Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31352e302f32342d3234203d3e20323635343633.roa
File:                     3136382e3139372e31352e302f32342d3234203d3e20323635343633.roa (raw, json)
Hash identifier:          7Rq+5kq5JNXCLjlcxCtuuKMZSQqRU4zXctNACLJazLs=
Subject key identifier:   8F:81:EE:52:32:42:E1:00:E7:97:BC:C5:84:0D:43:87:ED:24:49:15
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       67755B9A49B14C8DBCD9A8AE7371FE1F0F2527FB
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31352e302f32342d3234203d3e20323635343633.roa
Signing time:             Sun 04 Feb 2024 12:37:25 +0000
ROA not before:           Sun 04 Feb 2024 12:32:25 +0000
ROA not after:            Sun 02 Feb 2025 12:37:25 +0000
asID:                     265463
IP address blocks:        168.197.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:75:5b:9a:49:b1:4c:8d:bc:d9:a8:ae:73:71:fe:1f:0f:25:27:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Feb  4 12:32:25 2024 GMT
            Not After : Feb  2 12:37:25 2025 GMT
        Subject: CN=8F81EE523242E100E797BCC5840D4387ED244915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:71:b7:da:75:e8:3d:46:fb:4c:44:fe:d0:
                    a6:76:7c:a6:c3:fa:42:f7:88:00:cd:c6:9d:5a:9e:
                    e8:a0:9a:25:ba:1c:67:73:44:97:66:59:e9:c9:af:
                    8f:66:0d:33:ab:c3:01:7d:fa:3b:06:71:f2:83:76:
                    2c:aa:cd:e2:f2:d7:e4:af:c7:7c:a1:da:3e:63:cf:
                    95:d0:98:56:61:82:a4:06:51:a8:e8:f2:45:d1:13:
                    b1:bc:bb:c7:79:37:04:e1:3c:65:d0:af:70:49:68:
                    9a:51:77:7c:cf:d9:72:e1:1a:eb:53:af:a7:3a:32:
                    d8:8c:f3:c8:bc:82:08:32:cb:49:b9:75:dc:a5:f2:
                    07:43:6f:37:8f:3e:1c:35:13:33:57:14:5f:e4:35:
                    c0:5a:ca:f7:56:de:bd:f0:27:b0:cd:9c:68:1f:ff:
                    43:ec:ce:b7:80:2b:fc:e1:96:41:39:0f:3e:ea:e0:
                    24:5c:c1:16:da:df:7f:82:5b:56:22:98:c4:7b:06:
                    ff:3a:6e:64:b5:9c:b5:54:5c:95:f8:5d:be:63:38:
                    79:6b:1a:15:7d:11:96:2f:58:ec:3c:7d:1d:58:11:
                    9f:94:da:95:2c:06:bb:1e:8a:82:2d:26:04:36:56:
                    ad:27:3f:48:3b:d0:b3:f7:4e:81:ea:47:a3:12:36:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:81:EE:52:32:42:E1:00:E7:97:BC:C5:84:0D:43:87:ED:24:49:15
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31352e302f32342d3234203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:d5:a3:1f:51:c6:be:5f:70:07:da:7c:8c:54:6a:cd:51:93:
         93:a0:ed:09:7a:21:df:06:de:ba:c0:fd:b2:d6:6d:95:ef:66:
         cb:18:0b:e8:f3:52:38:6b:4e:7e:d7:4b:c0:9b:43:95:72:a4:
         db:1b:04:b9:b4:76:01:f6:58:9b:1a:4c:0f:62:ba:15:96:10:
         0a:cb:c9:27:a4:97:36:90:ed:c4:3f:0b:c7:4c:13:79:3f:fa:
         c7:ad:aa:2e:40:0e:5a:06:59:71:1e:e9:8d:a0:dd:3c:aa:f9:
         a1:27:af:ee:25:89:50:3a:de:cd:fb:54:7e:f4:bc:16:1b:28:
         c3:ff:4e:46:04:21:75:0e:19:24:1e:d5:5c:07:e7:68:18:d3:
         68:f3:6b:3e:14:59:70:98:55:c6:13:c1:4e:77:83:ff:89:c2:
         53:8a:2a:90:2e:8e:25:e6:00:63:b6:fd:c1:c4:11:9b:2f:35:
         f8:61:d7:b8:4d:9f:a8:e2:2a:71:0e:f5:8b:59:10:59:8f:37:
         bd:da:fa:79:5d:6f:3d:7c:f1:aa:94:ae:e8:20:8d:e8:2b:67:
         08:e2:7f:29:dc:6f:49:ef:53:53:c5:61:95:3c:f5:f2:a7:20:
         95:36:20:a7:ef:f3:51:df:b5:10:54:73:56:0a:57:6f:00:0d:
         d7:9f:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org