Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32342d3234203d3e20323635343633.roa
File:                     3136382e3139372e31322e302f32342d3234203d3e20323635343633.roa (raw, json)
Hash identifier:          ouRMEmKVO8P2+uU2c5yDvrQu0Ryj5wYuRwDHfqM9g6k=
Subject key identifier:   1F:F8:7C:CD:BE:AE:6D:73:CB:B4:3D:C5:12:A7:CA:E4:98:9C:D8:9D
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       37665D113366D4DA1E0C1D7A2CCBB2824DD750A7
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32342d3234203d3e20323635343633.roa
Signing time:             Sun 04 Feb 2024 12:37:18 +0000
ROA not before:           Sun 04 Feb 2024 12:32:18 +0000
ROA not after:            Sun 02 Feb 2025 12:37:18 +0000
asID:                     265463
IP address blocks:        168.197.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:66:5d:11:33:66:d4:da:1e:0c:1d:7a:2c:cb:b2:82:4d:d7:50:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Feb  4 12:32:18 2024 GMT
            Not After : Feb  2 12:37:18 2025 GMT
        Subject: CN=1FF87CCDBEAE6D73CBB43DC512A7CAE4989CD89D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bc:ba:cd:38:d1:43:c5:a3:8c:13:a6:11:66:
                    83:c8:e3:51:05:08:e0:48:ad:87:45:bf:67:3f:a8:
                    89:54:93:23:7b:62:25:41:9d:b1:5c:5f:0a:9d:0a:
                    49:87:6d:85:4a:63:ec:d5:fb:4e:9b:99:54:38:fd:
                    ba:85:bd:07:1a:49:0b:53:d2:3d:59:35:ed:cd:5a:
                    89:64:87:b1:79:e0:42:df:23:00:72:f0:e2:a2:72:
                    a8:75:08:5f:42:61:bc:da:47:1f:66:ba:7b:50:57:
                    91:c4:94:39:38:c7:59:d7:9a:c2:a0:ca:7e:18:66:
                    76:e1:1b:a3:ab:55:8d:10:68:d8:14:53:a7:f4:e6:
                    f5:c9:dd:72:5d:36:77:36:1b:3f:c5:2f:d3:11:03:
                    7f:c6:5b:07:91:9f:ab:bc:54:67:11:01:d9:6d:10:
                    f5:46:d2:f1:df:f6:db:ce:38:70:1b:75:27:f6:7f:
                    24:5f:7d:0f:56:cf:e8:44:5b:9a:d2:d3:6b:ad:84:
                    3e:60:17:65:95:5b:bc:c4:f7:20:26:7d:6e:b2:0e:
                    62:01:77:d1:bc:07:c4:07:bc:65:90:01:11:3e:5c:
                    f7:e8:6b:eb:be:ec:bd:53:e5:10:59:e6:c6:91:f0:
                    ec:08:c4:1a:7f:1f:9a:c1:34:de:f9:e7:76:d0:d3:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F8:7C:CD:BE:AE:6D:73:CB:B4:3D:C5:12:A7:CA:E4:98:9C:D8:9D
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32342d3234203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:73:73:e0:bd:cc:61:47:bf:be:77:e8:a2:b0:ae:55:2d:38:
         61:74:9f:a4:7c:b4:02:dd:a6:48:af:d2:82:a9:56:93:9a:29:
         bf:dc:03:c8:62:07:61:36:46:9e:e6:b9:5c:09:50:b8:a5:f8:
         de:23:51:ae:26:ca:e9:93:47:c2:df:dc:20:67:ca:86:a8:be:
         64:06:b4:28:30:57:79:df:53:ba:b9:e8:bb:2a:ab:30:a0:22:
         51:b5:12:75:09:3e:78:f1:96:4c:a4:0f:85:93:59:09:7a:40:
         78:f2:98:08:14:ee:40:8b:1f:67:75:39:0f:a1:ad:4e:90:c9:
         ea:1b:32:7d:e0:33:30:82:4c:89:64:c6:ab:31:1e:ad:ae:30:
         23:c1:5e:fd:5e:8a:af:ec:b6:92:b1:5a:77:9d:35:0c:c7:ed:
         5a:47:44:00:48:82:5e:b7:a0:bd:69:b7:eb:90:e5:33:94:3f:
         18:7b:cd:38:a1:2d:47:68:83:a8:bf:70:bf:b5:ae:10:39:9a:
         9a:1b:e8:87:23:bf:1f:e0:1e:8d:0f:b8:c5:ff:e6:a4:b0:41:
         8c:5d:dc:a6:59:71:09:14:73:1d:75:a1:9e:82:dc:3f:b0:eb:
         c8:f6:20:8f:6f:63:52:7d:98:cf:50:3a:6d:b3:36:2c:22:f1:
         2b:4e:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org