Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31342e302f32342d3234203d3e20323635343633.roa
File:                     3136382e3139372e31342e302f32342d3234203d3e20323635343633.roa (raw, json)
Hash identifier:          76O/CB2QNYr5EYaQlpdEfXGNwxr6LkgXXenaDCQB6zo=
Subject key identifier:   19:BA:10:F0:7B:28:54:28:EC:E6:6A:D0:86:FA:01:25:B1:CF:AC:0D
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       7DAAB8AF1875D78ACB495776A88664B8C748F865
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31342e302f32342d3234203d3e20323635343633.roa
Signing time:             Sun 28 Jan 2024 12:00:35 +0000
ROA not before:           Sun 28 Jan 2024 11:55:35 +0000
ROA not after:            Sun 26 Jan 2025 12:00:35 +0000
asID:                     265463
IP address blocks:        168.197.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:aa:b8:af:18:75:d7:8a:cb:49:57:76:a8:86:64:b8:c7:48:f8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Jan 28 11:55:35 2024 GMT
            Not After : Jan 26 12:00:35 2025 GMT
        Subject: CN=19BA10F07B285428ECE66AD086FA0125B1CFAC0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:49:b2:f7:a0:f9:96:c0:c0:c5:77:e7:42:
                    fe:1b:e1:d7:f7:23:82:82:89:48:7e:e3:0e:92:c7:
                    7e:25:76:ce:a8:c3:cb:79:fb:6b:d3:3f:85:a6:af:
                    26:23:73:20:3e:75:4e:ec:9e:08:ae:ed:41:a3:71:
                    6f:79:45:d5:bf:5a:8b:17:7e:5c:6b:9e:cb:aa:31:
                    b6:1c:b1:ef:d2:34:be:34:b6:6a:2f:09:48:62:22:
                    02:5f:bf:34:18:f4:2f:da:77:06:5f:eb:a4:13:35:
                    91:a4:90:a1:49:10:bd:fe:15:5c:ca:87:40:c3:3b:
                    b6:a9:bb:9a:68:18:3c:f9:24:40:56:f7:08:8c:22:
                    1c:36:4d:2a:44:fa:b6:25:e6:e5:58:56:cb:08:b3:
                    66:e5:ec:28:76:21:8d:2c:4f:c7:fd:a2:3e:e5:6c:
                    2f:a6:72:b7:f1:14:7d:83:62:f9:7d:7b:8f:96:ef:
                    49:16:bb:1c:6e:c0:9e:0a:da:71:15:82:40:d8:a1:
                    06:f1:c3:7b:10:77:ea:3a:f9:60:8f:90:0b:aa:69:
                    8e:e9:3c:a2:1a:30:ab:ab:2f:a9:8d:a1:72:f9:48:
                    26:56:e8:18:4a:99:ee:2d:68:41:5a:7a:22:af:c8:
                    40:ad:97:ab:41:a4:e5:c9:39:e0:30:68:6a:ae:5f:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BA:10:F0:7B:28:54:28:EC:E6:6A:D0:86:FA:01:25:B1:CF:AC:0D
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31342e302f32342d3234203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:6c:58:48:3f:bc:52:e9:d6:ae:14:a5:f7:64:45:f0:4e:8a:
         5e:ed:e1:88:0b:de:ea:5b:85:ec:d3:ef:57:37:63:5e:fc:44:
         4e:30:8e:19:5c:75:01:56:7c:92:31:a5:e8:a4:8d:8d:6f:f8:
         4c:60:48:25:f6:40:4b:4b:a2:bd:b3:c5:5a:9a:c6:81:60:09:
         b8:77:02:0f:d4:ad:e7:f7:5e:f6:5b:51:31:d3:07:95:dc:1d:
         a8:9d:43:90:31:96:1e:8d:d0:a4:ae:6e:58:84:32:02:66:d2:
         12:9e:64:03:51:b6:b2:00:9d:c6:aa:16:b0:55:0e:9f:b5:3d:
         75:e3:4a:35:7e:1d:6c:f0:34:04:f0:bd:e2:42:6b:3b:62:14:
         12:87:f4:2a:e9:ca:93:84:eb:cf:dd:46:bd:35:4d:56:52:20:
         03:2f:e5:0a:45:63:b4:89:a8:cd:86:5e:b1:2a:00:3c:ba:ec:
         d3:e4:1a:1b:bb:d7:1a:f9:02:fc:62:c2:9f:92:d3:1c:5a:cc:
         60:7a:ea:3e:10:69:31:15:73:27:c2:27:fd:90:b9:54:88:9d:
         e3:25:a4:65:e7:b6:92:e8:53:83:ec:51:d5:29:c5:9c:70:f0:
         05:be:07:78:13:3c:e6:29:0e:96:4d:62:ce:9d:50:40:9b:73:
         9c:7c:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org