Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          h26BGNxZIDQirZWYH3nvIJRJFDK/rxPRd/SYM3Q+L9A=
Subject key identifier:   4B:9B:2A:7F:57:52:8E:50:9F:69:6A:4A:F0:3A:7D:E0:A6:DD:FF:49
Certificate issuer:       /CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
Certificate serial:       4B5BA16ED9D3692C9D6BE632B36C2A25CE4C1340
Authority key identifier: 9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa
Signing time:             Mon 04 Mar 2024 18:38:45 +0000
ROA not before:           Mon 04 Mar 2024 18:33:45 +0000
ROA not after:            Mon 03 Mar 2025 18:38:45 +0000
asID:                     264936
IP address blocks:        168.232.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5b:a1:6e:d9:d3:69:2c:9d:6b:e6:32:b3:6c:2a:25:ce:4c:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Validity
            Not Before: Mar  4 18:33:45 2024 GMT
            Not After : Mar  3 18:38:45 2025 GMT
        Subject: CN=4B9B2A7F57528E509F696A4AF03A7DE0A6DDFF49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:17:77:97:c7:23:0f:a5:9f:eb:2a:da:da:37:
                    86:b8:5e:7c:f3:2f:36:ff:1f:06:9d:7b:d4:a0:83:
                    97:f8:2f:32:9b:81:8c:74:c9:4e:3a:10:57:c6:27:
                    bf:07:33:ce:fa:0b:a6:40:be:d0:b0:9d:51:8c:c4:
                    ca:81:e2:10:75:10:4a:e4:c0:4a:69:b0:96:b9:48:
                    4f:34:3b:34:a4:93:bf:85:ae:d0:94:74:10:10:71:
                    96:4b:fd:91:76:bf:0b:15:29:91:72:6f:3c:3c:a8:
                    13:95:66:e0:f2:16:d0:84:d6:71:bb:cb:2e:2b:f0:
                    28:11:f9:1b:92:e8:03:af:eb:a0:f2:88:b1:0f:b6:
                    81:6f:1f:eb:2c:2d:7b:93:94:1d:6b:c4:12:8e:c9:
                    4b:85:6f:a5:1f:26:a8:7e:81:13:e7:09:f7:92:a9:
                    5e:6f:87:6d:25:c2:20:d1:f3:a2:bf:92:47:6d:63:
                    af:de:06:d6:a1:ed:ca:d6:bb:0c:30:53:c2:ee:41:
                    62:4b:15:6c:57:0e:66:1f:16:aa:89:1c:8c:b2:aa:
                    e7:14:be:cc:42:16:d6:35:7c:85:f3:f9:a6:95:90:
                    e7:0c:13:36:a9:5b:16:c4:d8:f2:92:6f:98:d5:64:
                    0a:7f:54:20:fc:46:eb:1a:c6:4b:c9:f9:10:54:38:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9B:2A:7F:57:52:8E:50:9F:69:6A:4A:F0:3A:7D:E0:A6:DD:FF:49
            X509v3 Authority Key Identifier:
                keyid:9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:45:21:16:b3:5a:e5:45:42:2c:53:1e:71:f5:3d:0e:3d:ce:
         51:78:11:02:f5:2a:31:79:99:61:b2:7d:98:b8:0a:01:a2:08:
         e7:50:fd:30:be:36:0b:0d:ec:a8:41:a8:11:b5:f6:fa:df:de:
         54:d7:cd:7f:9c:6f:b1:d4:64:dc:da:c1:66:9a:f1:a5:c8:3c:
         96:9c:b8:96:90:af:eb:f8:4e:dd:23:10:af:c8:b4:12:5a:7b:
         21:15:a2:e4:f0:9f:a7:29:16:56:34:a1:12:a8:50:73:51:9a:
         ae:b8:6d:dd:0c:4b:c7:9e:51:fd:83:d7:61:88:db:22:49:2c:
         1a:bb:4f:13:ee:d4:8f:1c:0d:2d:3a:7f:a5:15:63:51:be:ac:
         54:50:c3:de:38:b7:1c:85:46:76:e0:c2:fd:57:33:87:7e:e5:
         22:fe:0c:41:7f:03:f5:7a:45:5b:8a:7f:bd:a9:5a:4c:76:6b:
         8d:aa:78:20:3e:66:19:81:ca:6a:59:45:47:c1:56:9d:c3:b6:
         c5:8a:b6:47:b9:49:dd:2d:09:d1:10:75:c4:bf:00:0d:5e:db:
         39:ad:da:5a:f6:3b:b6:80:c0:d4:b7:25:25:45:0f:1e:ee:a7:
         b3:49:f2:c7:f0:42:9c:cd:82:81:b6:b4:b4:57:fa:10:79:c0:
         e8:0b:52:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org