Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/3136382e3139352e34382e302f32342d3234203d3e20323635343230.roa
File:                     3136382e3139352e34382e302f32342d3234203d3e20323635343230.roa (raw, json)
Hash identifier:          g5o9rerhoo7V2sjUovmgYdX3oO56u676tljZxvsCo/Y=
Subject key identifier:   E6:01:27:5B:28:7D:3F:33:22:D0:06:AB:4E:68:C6:BA:1C:04:21:99
Certificate issuer:       /CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
Certificate serial:       5689F6D88EB05D0121FDF4C0C0D830BE5905CFF9
Authority key identifier: 30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/3136382e3139352e34382e302f32342d3234203d3e20323635343230.roa
Signing time:             Thu 04 May 2023 12:51:15 +0000
ROA not before:           Thu 04 May 2023 12:46:15 +0000
ROA not after:            Thu 02 May 2024 12:51:15 +0000
asID:                     265420
IP address blocks:        168.195.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:89:f6:d8:8e:b0:5d:01:21:fd:f4:c0:c0:d8:30:be:59:05:cf:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
        Validity
            Not Before: May  4 12:46:15 2023 GMT
            Not After : May  2 12:51:15 2024 GMT
        Subject: CN=E601275B287D3F3322D006AB4E68C6BA1C042199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:73:60:d8:d8:6c:76:2e:9b:bc:e5:61:2d:
                    43:95:35:ae:e3:2e:67:c7:c3:f8:51:9e:a5:7b:46:
                    88:67:cc:3f:d1:7e:ce:71:02:d2:cc:de:31:a7:56:
                    63:2f:4e:33:98:58:39:b3:21:ef:c3:4a:97:b6:84:
                    46:f5:fe:0d:53:c4:ab:74:a4:78:18:e0:7c:6c:4a:
                    c4:05:5b:ff:d4:23:55:43:1c:54:d8:a0:30:f5:8f:
                    fc:63:b1:bd:cd:9e:cd:80:1d:e5:23:59:f8:d1:25:
                    68:82:91:de:84:e2:cd:4f:7c:2f:14:ea:33:6c:51:
                    be:fa:50:22:c3:e1:d9:27:b4:50:6c:fd:17:e9:80:
                    d8:75:7d:53:e1:36:49:1d:07:76:e3:ff:1e:cf:ab:
                    32:04:64:9a:30:9c:31:f6:b8:8b:e2:4b:f7:aa:54:
                    98:0e:fc:94:7f:51:0f:57:fb:e0:7c:06:11:28:30:
                    80:11:01:ac:4d:5b:8a:c4:fe:82:bb:97:96:78:63:
                    1b:b4:e9:3f:fe:d2:ec:ad:f0:bc:f6:a5:36:34:fe:
                    82:43:82:7e:92:e3:fa:60:3b:0c:5e:e0:63:0e:a2:
                    57:e8:cb:2e:ac:b5:4b:9c:e6:3e:d2:51:06:b1:72:
                    e8:bf:84:fa:11:50:7f:29:7d:a6:76:b0:cd:ae:9f:
                    ec:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:01:27:5B:28:7D:3F:33:22:D0:06:AB:4E:68:C6:BA:1C:04:21:99
            X509v3 Authority Key Identifier:
                keyid:30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/3136382e3139352e34382e302f32342d3234203d3e20323635343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:34:7b:c5:47:e9:36:be:d3:c7:47:d1:2b:27:4c:c7:c2:d9:
         44:dc:b4:bf:16:b0:f7:2c:90:99:87:e1:a2:8d:72:8c:fc:d1:
         ff:05:55:11:86:9f:df:db:32:36:85:8a:9d:27:29:21:c1:ac:
         2e:f6:34:87:a8:81:bf:3a:c9:7d:65:03:91:03:b7:32:9d:d8:
         82:76:b6:ab:1f:41:56:b4:06:c4:3f:f6:34:c5:5c:16:9d:d6:
         2c:ba:dd:6c:ec:35:76:ca:10:f4:8e:67:20:81:21:45:51:55:
         64:79:9a:dc:76:f1:ff:8c:0b:34:c7:66:b9:78:2a:be:38:b1:
         e4:c4:92:ca:6c:25:aa:7a:12:7f:ee:9c:08:8f:7f:92:15:10:
         fd:7d:4c:2f:66:d9:af:03:5d:59:f7:8c:ba:0f:d9:cf:6d:0f:
         f6:60:39:a5:3d:be:d1:c7:f9:31:f1:af:2d:47:69:ed:1a:b0:
         82:c5:56:5e:82:53:36:ed:07:94:7a:1f:8c:3e:e2:c9:31:63:
         c9:c2:0a:b9:ec:c2:10:10:1f:2e:4c:45:3e:32:a1:ff:69:21:
         62:93:50:c7:7a:40:50:6f:ee:09:9c:57:40:cd:f1:d7:b3:95:
         26:9c:b9:87:3d:1e:c0:4e:13:e3:8e:6f:6d:62:de:59:e8:6c:
         84:f4:b2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org