Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa
File:                     3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa (raw, json)
Hash identifier:          Q/MFReo+VcJ7k8BWMJPAbc7dJXnNsokC5hTkxAsOfbY=
Subject key identifier:   A5:64:E8:B1:34:3A:8A:5D:9E:A1:01:BF:71:8A:04:9D:E0:93:2A:AE
Certificate issuer:       /CN=DAFBE65FF96BBA89F467D4F20B0549C579F099DA
Certificate serial:       0BEF85F6DFF78C7684EE0F149E14A7CB61F6CBBA
Authority key identifier: DA:FB:E6:5F:F9:6B:BA:89:F4:67:D4:F2:0B:05:49:C5:79:F0:99:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa
Signing time:             Wed 04 Oct 2023 23:00:00 +0000
ROA not before:           Wed 04 Oct 2023 22:55:00 +0000
ROA not after:            Wed 02 Oct 2024 23:00:00 +0000
asID:                     263145
IP address blocks:        168.205.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ef:85:f6:df:f7:8c:76:84:ee:0f:14:9e:14:a7:cb:61:f6:cb:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAFBE65FF96BBA89F467D4F20B0549C579F099DA
        Validity
            Not Before: Oct  4 22:55:00 2023 GMT
            Not After : Oct  2 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:39:5a:ed:09:5c:63:77:6f:c2:c2:ba:8d:a4:
                    04:cb:a2:52:f6:dc:4d:52:b7:5f:5b:0c:da:d6:f5:
                    11:ff:68:14:e7:e2:20:b7:1c:5e:92:21:38:bb:91:
                    03:ea:31:0b:a1:1b:48:cd:d2:3f:81:19:95:ac:82:
                    d6:2a:c6:d7:db:ff:70:cf:26:54:1b:65:e7:51:aa:
                    3c:38:5f:84:64:2b:d6:09:dd:7a:f0:5e:7f:e4:30:
                    4f:0b:fe:86:fc:83:ca:46:1a:9e:24:16:08:36:84:
                    8a:20:06:d8:99:46:6c:35:d6:56:72:e6:fa:04:e2:
                    02:ce:26:fb:ac:57:b1:ea:58:25:0a:15:de:94:8d:
                    3c:7b:d5:ce:bd:52:3c:3a:e3:f4:93:bd:7e:7d:e7:
                    62:5c:e5:c1:c7:d0:9c:a6:c1:de:41:b0:9a:69:a0:
                    10:97:c3:72:ed:fb:5d:c0:1a:7a:42:d2:72:c1:aa:
                    e1:34:57:e3:a0:67:c8:fd:2d:c2:62:c8:2c:68:d8:
                    38:4e:fd:de:74:4a:f5:d7:10:70:82:b3:0a:d0:a9:
                    87:99:81:b5:c7:ca:06:d9:d3:bc:85:41:a5:4a:4c:
                    00:95:1e:15:0d:ef:72:db:6a:07:34:15:96:a6:7c:
                    82:3d:c9:8b:66:e4:1d:d6:7a:9b:fa:a8:eb:cb:12:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:64:E8:B1:34:3A:8A:5D:9E:A1:01:BF:71:8A:04:9D:E0:93:2A:AE
            X509v3 Authority Key Identifier:
                keyid:DA:FB:E6:5F:F9:6B:BA:89:F4:67:D4:F2:0B:05:49:C5:79:F0:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:6c:58:a9:1f:50:e2:2d:f0:10:eb:03:61:f6:1d:7b:9e:db:
         2d:fa:70:f2:17:35:93:56:ca:e8:11:85:77:05:66:43:48:6d:
         fe:97:e3:3c:c8:e8:02:20:17:f1:68:d1:87:29:c2:37:b9:d0:
         a2:17:82:ab:c4:5b:5a:3b:42:53:66:be:54:c3:f0:3c:5f:fd:
         3b:f4:43:8e:b8:ee:7f:9e:ae:40:fb:65:12:7e:90:6a:be:4f:
         ea:7d:08:5c:4d:b0:21:ba:4f:f5:d3:50:6f:31:b0:22:64:87:
         7d:e7:4a:72:41:1d:58:19:92:33:fa:a7:cc:be:e4:05:d5:f5:
         c3:1d:e5:c8:fa:08:9e:8c:ce:6c:a1:d2:5c:31:2f:4c:8c:56:
         c2:2a:04:47:39:27:6f:4c:cc:dc:fb:84:ef:b5:ef:d3:ba:5f:
         9d:f5:a9:ee:7c:f8:ec:1a:ac:2b:10:26:be:86:d6:c2:fb:d1:
         26:e2:28:df:23:e3:1c:2c:f0:5d:74:8f:1c:34:c9:b1:8d:36:
         dd:87:bd:07:6d:4f:75:76:da:0e:83:a2:c0:4f:d8:a7:0a:8c:
         0b:6a:ea:80:a7:00:a2:95:31:37:5a:32:1a:78:e6:95:d2:2e:
         69:63:81:4d:4a:20:25:76:9e:8a:83:2f:55:85:dc:59:35:6a:
         63:0e:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org