Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          8/Y7GVgSz4VnsiOX5b5THabEG/l8ginEKyWvllRAeTI=
Subject key identifier:   E4:58:4E:88:8A:E5:1D:01:37:82:9F:5B:58:E2:A5:5C:FF:03:C7:EF
Certificate issuer:       /CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
Certificate serial:       1FD47171139F3DF1CB58B83A874A7D8055D03C85
Authority key identifier: 13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa
Signing time:             Tue 02 Apr 2024 14:41:08 +0000
ROA not before:           Tue 02 Apr 2024 14:36:08 +0000
ROA not after:            Tue 01 Apr 2025 14:41:08 +0000
asID:                     264936
IP address blocks:        168.232.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d4:71:71:13:9f:3d:f1:cb:58:b8:3a:87:4a:7d:80:55:d0:3c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
        Validity
            Not Before: Apr  2 14:36:08 2024 GMT
            Not After : Apr  1 14:41:08 2025 GMT
        Subject: CN=E4584E888AE51D0137829F5B58E2A55CFF03C7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:34:d6:da:1b:cf:a6:46:2e:20:90:3f:28:
                    05:da:e5:d9:1d:58:e4:98:0d:7c:a9:0a:25:e8:40:
                    2d:ff:b9:60:10:02:56:55:4c:c7:c2:a2:e2:39:08:
                    0d:ea:ce:06:49:52:a7:5c:7d:bb:7e:7b:46:0c:11:
                    8f:58:2f:91:97:aa:8e:d6:b8:dc:a5:94:ed:ba:83:
                    ea:99:4f:86:34:07:8f:58:c4:4c:b2:60:a5:55:19:
                    a1:21:91:31:f5:9a:90:43:9a:14:99:6c:09:e3:f4:
                    4d:67:bd:33:5f:78:32:1b:e1:05:a2:ee:94:a0:7b:
                    0a:a7:74:02:60:85:fa:1f:3a:41:35:b0:e4:a0:9c:
                    b1:96:e9:ef:1b:87:b8:a0:fa:95:27:e8:cc:ff:78:
                    37:36:86:f2:ad:79:d9:29:ca:ae:28:e8:9a:94:7e:
                    3d:4f:fe:35:83:14:e2:6c:2b:cf:e0:16:be:78:d2:
                    f6:66:a1:4c:aa:c5:96:22:19:e7:8a:2f:11:1c:70:
                    6f:76:0f:fe:79:15:bd:08:67:ee:85:24:d4:78:74:
                    e8:bf:28:58:a4:1e:85:bc:60:52:5e:fd:6e:0e:c8:
                    84:38:6f:24:41:d0:ca:13:9b:02:9f:6d:fe:06:3c:
                    d2:0b:89:05:40:e8:80:6b:b4:e1:f5:e1:0d:94:c2:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:58:4E:88:8A:E5:1D:01:37:82:9F:5B:58:E2:A5:5C:FF:03:C7:EF
            X509v3 Authority Key Identifier:
                keyid:13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:31:26:20:1b:29:5b:a7:2e:5f:05:ae:00:84:52:a6:41:ae:
         fd:0f:a7:a8:55:db:4c:bd:e0:0c:db:4d:3e:5d:0e:5a:12:ec:
         5c:ce:0e:ff:34:ab:8f:43:9a:7b:c1:c2:08:54:01:0a:53:b6:
         23:53:13:c9:fb:bc:fd:3c:cb:00:60:12:f6:a9:20:d2:55:08:
         38:28:e1:a4:32:fa:e0:3c:f5:d1:29:3c:34:6f:7b:2d:07:a5:
         2a:60:88:74:9c:22:77:02:bd:ae:c9:fb:2a:b4:c8:40:ba:a5:
         70:62:e4:3e:c1:ea:6e:a9:ae:dc:36:e9:fa:9d:e8:17:3e:c7:
         c8:95:a3:2d:b6:1a:17:a1:d5:cb:a7:a9:44:7e:f0:5b:10:3a:
         c8:c3:11:4d:e9:3e:60:c3:6f:09:f0:0d:eb:fd:88:f0:8e:4e:
         91:75:7d:d3:90:02:ef:98:5d:76:61:01:d2:7d:e4:0e:75:d0:
         0d:02:0e:e6:5d:ac:9b:c4:f5:56:28:fa:8e:23:51:ab:68:9f:
         ce:4e:94:b4:c2:58:b1:09:34:99:9f:3c:9f:a3:9d:e4:12:e3:
         7b:d8:3d:17:cc:7e:db:46:fd:87:5b:38:3e:ff:22:bf:a7:9a:
         37:64:55:0c:fb:bc:2e:a9:99:52:70:8b:5d:62:55:78:90:a4:
         5c:12:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org