Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa
File:                     3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa (raw, json)
Hash identifier:          zP+LBYkMo3P07OiPzMS9y/C64YCD1xjlB61zKxY8QwQ=
Subject key identifier:   F6:EA:F3:5A:A2:37:4D:5C:E0:24:FD:58:9E:C3:A0:F2:3F:BC:0D:07
Certificate issuer:       /CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
Certificate serial:       7294DC510DA0D1C04C3B34A43FC4F47F714E7705
Authority key identifier: 30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa
Signing time:             Mon 04 Dec 2023 11:30:23 +0000
ROA not before:           Mon 04 Dec 2023 11:25:23 +0000
ROA not after:            Mon 02 Dec 2024 11:30:23 +0000
asID:                     265420
IP address blocks:        168.195.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:94:dc:51:0d:a0:d1:c0:4c:3b:34:a4:3f:c4:f4:7f:71:4e:77:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
        Validity
            Not Before: Dec  4 11:25:23 2023 GMT
            Not After : Dec  2 11:30:23 2024 GMT
        Subject: CN=F6EAF35AA2374D5CE024FD589EC3A0F23FBC0D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:54:27:12:84:9e:6e:b6:e3:d3:b9:3c:53:
                    42:8c:ea:13:b7:f1:87:a6:10:8e:db:0c:52:d7:ba:
                    ef:85:32:4c:d2:45:09:74:d4:18:b6:88:12:f2:c3:
                    79:c9:60:68:8e:33:f9:7b:67:52:a5:9d:3a:33:35:
                    d1:bf:36:7e:eb:ad:4b:35:ed:9b:9f:93:88:08:f5:
                    a5:1a:38:e4:e3:59:4f:80:48:bd:c9:27:49:b9:2d:
                    c1:e4:19:7b:ae:fa:f4:f1:4f:dd:d8:42:17:b0:33:
                    48:c1:96:0f:19:c2:c3:20:5a:93:f9:84:32:7d:49:
                    75:a0:1a:73:61:fc:c4:fb:71:58:32:7d:02:c6:30:
                    95:6d:c7:aa:0f:2c:7d:45:ed:ab:3a:52:46:52:62:
                    62:4f:1e:26:e3:eb:26:0e:e9:07:be:ca:94:e5:e8:
                    f0:a2:59:84:fa:6c:0c:39:08:7e:28:be:07:a5:75:
                    59:b2:75:c4:94:cd:63:e3:e6:a1:ab:1f:12:4f:9d:
                    64:46:69:8b:a8:4d:fb:9d:e6:54:88:4a:22:59:12:
                    35:f4:0e:67:8b:b6:c8:e8:6c:c4:d6:de:a4:d8:51:
                    71:12:8e:66:db:c7:2e:97:7e:d0:50:ae:ae:d0:2d:
                    94:2c:0e:e6:1f:e7:0d:1f:b6:9e:90:bd:bc:c0:52:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EA:F3:5A:A2:37:4D:5C:E0:24:FD:58:9E:C3:A0:F2:3F:BC:0D:07
            X509v3 Authority Key Identifier:
                keyid:30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:4a:e9:2d:f6:61:27:ea:fa:7b:43:09:35:bc:55:4f:7a:4c:
         3b:4d:af:07:8a:57:4e:b0:a5:dd:a3:3e:99:0d:16:2c:0e:dd:
         20:3e:da:b9:48:10:6c:66:e6:2a:c3:cb:e9:0a:18:19:dc:72:
         30:28:0c:25:be:5b:a9:fa:58:82:62:3c:5e:67:8e:f2:a0:f5:
         a9:56:e9:8d:99:7d:00:f9:2f:65:94:e3:62:da:e3:29:21:08:
         15:54:6a:a6:e2:53:97:b4:d6:da:ad:96:c1:d7:fe:74:89:c9:
         0a:ff:5a:35:1e:39:f3:87:4b:84:a6:7e:57:be:a9:7d:fc:fc:
         fc:2a:29:12:86:d5:bb:61:b6:da:6f:47:4e:74:e8:29:52:2f:
         26:8e:4f:46:fd:5b:4f:f0:50:9a:4c:b4:68:e9:ae:dc:5f:98:
         62:43:9f:8c:43:17:4f:60:f6:a2:59:d1:03:a2:a3:3e:a6:a8:
         53:0b:0c:2c:73:23:f2:75:8c:b3:21:96:ad:d1:0a:1e:c8:1d:
         dd:1e:94:2b:bb:3b:45:2b:4c:92:1e:3d:ba:c7:8f:a4:08:ff:
         b5:38:f9:c7:5d:52:2c:ba:63:70:f0:23:14:f5:24:e1:62:6c:
         d3:7c:08:a5:8e:33:fc:91:f5:2d:25:1f:8f:2e:7b:68:e2:13:
         ba:d6:d4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org