Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          38LnnT1kwIIEG6se39chysP5T5DD4UTV3WAcq2n8Re4=
Subject key identifier:   06:25:C9:4F:20:E2:09:E2:B3:51:D5:99:57:A4:C4:22:44:5F:BE:37
Certificate issuer:       /CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
Certificate serial:       5FB0BDB5453AAB9B555A9B0EF014540C06376F3E
Authority key identifier: 9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa
Signing time:             Mon 04 Mar 2024 18:38:31 +0000
ROA not before:           Mon 04 Mar 2024 18:33:31 +0000
ROA not after:            Mon 03 Mar 2025 18:38:31 +0000
asID:                     264936
IP address blocks:        168.232.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b0:bd:b5:45:3a:ab:9b:55:5a:9b:0e:f0:14:54:0c:06:37:6f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Validity
            Not Before: Mar  4 18:33:31 2024 GMT
            Not After : Mar  3 18:38:31 2025 GMT
        Subject: CN=0625C94F20E209E2B351D59957A4C422445FBE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fa:0f:fd:aa:23:00:4b:fa:e2:fc:9e:78:8d:
                    8b:34:ff:80:47:5d:c9:8d:52:a7:a6:51:4e:19:a8:
                    94:bd:a3:ee:9b:20:c5:92:81:59:87:4e:27:4a:dd:
                    a1:8c:27:a6:f9:e3:4b:6d:40:cf:7c:b3:29:9e:a8:
                    37:14:66:03:d9:eb:c2:d6:8b:8c:2d:bc:9a:32:b9:
                    b9:54:c6:61:49:74:3b:10:f0:02:d9:27:41:10:d1:
                    1a:8a:79:1b:9c:17:0b:fe:8a:14:6b:9a:9b:13:87:
                    95:a2:b0:07:c8:9f:92:9b:c1:65:0e:d4:ac:5b:53:
                    3e:42:6c:c0:8b:75:3d:6a:f3:43:a5:f3:d8:f8:5a:
                    50:2e:be:73:67:3c:f5:14:29:5c:76:89:ef:a9:a4:
                    9b:42:06:3e:93:65:0d:73:3c:58:37:ec:a1:dd:5e:
                    a6:00:30:d3:72:9a:9d:6e:8a:10:05:8c:ee:d1:36:
                    9d:1b:e3:eb:ad:c2:2f:d0:2b:bb:c3:c5:de:ab:64:
                    df:ae:17:b4:08:9c:8c:56:73:60:02:47:68:92:aa:
                    4e:c1:7f:9c:fd:89:2b:a4:8a:da:f9:69:4a:8e:8a:
                    70:ab:51:e5:91:cc:94:9d:36:74:3c:60:3c:e9:0a:
                    46:ea:85:2f:45:9a:c6:10:69:11:fa:e6:d3:0d:9a:
                    1f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:25:C9:4F:20:E2:09:E2:B3:51:D5:99:57:A4:C4:22:44:5F:BE:37
            X509v3 Authority Key Identifier:
                keyid:9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:39:0b:04:2b:a4:90:5c:9d:a1:4d:0d:49:f6:8c:c0:09:ce:
         c7:31:b9:62:10:ec:37:db:8d:5b:aa:43:35:3c:9a:21:25:b2:
         ad:de:ed:4b:37:63:05:b8:73:d9:d4:e8:38:e1:b3:31:2b:6f:
         c7:36:ac:89:55:91:27:e1:86:5e:07:47:3a:68:aa:d4:a3:a6:
         69:3c:7a:b1:44:20:b6:40:47:0d:0e:a8:2e:0e:72:6c:1d:06:
         25:16:08:00:ab:3d:3d:f3:4c:c7:4b:aa:f0:31:79:f7:39:bb:
         12:32:43:c6:97:f6:d0:d8:9e:04:79:0d:cb:ae:cc:40:c4:a7:
         56:93:cd:fd:83:bf:c9:33:ba:a3:79:54:4c:3b:5f:12:cf:b8:
         e2:a6:df:0c:7c:8e:fd:5f:17:b4:08:44:ed:fa:81:30:f2:b1:
         76:2b:70:c7:ef:3a:ee:4b:ec:8b:a4:64:cb:a1:82:44:7b:e3:
         85:ab:14:61:08:55:82:dd:dd:39:0f:88:b4:08:c8:5f:8c:38:
         0c:03:56:07:f4:b0:4a:23:4d:3b:dd:23:9e:75:7f:60:65:b1:
         fe:a8:7a:ac:5b:2c:53:02:d8:79:99:5a:0b:e3:a5:d1:36:ca:
         be:7a:04:16:64:9b:7b:04:59:3e:db:c7:9c:16:ce:c2:e7:fe:
         5b:23:a9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org