Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31342e302f32332d3233203d3e20323635343633.roa
File:                     3136382e3139372e31342e302f32332d3233203d3e20323635343633.roa (raw, json)
Hash identifier:          iNos8MkiNPgtypeRWYhK0qlCJQA3qKgVTHwIYiPBn10=
Subject key identifier:   A7:3B:DA:83:EC:C8:07:8C:19:49:97:91:F7:07:9E:BF:0F:2D:69:0B
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       2570DB6165B8DD7D41D87C49F844FBD321974299
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31342e302f32332d3233203d3e20323635343633.roa
Signing time:             Sun 28 Jan 2024 12:00:35 +0000
ROA not before:           Sun 28 Jan 2024 11:55:35 +0000
ROA not after:            Sun 26 Jan 2025 12:00:35 +0000
asID:                     265463
IP address blocks:        168.197.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:70:db:61:65:b8:dd:7d:41:d8:7c:49:f8:44:fb:d3:21:97:42:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Jan 28 11:55:35 2024 GMT
            Not After : Jan 26 12:00:35 2025 GMT
        Subject: CN=A73BDA83ECC8078C19499791F7079EBF0F2D690B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:28:20:68:70:a2:d7:68:8f:ee:90:8c:1e:
                    ec:73:5b:fe:3c:74:a8:eb:88:b1:5c:a9:12:cf:de:
                    3c:e8:2b:c0:40:28:74:cf:d9:1c:0c:a4:f1:4c:d9:
                    40:66:a9:4e:59:5e:a5:b6:72:fc:d5:91:19:39:9a:
                    23:28:29:fe:1e:9c:c9:dd:41:13:0a:1b:e0:35:f6:
                    79:1d:e5:b8:d7:aa:0d:42:78:3b:73:b9:f5:30:1d:
                    d9:34:5b:b7:57:7c:13:2e:16:f7:23:e6:31:3f:9a:
                    aa:2f:2e:00:1c:f8:f6:a5:94:2b:9e:56:15:79:31:
                    df:a0:5c:0d:86:05:86:b9:26:af:00:8e:d1:9f:c1:
                    ab:24:02:f2:b7:9a:bb:a7:ed:15:dd:f3:56:6a:f7:
                    88:87:13:87:bd:47:1a:45:90:53:ad:8d:4b:14:a9:
                    5a:6c:cf:fd:4c:b6:c5:e8:13:a0:25:a6:f9:ed:30:
                    44:4f:84:70:8c:ad:ac:70:6a:3e:31:7b:32:70:cb:
                    bd:ef:71:7e:e1:66:f8:6d:2b:08:49:aa:9a:75:c8:
                    76:da:80:6e:5a:66:60:bc:6a:4e:ac:b4:1f:8e:69:
                    e8:d8:78:99:03:05:64:f9:97:93:06:70:6b:50:1c:
                    56:c6:1d:68:42:fa:65:26:6f:b7:60:14:15:2c:d2:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3B:DA:83:EC:C8:07:8C:19:49:97:91:F7:07:9E:BF:0F:2D:69:0B
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31342e302f32332d3233203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:05:18:8e:14:72:9a:ed:9a:ef:c0:7c:77:ec:f4:e1:18:fd:
         06:69:66:9c:b8:d2:2e:1b:1c:39:1f:22:73:8e:ac:0c:76:f9:
         34:6f:4c:d5:3c:53:20:33:40:85:2b:0f:89:f9:5a:12:f5:ab:
         21:31:0f:2d:1c:97:15:2b:4b:13:77:ff:9d:ae:19:f5:06:42:
         6e:04:0a:02:ed:ac:9d:1c:34:aa:d9:f7:e1:07:74:e6:9f:ff:
         2d:55:6b:36:b9:fa:35:c3:63:f6:44:d4:7b:e8:06:f6:0f:b4:
         17:3b:56:6e:5c:3c:8f:09:f4:10:9d:4b:cf:3d:3e:da:0d:56:
         b9:ac:fd:21:7c:25:eb:ca:a9:6a:7b:23:01:9a:03:b0:4f:b8:
         4e:a6:f2:b8:5b:86:50:24:d6:bf:d8:ae:5c:90:9a:af:ff:2f:
         54:a2:ab:75:5a:a6:9d:d6:92:0c:3a:6d:92:18:bd:08:10:f1:
         8d:f1:84:8a:86:a7:94:ec:3a:eb:22:c6:ba:bb:4a:ee:c5:1b:
         3b:e3:0b:f3:d3:1e:74:23:da:05:b6:d7:bd:e4:34:1f:df:9d:
         5a:72:fa:8e:6f:27:d8:aa:a7:ad:41:8e:02:0f:9f:36:43:42:
         e3:0b:66:6f:52:e9:62:58:dd:80:e9:50:7d:cc:05:cb:c7:56:
         38:b5:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org