Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3234203d3e20323635343633.roa
File:                     3136382e3139372e31322e302f32322d3234203d3e20323635343633.roa (raw, json)
Hash identifier:          ZAnhbh0Nvdg2e3bCTgUWvC9iamwbXKFo605Ke+ukJrM=
Subject key identifier:   DC:15:1E:D3:E2:72:5A:D1:54:CD:C7:E8:40:A3:CA:E9:9F:DD:C1:44
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       78BFBE8082262890B4BF966B1A79A5BABE2284BC
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3234203d3e20323635343633.roa
Signing time:             Thu 20 Apr 2023 20:18:41 +0000
ROA not before:           Thu 20 Apr 2023 20:13:41 +0000
ROA not after:            Thu 18 Apr 2024 20:18:41 +0000
asID:                     265463
IP address blocks:        168.197.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bf:be:80:82:26:28:90:b4:bf:96:6b:1a:79:a5:ba:be:22:84:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Apr 20 20:13:41 2023 GMT
            Not After : Apr 18 20:18:41 2024 GMT
        Subject: CN=DC151ED3E2725AD154CDC7E840A3CAE99FDDC144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:5a:ad:f5:b7:75:1c:40:0e:85:32:44:09:
                    84:fc:86:d5:98:c7:f1:e8:49:c0:17:2a:ef:c9:e0:
                    f6:b6:41:1d:2c:16:71:d0:7d:85:a7:f9:37:e1:e1:
                    9c:e8:a7:e9:de:20:05:a4:c7:59:7c:1b:c5:18:44:
                    91:46:34:cf:a1:40:5b:d1:f4:b9:9b:c2:33:42:10:
                    53:52:11:22:c9:5f:f8:21:50:8b:f2:c5:95:a9:35:
                    3f:e5:55:84:78:d9:72:c1:75:9b:f7:b3:8a:13:18:
                    e7:52:44:69:3b:e8:ff:49:30:af:66:fd:cd:99:55:
                    54:dd:d0:d4:2c:6e:56:b1:30:54:31:de:bc:9c:b3:
                    53:8e:16:ca:17:9b:a7:45:6e:a0:d6:d8:7c:c4:dc:
                    ae:8f:62:cd:9e:8e:0b:21:f7:cd:bd:79:67:93:2e:
                    a7:6b:00:22:76:f3:ea:4d:96:64:11:7e:f9:47:2f:
                    19:47:cf:8e:21:fa:b5:cd:b4:7a:40:25:91:ac:73:
                    4e:d2:c0:ab:66:27:73:4d:27:fe:75:93:69:aa:b2:
                    f5:15:ec:1b:45:1e:b4:77:f0:ab:fe:e2:60:3f:0d:
                    b3:e2:60:b0:b3:a6:76:86:a8:9c:ef:1b:5a:0e:38:
                    18:a6:00:40:e0:4c:87:9a:66:c1:02:26:78:f2:7c:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:15:1E:D3:E2:72:5A:D1:54:CD:C7:E8:40:A3:CA:E9:9F:DD:C1:44
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3234203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:d0:bb:07:c2:c5:95:19:1a:32:4a:ff:f5:1c:f7:11:46:
         6b:61:27:98:93:d9:05:71:0b:5e:c0:95:98:7f:72:c7:b0:05:
         b2:42:06:91:dd:29:31:9a:be:36:da:34:0e:92:cd:ac:fd:68:
         07:e1:90:8d:f1:f8:e7:6a:b6:3c:42:47:08:1c:7f:b7:fd:d4:
         99:b0:80:dd:f5:76:12:58:a8:5d:18:da:7c:26:90:3b:48:dd:
         0b:58:dc:e6:28:35:bb:a7:f3:ac:e2:34:23:ab:a7:3c:b6:ca:
         83:7f:c4:01:1f:d4:d1:60:35:1e:4f:8c:88:ad:94:b0:fb:35:
         a5:b6:be:4a:6f:78:18:2a:2c:76:45:3e:17:c6:ec:8c:bb:04:
         8c:91:02:52:0d:1d:68:20:34:be:66:b4:a7:fd:18:d6:6b:05:
         fd:ef:43:c9:71:f6:b5:95:3d:a6:ac:0d:dd:4f:6a:cc:9c:b3:
         1e:0f:f9:a5:4c:de:cf:57:b9:4b:c0:f4:fb:50:b2:e1:44:09:
         73:0b:ca:3e:84:75:07:c7:21:bb:af:b5:84:51:36:fe:f2:00:
         57:f5:c0:33:2e:36:3e:ad:27:28:9e:6b:63:5c:48:ec:b8:45:
         85:c1:ca:6f:c2:14:1c:71:11:99:86:f8:5a:76:03:40:f0:58:
         ce:d2:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org