Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/3136382e3139362e3137362e302f32322d3234203d3e20323635343636.roa
File:                     3136382e3139362e3137362e302f32322d3234203d3e20323635343636.roa (raw, json)
Hash identifier:          Qots0A7CxdWmALdpuegBWGmY5BZ0jhnPXRAURGS4VMw=
Subject key identifier:   D1:4B:E7:31:69:EE:F8:18:01:1C:BC:64:1C:9A:D6:D3:91:3B:41:2D
Certificate issuer:       /CN=21AD11813E5933796A90E41AAF2BB30C2579D0DA
Certificate serial:       707F0CD9A8B0C11171B277DFF5781AA440B082F0
Authority key identifier: 21:AD:11:81:3E:59:33:79:6A:90:E4:1A:AF:2B:B3:0C:25:79:D0:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/3136382e3139362e3137362e302f32322d3234203d3e20323635343636.roa
Signing time:             Thu 24 Mar 2022 01:44:00 +0000
ROA not before:           Thu 24 Mar 2022 01:39:00 +0000
ROA not after:            Thu 23 Mar 2023 01:44:00 +0000
asID:                     265466
IP address blocks:        168.196.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7f:0c:d9:a8:b0:c1:11:71:b2:77:df:f5:78:1a:a4:40:b0:82:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AD11813E5933796A90E41AAF2BB30C2579D0DA
        Validity
            Not Before: Mar 24 01:39:00 2022 GMT
            Not After : Mar 23 01:44:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:17:d9:23:f6:d7:32:8c:97:c5:4a:a0:10:c3:
                    19:5f:63:c4:84:b6:5d:24:08:e5:ac:f7:84:fe:80:
                    17:a4:6b:c3:40:b2:d8:94:3a:99:3b:e5:90:fa:6a:
                    13:6f:1b:29:2c:70:40:2a:fd:4b:85:2a:3b:9c:12:
                    35:50:87:b9:cc:fa:53:07:40:55:c5:ad:67:ca:da:
                    ed:1d:e7:e1:d8:4b:e8:d3:4c:53:66:4d:23:f4:33:
                    84:ad:61:2b:19:e2:e9:d4:77:8a:33:ce:d9:ef:19:
                    a4:ca:6c:16:ab:aa:8e:10:19:0d:8b:c5:e4:00:30:
                    99:a7:7d:91:31:a3:94:2d:f1:ff:37:93:80:9c:62:
                    70:3f:a9:df:dd:3c:a6:d3:f6:46:5c:c6:74:f9:39:
                    43:15:72:54:18:58:79:29:e4:37:c3:11:29:c6:df:
                    20:80:2f:cd:01:bb:31:c6:01:72:bb:53:b7:f9:7e:
                    6b:f8:0d:12:5c:48:c9:29:a3:70:91:8d:4b:20:2c:
                    99:92:54:d7:77:bc:cf:ab:d5:23:0e:40:47:2f:5b:
                    76:b2:d7:3d:04:70:c9:75:e2:71:7c:55:53:8b:d2:
                    8a:fd:46:da:d2:e3:df:95:6a:57:05:d9:ff:07:c0:
                    44:d2:96:4c:d4:2f:ef:b4:ef:73:e5:bb:f7:bd:9f:
                    94:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4B:E7:31:69:EE:F8:18:01:1C:BC:64:1C:9A:D6:D3:91:3B:41:2D
            X509v3 Authority Key Identifier:
                keyid:21:AD:11:81:3E:59:33:79:6A:90:E4:1A:AF:2B:B3:0C:25:79:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/3136382e3139362e3137362e302f32322d3234203d3e20323635343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:ef:eb:ee:b8:c1:4c:f9:6e:88:f7:8b:da:ae:a0:70:1a:66:
         3b:c7:51:a9:e8:b8:31:2d:e7:8c:71:5e:6a:cf:e7:db:da:6b:
         32:c3:89:e6:94:a5:34:df:d5:87:b4:09:7d:69:ed:39:25:9a:
         a1:1a:08:11:56:e6:da:21:d1:7b:d9:3c:c6:61:9f:72:a6:6b:
         24:ee:2b:b7:b5:36:33:f9:56:ba:38:18:8c:c8:dc:6c:7b:8a:
         9d:21:e0:85:81:c9:31:1c:8b:28:74:eb:43:84:f9:de:cf:a7:
         c5:78:06:5a:a5:7c:5f:b3:ff:27:10:32:56:d8:74:3b:c8:6f:
         18:56:5f:57:53:ee:52:79:84:63:97:ec:2c:02:5b:f2:05:52:
         1f:30:de:45:63:73:15:e7:25:aa:d0:df:c5:9b:3c:9e:86:e5:
         92:0e:e1:92:c7:18:69:08:1b:48:da:ca:8c:3a:5e:12:c1:4b:
         77:76:19:7e:c0:83:92:36:58:6f:de:4c:e2:dd:79:54:1c:75:
         71:b0:7a:32:8b:ad:51:a7:05:9f:3c:e7:d7:c6:42:0f:34:ae:
         08:ca:89:f5:de:dc:21:b7:fd:5e:56:62:a6:ff:5f:e4:a8:b2:
         b9:09:c8:36:f4:cf:5a:7c:ad:d3:1b:e3:0f:7a:93:dc:5a:e9:
         4b:b5:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org