Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/3136342e3136332e32302e302f32342d3234203d3e20323635393335.roa
File:                     3136342e3136332e32302e302f32342d3234203d3e20323635393335.roa (raw, json)
Hash identifier:          /USLI9nfJ9dCT/9R9ITgLDc3VkKlxfzmfS5KusIbiVE=
Subject key identifier:   4A:36:63:9D:FA:61:25:C0:6F:5A:34:A0:36:1D:6C:F8:C3:95:37:FE
Certificate issuer:       /CN=78151C7AED024C90945657A6AA5EC78F610B0D64
Certificate serial:       4E205EF4B089F5469236F8FF363162D325531537
Authority key identifier: 78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/3136342e3136332e32302e302f32342d3234203d3e20323635393335.roa
Signing time:             Thu 30 Nov 2023 20:19:02 +0000
ROA not before:           Thu 30 Nov 2023 20:14:02 +0000
ROA not after:            Thu 28 Nov 2024 20:19:02 +0000
asID:                     265935
IP address blocks:        164.163.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:20:5e:f4:b0:89:f5:46:92:36:f8:ff:36:31:62:d3:25:53:15:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78151C7AED024C90945657A6AA5EC78F610B0D64
        Validity
            Not Before: Nov 30 20:14:02 2023 GMT
            Not After : Nov 28 20:19:02 2024 GMT
        Subject: CN=4A36639DFA6125C06F5A34A0361D6CF8C39537FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:a4:cb:7c:27:a5:25:f9:e0:d9:1f:f7:4a:
                    45:44:b3:43:eb:91:41:79:c7:88:8e:d9:f4:76:1a:
                    30:bf:b1:10:f8:3c:f2:66:60:70:af:a4:b3:bc:5c:
                    ca:ad:9f:a5:1d:3e:f3:80:7e:e8:d5:d6:50:a9:12:
                    f6:5e:38:7f:61:3f:40:25:99:c6:20:c8:5a:8b:21:
                    c0:d0:53:5b:cb:4c:90:1a:7b:52:d1:2f:7b:d5:8a:
                    00:44:13:70:60:ac:d4:21:a9:dd:eb:0e:f3:90:1d:
                    65:b9:75:c2:81:9e:7c:11:17:b6:5f:51:55:16:e5:
                    31:65:04:35:3c:7f:07:1d:9c:03:e4:aa:23:8d:8d:
                    fd:ed:8a:a9:d1:ec:cc:cb:19:8c:42:93:a7:63:14:
                    b5:e8:ec:1a:ad:45:23:c0:d3:80:ba:c2:72:2e:c7:
                    e1:c3:1b:f7:af:d6:5b:d8:5c:5a:60:72:03:d6:49:
                    7b:be:9a:62:92:b6:8d:8b:9e:6d:34:21:29:70:45:
                    05:cc:30:bf:59:9b:17:32:1d:24:bc:c9:91:0f:a0:
                    2c:6e:47:41:a2:6b:5a:fe:e0:80:7e:eb:da:ff:e8:
                    99:31:c2:61:1b:33:5a:aa:fd:ed:57:3c:a6:71:fb:
                    d3:3b:60:44:c8:98:44:64:44:44:9a:54:62:50:c6:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:36:63:9D:FA:61:25:C0:6F:5A:34:A0:36:1D:6C:F8:C3:95:37:FE
            X509v3 Authority Key Identifier:
                keyid:78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/78151C7AED024C90945657A6AA5EC78F610B0D64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/3136342e3136332e32302e302f32342d3234203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:e0:29:5b:98:58:b2:d1:d5:e1:03:64:bd:79:c9:77:16:4c:
         2c:18:c2:30:7b:98:f6:c3:95:b3:2a:f1:b9:91:1c:08:1c:f2:
         77:0a:07:ac:42:55:04:2f:5b:86:0a:90:dd:4f:e1:66:f5:42:
         ea:c3:f7:e3:e8:56:bd:43:36:29:78:de:fc:e1:71:fd:c7:79:
         12:8f:bd:a9:4f:71:5c:c1:07:e3:17:64:7c:5e:94:bf:d6:53:
         8f:cb:0e:b3:ed:a8:b4:ff:69:b1:94:4e:af:b1:94:50:a8:56:
         9d:56:8a:e8:3f:56:50:f4:5d:f8:06:8c:27:a9:87:03:7a:93:
         56:c7:de:18:12:f1:db:e7:f0:be:4f:f9:01:c5:1b:a3:32:d7:
         a2:1e:7c:17:0d:0a:c0:70:7f:61:ec:98:da:12:26:4f:81:3c:
         ba:5d:d9:5a:6e:30:60:53:f9:b5:af:90:e4:32:a4:2e:3c:dc:
         44:cb:4e:c0:22:47:0c:26:32:51:1a:06:86:ab:d1:ad:1d:46:
         59:7c:4e:9b:b7:58:e6:8c:d0:8a:eb:14:34:08:2e:1d:52:9a:
         42:f7:b9:fd:d5:ab:81:f4:6c:90:71:0e:fc:fe:ce:67:a4:25:
         66:68:b4:6b:6b:c7:6f:47:b7:77:76:2c:59:01:19:00:df:2a:
         29:20:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org