Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/3136382e3139372e31322e302f32322d3232203d3e20323635343633.roa
File:                     3136382e3139372e31322e302f32322d3232203d3e20323635343633.roa (raw, json)
Hash identifier:          9wyVRecigYwmzQogzOeQgmIb+FJLwUWSS1VDC4LC/xA=
Subject key identifier:   13:40:55:19:49:30:C6:D2:F4:C9:80:E9:09:5C:EA:A2:F5:6B:10:5F
Certificate issuer:       /CN=1EA76B20E8CBB253F233A085B8C916B9BFD78B79
Certificate serial:       2CB03161D1B25B84D613DEC42B09AA2EB24EE703
Authority key identifier: 1E:A7:6B:20:E8:CB:B2:53:F2:33:A0:85:B8:C9:16:B9:BF:D7:8B:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/3136382e3139372e31322e302f32322d3232203d3e20323635343633.roa
Signing time:             Thu 04 Apr 2024 16:55:43 +0000
ROA not before:           Thu 04 Apr 2024 16:50:43 +0000
ROA not after:            Thu 03 Apr 2025 16:55:43 +0000
asID:                     265463
IP address blocks:        168.197.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b0:31:61:d1:b2:5b:84:d6:13:de:c4:2b:09:aa:2e:b2:4e:e7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA76B20E8CBB253F233A085B8C916B9BFD78B79
        Validity
            Not Before: Apr  4 16:50:43 2024 GMT
            Not After : Apr  3 16:55:43 2025 GMT
        Subject: CN=134055194930C6D2F4C980E9095CEAA2F56B105F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:89:e5:76:ab:b0:84:ab:31:98:b5:8a:1c:
                    fb:0a:8c:ac:7d:4b:52:c6:19:2b:a5:ea:90:74:22:
                    7e:eb:c7:45:af:f3:37:f7:85:bd:d2:c3:ac:1d:fa:
                    82:97:a5:9f:8b:74:8e:0b:fa:9a:f2:9e:03:27:60:
                    2e:61:9f:97:d3:a8:8a:85:cc:4a:20:d6:22:0c:d4:
                    58:dc:41:df:35:4f:14:58:e5:e4:c2:38:80:47:3c:
                    38:75:3c:8a:74:22:c2:d2:5b:b2:2c:08:4b:70:68:
                    86:74:bd:41:3e:7c:33:fc:a3:73:23:ab:a5:00:64:
                    6c:a0:4e:de:30:01:ca:9e:e7:2e:25:21:6e:3b:4b:
                    3a:41:1c:7e:e4:47:02:ac:9e:e8:f7:9f:43:26:61:
                    d3:8e:c3:9e:72:19:cf:57:d8:53:93:b5:76:2a:d3:
                    19:92:29:55:07:08:a7:87:85:c5:3f:b2:03:9a:b2:
                    54:7a:ef:6e:f6:32:4d:19:51:6d:1a:a7:f7:72:d1:
                    7c:e0:54:55:8b:57:3f:6f:bd:28:88:06:d2:f6:b0:
                    53:c4:ee:06:d0:d6:1f:24:ec:58:04:d1:eb:5e:e0:
                    32:a6:69:e1:02:3b:91:08:c6:2d:3d:21:53:a9:e4:
                    d8:9d:cf:f4:b0:29:e4:a4:83:50:ae:5d:80:1d:fa:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:40:55:19:49:30:C6:D2:F4:C9:80:E9:09:5C:EA:A2:F5:6B:10:5F
            X509v3 Authority Key Identifier:
                keyid:1E:A7:6B:20:E8:CB:B2:53:F2:33:A0:85:B8:C9:16:B9:BF:D7:8B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/3136382e3139372e31322e302f32322d3232203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:4e:85:69:50:3f:8a:71:1f:9e:3c:3d:83:45:48:80:7d:e3:
         cc:d6:73:d5:32:8d:24:66:06:97:8c:56:1c:9d:ff:cc:72:f2:
         68:fd:88:da:49:ad:8a:31:3e:e4:c4:b5:5d:85:7d:0a:33:e9:
         23:a7:d8:80:69:27:4a:5a:fa:f0:14:d5:51:85:56:d4:70:44:
         21:08:9c:1e:4c:f0:ea:c1:8d:c3:3b:16:8e:58:6e:41:25:84:
         bc:ac:b7:7b:81:38:74:df:ae:c5:50:9c:9c:04:b7:47:61:50:
         f0:32:cc:1d:23:48:ac:61:15:ac:6c:29:db:c2:a6:66:05:c6:
         9c:c8:ce:0b:75:56:69:df:59:17:d8:49:52:66:ba:ba:9d:3e:
         d8:9b:88:1c:00:8d:d6:14:03:b2:d5:81:b6:65:67:20:77:59:
         4d:d7:e3:33:be:66:2f:db:4e:bc:6d:39:cb:bf:33:b4:0d:82:
         a8:41:90:10:57:b7:8e:6d:7a:77:49:cd:1d:df:20:29:65:5e:
         3c:a2:4a:f7:84:f8:4b:6b:e5:89:a5:66:96:af:84:e2:d3:49:
         67:bc:46:ae:63:51:42:da:59:ad:ea:4b:31:44:72:e2:fc:93:
         91:fb:1e:d2:5a:67:46:2c:be:37:01:0f:0e:29:45:5b:b4:13:
         ce:9e:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org