Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3233322e3131362e302f32322d3234203d3e20323632393932.roa
File:                     3136382e3233322e3131362e302f32322d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          WQFVwd2sAj7BR9VRKtwp238TpSboFmPai9vXP82L87w=
Subject key identifier:   7F:11:92:52:1A:6D:88:82:53:72:B9:5A:B2:F1:1A:D6:78:5F:C1:50
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       65E534296D59043B865DAC25D373FF64544A574D
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3233322e3131362e302f32322d3234203d3e20323632393932.roa
Signing time:             Wed 31 Jan 2024 14:31:15 +0000
ROA not before:           Wed 31 Jan 2024 14:26:15 +0000
ROA not after:            Wed 29 Jan 2025 14:31:15 +0000
asID:                     262992
IP address blocks:        168.232.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e5:34:29:6d:59:04:3b:86:5d:ac:25:d3:73:ff:64:54:4a:57:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jan 31 14:26:15 2024 GMT
            Not After : Jan 29 14:31:15 2025 GMT
        Subject: CN=7F1192521A6D88825372B95AB2F11AD6785FC150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e1:90:05:ef:84:8c:cf:75:e3:dc:1c:72:de:
                    d0:eb:45:d9:7a:d0:37:bc:ac:12:5b:ca:c5:b9:28:
                    9c:1c:b2:d8:03:7d:62:34:6b:f9:3b:d9:04:84:42:
                    3c:fa:61:d4:bd:c8:d7:a1:c9:d7:33:e0:f8:49:be:
                    47:8b:1d:4e:5a:35:22:1d:18:d3:4c:19:e7:09:f6:
                    79:22:e4:6c:66:96:15:da:45:7a:92:91:f4:d6:30:
                    31:f0:90:18:68:4b:a3:88:1c:72:b4:86:6d:48:5b:
                    a9:88:66:8d:2c:53:21:af:04:05:f3:c0:19:32:41:
                    91:2e:60:b3:d0:61:25:03:9a:5f:a5:af:16:2d:cb:
                    7a:a5:40:fd:f5:3e:dd:a4:55:3d:c9:58:f7:c6:ea:
                    c2:f6:9f:cd:3c:5e:9c:0c:b8:3d:ee:49:43:ff:a5:
                    be:f3:b1:de:7e:c6:90:aa:c8:cd:3b:62:08:66:9d:
                    9d:5e:ee:98:94:9c:07:e7:60:44:3a:cb:49:dc:57:
                    55:d9:b6:39:1e:c8:40:93:47:9d:09:9a:51:b4:76:
                    05:14:04:39:e9:da:1d:67:39:46:43:60:4a:3c:c0:
                    31:1c:fb:30:e1:8a:37:a1:eb:4c:25:6c:26:72:61:
                    87:50:2d:a1:f7:37:0c:2f:05:9b:3e:09:67:eb:38:
                    e2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:11:92:52:1A:6D:88:82:53:72:B9:5A:B2:F1:1A:D6:78:5F:C1:50
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3233322e3131362e302f32322d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:aa:ba:b5:f2:53:f3:e5:8f:c1:5b:95:0d:a8:03:4e:37:f5:
         37:45:fe:fa:d8:ef:4c:aa:5f:0a:39:51:9f:a4:6b:09:5d:83:
         13:44:2c:5d:f0:f3:96:96:0c:b5:58:eb:fc:23:b8:11:1d:c8:
         2b:23:d3:fd:4a:13:29:fb:44:52:93:8e:a0:7b:26:e7:f0:6b:
         ab:37:7d:20:1d:03:f9:66:26:11:4d:20:29:18:a3:3b:de:3f:
         a7:c5:e2:87:e4:ab:be:fd:2a:93:63:f7:4b:79:b7:90:21:be:
         ae:6b:11:ca:b7:ae:2a:bc:7b:ca:e7:ee:97:df:48:a7:43:61:
         47:69:40:9c:1c:92:74:9a:90:86:46:d1:f3:d9:f8:73:21:22:
         c1:e4:f9:9f:d7:2d:77:dc:bf:73:7b:fb:52:f3:8a:21:dc:2b:
         e6:7d:eb:35:9c:e6:39:1d:10:54:1d:2b:14:0a:2b:4e:01:a9:
         bd:99:cf:1c:4e:fd:5e:b9:71:a6:60:71:8f:26:92:ef:d3:2e:
         e7:f9:d2:7b:af:39:73:f8:5c:c0:cc:62:cf:2c:b4:c9:c2:3d:
         57:d6:1d:43:65:56:32:72:19:dd:ed:ff:0a:93:da:fe:33:73:
         62:85:09:b2:cc:02:a3:7d:e8:92:2c:37:2c:d3:48:65:f3:82:
         ab:7a:7f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org