Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/3136382e3139372e31342e302f32332d3233203d3e20323635343633.roa
File:                     3136382e3139372e31342e302f32332d3233203d3e20323635343633.roa (raw, json)
Hash identifier:          FjbhU3EmtwOcOol6ogb1cOelvbldz7YewtNVgoo4SZE=
Subject key identifier:   37:F4:CC:31:39:13:5E:C2:C8:1A:12:13:3C:32:6A:EF:FD:C7:93:E2
Certificate issuer:       /CN=1EA76B20E8CBB253F233A085B8C916B9BFD78B79
Certificate serial:       77B73BB271A7E11C78B812F7C775E7D0BC9CDCB5
Authority key identifier: 1E:A7:6B:20:E8:CB:B2:53:F2:33:A0:85:B8:C9:16:B9:BF:D7:8B:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/3136382e3139372e31342e302f32332d3233203d3e20323635343633.roa
Signing time:             Thu 04 Apr 2024 16:55:42 +0000
ROA not before:           Thu 04 Apr 2024 16:50:42 +0000
ROA not after:            Thu 03 Apr 2025 16:55:42 +0000
asID:                     265463
IP address blocks:        168.197.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b7:3b:b2:71:a7:e1:1c:78:b8:12:f7:c7:75:e7:d0:bc:9c:dc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA76B20E8CBB253F233A085B8C916B9BFD78B79
        Validity
            Not Before: Apr  4 16:50:42 2024 GMT
            Not After : Apr  3 16:55:42 2025 GMT
        Subject: CN=37F4CC3139135EC2C81A12133C326AEFFDC793E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a2:8b:81:08:c4:98:39:c9:4c:b4:b0:ae:ef:
                    8c:91:27:27:44:b0:46:46:5b:48:62:b3:f2:33:11:
                    79:49:b5:3d:c4:4b:c7:11:a9:39:eb:5e:01:98:bd:
                    d5:a8:db:86:13:c2:74:6e:ee:44:c9:74:b3:7a:dc:
                    72:32:e1:e8:a8:4e:b3:cb:8f:4d:92:54:8e:76:7f:
                    d7:bd:6f:54:87:d0:3e:00:a1:31:6f:51:39:6b:9e:
                    6d:ea:f3:fa:8c:b7:00:ed:a5:28:08:b3:d5:26:4e:
                    fa:10:f2:32:63:32:ea:4b:f4:51:48:bf:56:f3:7a:
                    28:fa:37:dc:f0:e5:94:9f:2b:93:26:fc:1f:f3:92:
                    0e:ec:e3:a9:c1:dc:dc:6f:4a:9d:bd:10:17:7f:2a:
                    4a:c7:d0:ae:e8:0f:09:5c:22:94:d3:fb:23:b3:0a:
                    09:9a:90:71:ef:e4:c9:5f:e7:48:82:bf:c4:bd:53:
                    fd:91:83:71:0b:4b:ec:55:d1:ff:dd:9b:3e:bf:42:
                    56:2a:20:26:c5:a6:84:61:80:ea:8b:32:47:41:ab:
                    6d:04:04:a5:88:58:66:c0:a7:ce:97:69:86:1d:ce:
                    4d:0d:1e:de:af:72:3e:ca:74:ce:e9:e8:33:5d:de:
                    44:36:be:b7:7c:00:77:f6:36:8c:cb:bb:60:ce:2b:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F4:CC:31:39:13:5E:C2:C8:1A:12:13:3C:32:6A:EF:FD:C7:93:E2
            X509v3 Authority Key Identifier:
                keyid:1E:A7:6B:20:E8:CB:B2:53:F2:33:A0:85:B8:C9:16:B9:BF:D7:8B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/3136382e3139372e31342e302f32332d3233203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:4c:d0:6f:e7:8f:42:b0:9b:60:45:cf:f8:85:33:ce:5c:25:
         b0:ad:69:e4:97:08:20:13:8e:cf:27:79:9f:42:e2:26:5b:3b:
         f4:b3:52:13:b4:37:bd:75:38:6e:7a:59:96:af:a3:e6:65:41:
         a7:a2:cb:ed:7c:be:05:ce:72:b6:56:38:60:c6:89:6a:89:33:
         33:05:57:f3:d6:00:9b:31:05:85:08:91:e0:c9:20:41:58:bf:
         b4:74:63:0d:f3:79:c7:c2:37:79:e5:8c:ca:0a:ae:d2:48:d5:
         3f:f1:5a:fc:b4:07:5a:94:1d:60:88:8e:02:e6:53:78:0d:66:
         3b:ce:37:2b:e4:13:62:9a:a1:5d:bb:43:f1:f7:32:7b:34:ed:
         2a:05:3d:ac:50:c3:2f:e9:6e:85:e2:31:87:ec:78:9e:9b:04:
         8a:24:b7:49:3d:4f:cc:d4:bc:0d:74:22:38:87:f9:4a:66:48:
         b1:fb:71:e8:a8:2f:de:d7:6d:7f:c0:98:5c:9c:3f:0d:6a:dc:
         27:d0:83:ed:da:19:c9:69:1b:a1:d6:1f:20:bf:ff:08:9c:87:
         e1:1f:90:fe:fe:23:d0:9a:48:be:fa:20:c0:a1:58:7e:98:1f:
         6b:ef:41:df:65:95:b9:f7:b1:73:81:6d:fb:48:c7:dc:a4:06:
         0c:de:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org