Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3136382e3139362e37342e302f32342d3234203d3e203631393432.roa
File:                     3136382e3139362e37342e302f32342d3234203d3e203631393432.roa (raw, json)
Hash identifier:          3Z7+rg/g/9rfb+AVwaQJux/vMF7ANP7BBV/eQMkeUHs=
Subject key identifier:   59:8B:F5:BE:85:2C:51:8F:4D:64:B1:43:09:80:FC:5D:06:C1:2B:0D
Certificate issuer:       /CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
Certificate serial:       367931D4A677B293C173258C6D8647840009F2B6
Authority key identifier: F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3136382e3139362e37342e302f32342d3234203d3e203631393432.roa
Signing time:             Fri 14 Apr 2023 16:39:27 +0000
ROA not before:           Fri 14 Apr 2023 16:34:27 +0000
ROA not after:            Fri 12 Apr 2024 16:39:27 +0000
asID:                     61942
IP address blocks:        168.196.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:79:31:d4:a6:77:b2:93:c1:73:25:8c:6d:86:47:84:00:09:f2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
        Validity
            Not Before: Apr 14 16:34:27 2023 GMT
            Not After : Apr 12 16:39:27 2024 GMT
        Subject: CN=598BF5BE852C518F4D64B1430980FC5D06C12B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:67:33:0a:74:88:1c:df:d6:0e:c6:8d:5b:
                    dc:3e:27:2e:ff:f0:48:43:a0:de:93:b8:db:0f:7c:
                    c1:8c:d8:12:81:6c:3b:b7:59:76:d1:9a:8a:94:22:
                    73:6b:fa:64:64:ff:ed:7f:e9:11:8d:58:d6:ea:99:
                    72:aa:89:11:54:fb:d6:dd:87:1e:f0:98:b2:a6:cd:
                    13:87:8b:d4:e0:99:35:da:5a:c8:64:d1:27:fa:aa:
                    00:27:17:66:49:cc:70:75:86:25:2b:01:3c:f6:2e:
                    e2:52:4b:1a:ed:8b:e3:21:68:82:f0:cc:be:3d:d2:
                    ea:c6:ec:7b:55:40:07:4e:5e:41:8e:cc:6d:ad:38:
                    c8:96:0c:11:1a:c4:fa:d3:bc:d6:2f:16:92:0e:5d:
                    5c:d4:7b:67:1d:c2:fc:2c:01:7f:b7:63:95:20:dd:
                    e5:02:e1:e6:6c:53:c5:97:cf:af:f3:65:6e:09:9e:
                    92:15:0b:27:a7:82:7b:20:01:1f:6d:b3:f3:e7:ab:
                    1f:56:44:ba:4d:c7:14:c5:55:26:ce:80:11:be:67:
                    57:7c:bb:d8:d7:81:f8:1b:b2:0d:e9:f0:52:02:fe:
                    13:a4:af:90:6f:04:da:0e:47:2c:a5:54:45:86:ef:
                    f8:58:67:b7:57:e8:eb:2a:92:5b:d2:c4:7e:f7:ad:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:F5:BE:85:2C:51:8F:4D:64:B1:43:09:80:FC:5D:06:C1:2B:0D
            X509v3 Authority Key Identifier:
                keyid:F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3136382e3139362e37342e302f32342d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d6:75:e7:05:9a:b8:ba:90:eb:57:de:ab:a3:d0:48:9f:c5:
         9d:3d:60:0b:df:fc:4b:55:ea:d6:a8:07:db:f7:d9:d1:06:45:
         b0:89:91:a7:01:92:f6:c0:79:af:49:bf:17:7d:2a:52:23:e2:
         ab:8f:80:25:6a:01:2e:34:27:3b:22:6b:f5:1a:95:2c:09:a8:
         c6:58:68:ac:ba:3e:de:40:e0:73:41:45:7a:42:8f:fa:bb:1e:
         fd:8b:09:b3:8f:ac:97:02:db:27:c7:db:20:a3:39:0f:e7:be:
         89:e8:31:f6:8d:2f:6b:19:44:94:29:d6:b5:96:22:5d:2d:4a:
         e0:4c:ee:72:12:39:d9:71:e4:5a:74:3e:35:0e:fa:83:32:41:
         a2:84:9f:88:37:d6:84:53:37:59:d6:2b:56:ff:49:93:68:a5:
         14:66:7d:29:e7:06:03:9b:d7:52:2f:67:5d:2b:74:41:b1:70:
         86:d9:b1:40:87:fc:78:97:a4:6f:85:7e:be:08:4b:b8:63:84:
         57:02:d0:b1:3b:25:f9:30:61:6f:44:85:c7:5e:32:57:00:f8:
         28:66:49:80:3c:79:ca:15:3e:58:65:59:0e:6f:13:df:c4:62:
         a2:e7:61:3a:44:38:a7:a5:75:24:6f:d7:3c:f6:59:e2:ea:54:
         1e:cf:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org