.205.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1e:23:ba:82:48:54:d3:7c:29:2f:a9:6e:21:80:29:df:c9:68:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A81080075593D65A04DB9FC78CAC8CA9E1EE8246
        Validity
            Not Before: Dec 29 13:26:23 2023 GMT
            Not After : Dec 27 13:31:23 2024 GMT
        Subject: CN=041AA102DD426661271568958F0593E6BB901BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:be:1f:6a:6d:f8:d1:bd:92:66:52:12:f9:
                    af:6f:b1:38:94:9a:17:5a:ec:6c:f8:1d:81:51:33:
                    1c:01:99:3d:26:69:93:5f:fa:e7:bc:5b:6d:41:15:
                    b4:97:56:e1:bc:f0:ee:bf:59:2d:a9:18:33:4f:ef:
                    26:10:8e:a1:ab:63:2c:d1:bb:ef:d7:d9:ec:f6:de:
                    da:e6:58:47:39:34:3d:87:2e:90:37:66:00:22:f7:
                    e5:38:77:29:ae:ab:30:14:c5:a8:00:5e:71:82:f4:
                    e0:23:40:46:9a:ac:8e:d5:6e:a2:fc:7f:07:92:15:
                    5b:6f:a6:6d:6a:cb:24:fa:1c:4e:45:d7:cf:89:f7:
                    d7:c8:0d:2c:52:08:eb:d7:c0:b6:5d:13:d4:8d:18:
                    5d:5f:ba:5d:a5:6f:8b:34:72:c2:22:46:c4:9d:25:
                    09:27:20:1f:49:1a:5f:a7:3d:7b:29:68:7c:e5:57:
                    be:ed:1c:67:9b:03:47:d2:e9:3e:94:5a:cf:cb:83:
                    e0:52:56:7b:7b:ec:65:c6:63:77:da:32:a4:9d:9f:
                    08:d1:68:e5:de:a7:f6:9e:f7:31:ab:28:ef:10:a0:
                    14:86:58:63:f9:cc:f2:a4:99:ab:08:23:19:9f:c9:
                    88:1c:05:d0:0f:f0:fb:32:00:17:dc:4f:f2:db:2b:
                    d2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1A:A1:02:DD:42:66:61:27:15:68:95:8F:05:93:E6:BB:90:1B:B7
            X509v3 Authority Key Identifier:
                keyid:A8:10:80:07:55:93:D6:5A:04:DB:9F:C7:8C:AC:8C:A9:E1:EE:82:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/3136382e3230352e3232362e302f32342d3234203d3e20323634383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:b1:8f:48:d2:96:7e:47:25:84:4a:2b:b4:a4:5c:b5:ec:e5:
         ba:46:12:97:52:ff:58:95:9d:4b:2b:77:fa:63:b8:1a:db:86:
         f4:cd:ec:50:87:7e:97:33:a3:cf:db:1c:c2:c4:98:8d:ab:e7:
         c8:88:75:c3:4b:d3:6c:39:e7:46:f2:a4:69:51:07:17:19:b2:
         4b:49:98:75:9f:ae:12:d3:fc:07:44:8c:6a:46:fe:ac:18:d4:
         e9:fe:7a:50:7b:7e:1f:cd:25:f9:97:b7:da:2a:f1:6a:2f:14:
         15:c1:25:26:17:83:59:30:e5:ff:bf:d1:22:15:5a:ba:af:58:
         09:a5:44:26:ee:b6:7c:55:fd:63:08:31:de:5c:f4:d5:bf:49:
         f7:b5:16:1a:5c:71:95:55:73:ba:68:da:37:21:62:0b:ec:65:
         b0:e4:f1:9a:b8:09:d5:f0:64:7f:bd:71:77:18:a9:78:93:3b:
         16:80:3c:3f:a2:6d:08:80:81:20:34:16:dd:96:bb:71:d8:5c:
         98:85:b2:31:2e:4b:d6:10:6c:f7:ea:82:55:64:a6:f5:fd:5b:
         ee:5e:54:b7:53:ca:be:55:8a:98:d9:32:66:8d:75:b9:41:49:
         6f:6d:f8:92:57:a9:50:fc:18:40:83:1f:bf:32:77:06:86:35:
         2a:85:94:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org