Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa
File:                     3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa (raw, json)
Hash identifier:          sts2ISyqCrtitIy8N/13xF3t/1Wf68xG2pSYY/vM8mw=
Subject key identifier:   96:6A:7B:0C:26:F7:68:11:43:A6:A5:42:6D:27:B3:10:D8:D8:2B:77
Certificate issuer:       /CN=14DAB675B77AC194533C86DBFBAF31C52FE203FB
Certificate serial:       07824D51DC7635015BEA964A4CD02D62038D5A93
Authority key identifier: 14:DA:B6:75:B7:7A:C1:94:53:3C:86:DB:FB:AF:31:C5:2F:E2:03:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa
Signing time:             Wed 05 Jul 2023 14:23:27 +0000
ROA not before:           Wed 05 Jul 2023 14:18:27 +0000
ROA not after:            Wed 03 Jul 2024 14:23:27 +0000
asID:                     265311
IP address blocks:        168.121.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:82:4d:51:dc:76:35:01:5b:ea:96:4a:4c:d0:2d:62:03:8d:5a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DAB675B77AC194533C86DBFBAF31C52FE203FB
        Validity
            Not Before: Jul  5 14:18:27 2023 GMT
            Not After : Jul  3 14:23:27 2024 GMT
        Subject: CN=966A7B0C26F7681143A6A5426D27B310D8D82B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:1d:8e:73:ee:64:e2:c4:94:b9:9f:cd:8d:
                    64:ac:e2:57:69:a5:89:3e:98:88:85:ca:32:0f:c1:
                    fc:8c:f6:1d:12:ff:7b:3e:35:67:5a:f1:87:f8:8e:
                    0b:14:e8:a1:cc:fb:b8:2a:43:a2:2d:3c:fc:99:63:
                    c3:bf:a6:a0:7d:d6:19:08:90:74:40:55:cb:c0:2d:
                    07:15:6c:7b:06:a2:a2:06:00:e7:b4:a9:94:91:38:
                    ea:0f:b1:56:7d:c3:de:e4:0c:b6:75:95:b5:d7:23:
                    77:0d:6b:47:71:c9:94:3b:10:b1:07:e5:e2:82:d2:
                    32:87:1b:a7:a4:5d:aa:19:82:d3:7b:47:5e:cc:ed:
                    d7:6c:6a:87:f7:f0:e8:09:49:2a:21:1c:24:8e:db:
                    71:c0:fc:06:72:36:57:ad:77:a8:2f:cc:5f:08:45:
                    fe:1d:33:ca:4c:a1:f6:1f:ac:10:1c:4a:f6:dc:d3:
                    97:96:8f:a8:31:5d:43:f0:b8:07:86:ff:09:38:00:
                    8d:73:b7:c1:37:dc:48:55:33:fa:99:31:00:63:7c:
                    da:48:c1:ce:28:2e:c1:78:1e:3c:02:02:1e:b0:dd:
                    de:73:0a:db:96:01:19:a0:fc:fc:d4:e8:97:36:7e:
                    fb:0e:6c:35:c8:1c:5f:84:9c:91:7f:f9:68:cc:03:
                    63:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6A:7B:0C:26:F7:68:11:43:A6:A5:42:6D:27:B3:10:D8:D8:2B:77
            X509v3 Authority Key Identifier:
                keyid:14:DA:B6:75:B7:7A:C1:94:53:3C:86:DB:FB:AF:31:C5:2F:E2:03:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:8e:58:f9:fa:7d:a4:c4:33:11:bc:b2:f0:a5:11:1c:6d:0a:
         5c:87:c6:21:51:09:1c:f8:8b:55:eb:e7:5c:a6:44:c8:7a:63:
         b5:2f:b7:d3:6f:e4:3a:a6:50:94:12:f8:48:b1:14:be:33:1c:
         f1:f9:d7:9c:bd:71:40:f0:fe:81:25:61:eb:70:83:03:11:d3:
         80:d2:17:0b:29:7b:6c:b8:e0:83:af:8b:ca:d0:70:05:40:13:
         a4:ad:fd:f1:10:49:86:c6:16:9b:2f:34:a5:21:d0:cb:74:f5:
         0e:41:87:9b:50:7b:4a:8b:c7:40:74:d6:d0:4a:6f:7e:f2:09:
         c3:ee:bc:71:ab:e8:3b:41:16:14:48:e6:4f:cf:81:ce:73:38:
         d4:17:86:ef:35:39:dd:a4:51:04:12:75:c0:6e:bf:af:26:a5:
         9d:b0:43:cc:f9:7a:cb:5c:27:b4:bd:e4:7e:b8:56:01:a4:d3:
         67:9f:fd:58:41:d3:ae:ea:7c:d2:df:d2:d1:f0:90:2b:be:8a:
         38:b2:e0:f2:66:31:f1:ba:65:7c:c5:3a:85:bd:61:f5:c3:c9:
         f0:ba:d6:86:0e:66:8a:43:ed:04:11:93:cb:93:97:3a:41:c6:
         31:9d:a6:bf:c7:aa:98:60:26:8b:53:52:bb:2e:54:61:6f:81:
         a3:75:0c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org