Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/3136382e3230352e3235332e302f32342d3234203d3e20323634383932.roa
File:                     3136382e3230352e3235332e302f32342d3234203d3e20323634383932.roa (raw, json)
Hash identifier:          LkiN/nZdf1vKuEoTO/ekhxrFv95oqTxBCrWad2fPdxY=
Subject key identifier:   C5:36:BE:2D:C9:AC:51:FD:45:06:4F:99:FF:93:CA:41:47:48:2A:1C
Certificate issuer:       /CN=20D709AF200623B78B233AF45514E6AB9E7CCBBC
Certificate serial:       22913539C5A2901ED0E94DB80CE98CEAD1A578B8
Authority key identifier: 20:D7:09:AF:20:06:23:B7:8B:23:3A:F4:55:14:E6:AB:9E:7C:CB:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/3136382e3230352e3235332e302f32342d3234203d3e20323634383932.roa
Signing time:             Wed 31 Jan 2024 20:10:07 +0000
ROA not before:           Wed 31 Jan 2024 20:05:07 +0000
ROA not after:            Wed 29 Jan 2025 20:10:07 +0000
asID:                     264892
IP address blocks:        168.205.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:91:35:39:c5:a2:90:1e:d0:e9:4d:b8:0c:e9:8c:ea:d1:a5:78:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20D709AF200623B78B233AF45514E6AB9E7CCBBC
        Validity
            Not Before: Jan 31 20:05:07 2024 GMT
            Not After : Jan 29 20:10:07 2025 GMT
        Subject: CN=C536BE2DC9AC51FD45064F99FF93CA4147482A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:27:94:70:b9:25:7b:07:ea:75:85:be:24:
                    12:b6:c3:a7:ca:71:aa:64:8b:40:a1:42:2b:79:3e:
                    5c:e3:9b:68:65:2e:0f:ac:e6:b5:98:ee:80:51:b6:
                    8f:f9:4e:8c:9c:b6:cf:1c:c3:e5:b4:f6:04:20:b0:
                    06:0a:53:fd:8c:92:ea:ed:ae:e5:1a:de:c0:cd:db:
                    41:b6:7f:46:29:6a:29:cd:89:70:a2:f9:80:57:29:
                    d9:7c:ef:5f:24:53:53:8a:ed:7e:33:65:53:ff:47:
                    5d:ff:08:e0:b5:2a:78:9b:d1:76:0e:fa:ef:f0:58:
                    22:b7:86:9e:4d:7f:bf:18:b6:9d:4f:75:bc:86:85:
                    6b:55:9e:e4:b6:12:c7:2d:c4:ab:99:31:00:2f:30:
                    64:56:6b:58:22:83:b6:97:8a:0a:51:6f:a8:17:f6:
                    3e:16:0d:aa:bc:2c:69:52:22:98:06:50:a0:63:d1:
                    23:16:66:a9:8e:ae:fe:9d:dd:29:45:1c:d2:0a:4d:
                    75:34:42:d3:c8:63:4f:b4:89:69:70:ff:5a:ef:54:
                    0f:78:3c:7a:f2:a3:65:50:a7:dc:71:c4:e4:fa:b8:
                    cb:90:62:a6:c3:c4:d4:29:9d:19:06:4d:fb:8f:7e:
                    28:e6:f4:17:48:45:e3:e5:d9:45:75:cd:97:e3:55:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:36:BE:2D:C9:AC:51:FD:45:06:4F:99:FF:93:CA:41:47:48:2A:1C
            X509v3 Authority Key Identifier:
                keyid:20:D7:09:AF:20:06:23:B7:8B:23:3A:F4:55:14:E6:AB:9E:7C:CB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/3136382e3230352e3235332e302f32342d3234203d3e20323634383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:eb:2b:b6:3b:f1:00:07:2a:d8:54:83:f7:1e:7b:dc:e2:92:
         4a:da:a8:93:30:45:b8:8b:a5:9e:1d:e7:48:3b:23:6f:6d:07:
         d0:65:c5:69:6a:e6:52:e1:6a:34:5b:b0:52:e3:94:2e:c8:58:
         b0:ed:6a:ca:a4:93:42:7e:b5:63:5c:51:08:73:09:29:70:9d:
         05:cf:95:e0:46:bc:4d:cd:b3:2c:8a:50:01:26:3b:a2:b0:20:
         e3:ae:c8:6d:ce:67:2a:19:1f:20:c1:9b:9b:16:2a:00:09:6a:
         2b:c2:a5:91:a8:67:54:c0:d9:99:3f:7e:53:8e:8e:92:9a:46:
         a1:ab:67:fa:ab:10:d9:13:7f:a2:6c:4d:1c:b6:9a:1d:12:00:
         87:c4:4b:3c:cd:d9:3f:2e:52:41:69:4f:1b:3b:90:62:c4:ac:
         b0:52:45:e9:b1:47:ea:ce:8a:ec:29:a4:5e:bd:6b:56:df:b0:
         45:ae:e3:42:f5:4f:55:0c:6a:1a:57:f4:80:71:a0:e9:2c:7a:
         0f:10:f6:20:95:c8:60:a1:35:ad:02:c9:32:4a:75:05:98:ac:
         05:b9:33:41:5a:89:fa:93:bc:51:6c:ed:15:37:f5:9b:54:24:
         19:a6:19:88:16:44:88:c1:45:ce:a9:e2:44:c3:87:bd:39:6d:
         8c:60:17:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org