Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32332d3233203d3e20323635333934.roa
File:                     3136382e3139342e3139322e302f32332d3233203d3e20323635333934.roa (raw, json)
Hash identifier:          9NZmOQzMG1oc0SoVVtV5yEprSigEFi0VH15I8bgPRvA=
Subject key identifier:   EA:86:D8:86:03:38:44:8C:F4:8A:BC:3A:25:08:C8:09:26:FA:A8:DD
Certificate issuer:       /CN=27FF6C0D2340FAB65651A712F06756E2AFD45AF7
Certificate serial:       169E9C5DE0801F86A173A4E48C9CA2FB5DFCF620
Authority key identifier: 27:FF:6C:0D:23:40:FA:B6:56:51:A7:12:F0:67:56:E2:AF:D4:5A:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27FF6C0D2340FAB65651A712F06756E2AFD45AF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32332d3233203d3e20323635333934.roa
Signing time:             Tue 26 Dec 2023 18:24:13 +0000
ROA not before:           Tue 26 Dec 2023 18:19:13 +0000
ROA not after:            Tue 24 Dec 2024 18:24:13 +0000
asID:                     265394
IP address blocks:        168.194.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9e:9c:5d:e0:80:1f:86:a1:73:a4:e4:8c:9c:a2:fb:5d:fc:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27FF6C0D2340FAB65651A712F06756E2AFD45AF7
        Validity
            Not Before: Dec 26 18:19:13 2023 GMT
            Not After : Dec 24 18:24:13 2024 GMT
        Subject: CN=EA86D8860338448CF48ABC3A2508C80926FAA8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:4e:8d:3d:fc:cd:af:26:f3:3e:9d:65:82:35:
                    b2:67:18:dd:5f:d5:7c:6a:02:47:e9:62:94:80:6d:
                    b2:ce:38:5b:db:81:39:7c:69:cd:39:ca:45:8d:91:
                    b6:e3:e7:e6:45:d8:13:da:ac:8d:e1:8b:b5:91:c8:
                    b9:30:52:3d:b8:e5:de:d8:f1:b3:53:92:78:11:7b:
                    b7:a6:47:92:cd:52:6d:29:c3:2d:6d:1d:6d:ce:26:
                    e1:36:17:71:a5:20:d2:ca:be:cd:49:98:67:f8:21:
                    29:79:ff:88:f7:52:79:8b:07:0c:bc:72:05:56:42:
                    06:5b:3a:81:3c:c6:85:79:f0:26:5d:b8:1f:1b:fd:
                    e2:41:b9:57:6a:c8:4e:78:69:ce:47:c6:ff:96:c8:
                    7a:04:8f:cd:2a:67:cb:cb:7f:70:dc:8c:24:30:ca:
                    72:04:71:d3:f9:1f:ba:2d:86:80:39:66:e4:55:a0:
                    0e:dc:8b:dd:48:af:f2:30:f5:3a:e4:25:68:bd:44:
                    c9:02:08:0c:df:fc:ad:11:66:ae:c9:0f:76:73:a1:
                    e4:5b:c1:fc:35:37:00:ac:20:76:15:77:93:ac:5f:
                    d5:cc:1c:d4:f6:fe:20:47:6b:f2:3d:61:8c:da:27:
                    04:b7:5d:fc:bb:ba:8c:b1:b8:bf:21:40:21:c8:82:
                    a9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:86:D8:86:03:38:44:8C:F4:8A:BC:3A:25:08:C8:09:26:FA:A8:DD
            X509v3 Authority Key Identifier:
                keyid:27:FF:6C:0D:23:40:FA:B6:56:51:A7:12:F0:67:56:E2:AF:D4:5A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/27FF6C0D2340FAB65651A712F06756E2AFD45AF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27FF6C0D2340FAB65651A712F06756E2AFD45AF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32332d3233203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:80:68:e2:d4:10:82:9e:28:d7:39:d5:7a:9d:38:2e:14:1a:
         30:ef:94:c9:58:34:aa:38:01:dd:de:dd:4d:09:23:a1:7a:19:
         c4:58:1b:db:2a:04:25:57:33:5e:60:f6:99:4e:f9:8f:06:9b:
         28:ce:dd:28:72:00:df:38:4b:fe:4a:86:ca:ee:81:b2:e5:13:
         53:dc:48:b2:00:cd:b9:fd:4d:a2:09:89:5b:0b:4c:66:de:bf:
         b4:2e:1e:9c:14:de:e6:75:3b:8f:9c:73:e9:38:3f:e0:c4:69:
         e1:e3:90:4e:1a:db:3e:f7:5e:47:89:4b:ab:55:0d:5b:30:08:
         07:ed:e4:16:f9:93:28:29:2a:7f:80:e6:2a:63:71:63:a1:94:
         44:23:fc:2a:ee:d9:45:23:70:ca:d5:e8:c2:30:01:fa:24:ff:
         40:da:8f:9a:4e:7a:ee:5e:7e:c7:ca:1f:41:ff:0d:f2:9d:fd:
         64:af:4c:57:66:3f:d7:a8:29:b3:70:91:0b:c3:ea:8c:95:a9:
         9a:dd:0a:a4:32:7f:05:4d:66:30:c7:80:7d:67:57:04:44:cb:
         92:ff:70:b4:f2:06:0a:25:f0:91:cc:fb:39:e9:7f:16:e8:0e:
         7c:59:69:7c:81:2c:ab:21:19:af:07:ca:b5:72:91:3f:5d:e0:
         21:f6:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org