Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32332d3233203d3e20323635343633.roa
File:                     3136382e3139372e31322e302f32332d3233203d3e20323635343633.roa (raw, json)
Hash identifier:          7kfH8FvfgGDs6lgLHyY7ICiOif2oh1L3Vsd97f4P8EE=
Subject key identifier:   F8:3D:B9:2C:F3:C4:6F:EE:8B:EF:61:2A:BC:F3:C4:C1:9E:94:30:BB
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       1EC521B5FCE8BD4295B67A7E8D03E040D07486E2
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32332d3233203d3e20323635343633.roa
Signing time:             Sun 28 Jan 2024 12:00:35 +0000
ROA not before:           Sun 28 Jan 2024 11:55:35 +0000
ROA not after:            Sun 26 Jan 2025 12:00:35 +0000
asID:                     265463
IP address blocks:        168.197.12.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c5:21:b5:fc:e8:bd:42:95:b6:7a:7e:8d:03:e0:40:d0:74:86:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Jan 28 11:55:35 2024 GMT
            Not After : Jan 26 12:00:35 2025 GMT
        Subject: CN=F83DB92CF3C46FEE8BEF612ABCF3C4C19E9430BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:8e:f2:8a:05:dd:07:5f:3c:c6:f9:bf:6d:
                    1c:ef:ac:f0:6c:7c:c1:7e:5f:24:a2:54:46:35:48:
                    fe:47:13:ce:8d:f9:65:db:f2:eb:19:9c:d9:99:3f:
                    ce:6f:33:0d:b0:56:c8:84:9e:b1:75:71:f2:29:7f:
                    fd:c2:4c:86:73:01:da:b9:a5:d6:b6:49:4f:f8:10:
                    dc:d9:fc:ee:fb:43:82:65:91:f8:9a:81:77:96:53:
                    db:36:f2:82:e2:c0:48:ad:c8:40:9a:c0:7f:4c:94:
                    6b:f1:ca:91:ff:79:32:89:38:40:ac:4e:f3:7c:79:
                    d4:2a:6d:89:28:59:92:66:52:e4:84:b1:4c:4d:c5:
                    4d:86:d7:e5:0f:8d:26:5e:49:fa:d8:dc:5f:b7:f7:
                    87:f6:2a:4e:18:4d:89:50:96:82:20:de:50:73:dc:
                    e6:a5:77:bf:c2:61:91:d5:37:53:8f:81:de:86:c6:
                    0a:06:fb:65:f6:67:35:44:45:e2:ca:88:ea:b1:f8:
                    ca:f3:23:7a:64:bd:ea:fd:2b:ef:d4:4c:d7:71:c5:
                    91:1b:5f:70:1f:ae:ea:9f:52:5c:2d:cf:d9:3a:f9:
                    94:59:44:95:38:4b:b4:bc:7c:bd:8d:a9:f1:5a:dc:
                    16:6e:10:30:f6:2c:6b:bf:c8:11:e6:c2:7b:dd:ea:
                    d4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3D:B9:2C:F3:C4:6F:EE:8B:EF:61:2A:BC:F3:C4:C1:9E:94:30:BB
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32332d3233203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:a9:47:52:eb:d3:f6:92:23:79:6b:85:83:91:59:ee:14:97:
         d0:a1:e8:7d:a0:7f:f9:4c:80:89:f6:96:f8:7d:fa:16:bd:4e:
         96:01:23:cf:97:4e:ab:9c:f2:33:18:cc:fe:31:84:d1:a9:a0:
         91:b9:75:8c:86:5b:b9:bf:49:09:d8:07:cf:4d:a4:7f:f5:d0:
         18:b5:62:6d:36:78:d7:02:27:a8:ed:33:5b:18:bb:9e:8e:cb:
         ca:22:73:85:0e:93:bb:21:bd:b6:dc:64:94:c9:be:af:65:59:
         2c:3b:96:45:df:71:18:45:a1:1d:cb:60:69:10:c2:16:26:92:
         9d:c3:a9:11:18:ae:7e:80:b8:91:1c:88:ef:43:09:41:4f:6a:
         17:79:1d:a1:23:63:b9:1f:9c:59:4a:89:1a:6c:58:ae:19:ed:
         ba:11:49:ba:ea:52:6e:df:47:15:dd:a2:31:82:67:84:9f:ec:
         17:dd:cb:a7:cc:44:40:ae:36:a7:0a:f7:a4:00:18:20:d8:08:
         2b:9a:c4:89:ab:13:78:6e:b0:e5:86:b8:7f:87:39:b1:85:03:
         3e:3e:99:68:58:94:f4:02:50:d6:1f:71:41:ce:89:cb:1b:ba:
         f7:ef:d6:7f:cb:1e:25:30:2c:01:d4:5e:3b:d7:f7:08:ae:b9:
         f3:a6:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org