Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/1/3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa
File:                     3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa (raw, json)
Hash identifier:          T4pLpfsDhh+p4u0TaC0wbN2tRKRTBiyfVuRq/8D+i0I=
Subject key identifier:   03:DE:66:DB:F4:5B:36:58:27:22:87:3D:0E:16:AD:5E:89:26:C3:D4
Certificate issuer:       /CN=D9DA58E367C167988628580236AB41A8EC547986
Certificate serial:       4ABAB000505352C2CF9B21149E43877D830E9A25
Authority key identifier: D9:DA:58:E3:67:C1:67:98:86:28:58:02:36:AB:41:A8:EC:54:79:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9DA58E367C167988628580236AB41A8EC547986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/1/3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa
Signing time:             Wed 06 Sep 2023 15:09:31 +0000
ROA not before:           Wed 06 Sep 2023 15:04:31 +0000
ROA not after:            Wed 04 Sep 2024 15:09:31 +0000
asID:                     265342
IP address blocks:        168.181.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ba:b0:00:50:53:52:c2:cf:9b:21:14:9e:43:87:7d:83:0e:9a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9DA58E367C167988628580236AB41A8EC547986
        Validity
            Not Before: Sep  6 15:04:31 2023 GMT
            Not After : Sep  4 15:09:31 2024 GMT
        Subject: CN=03DE66DBF45B36582722873D0E16AD5E8926C3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:93:42:f4:0a:26:40:66:7d:63:88:3e:c3:
                    e0:85:b2:5a:fc:82:80:01:5d:e4:da:fd:94:3e:79:
                    56:2e:d7:9b:f8:97:96:54:13:84:4b:2e:dd:95:6e:
                    6d:57:44:61:56:6b:d3:2b:39:6a:4d:3c:f3:0e:fc:
                    7a:d7:54:5b:f0:dc:4e:71:56:95:95:18:66:45:2a:
                    11:06:9a:0b:b8:ab:3d:70:ce:66:f8:91:28:4e:d4:
                    05:e8:60:e4:58:12:01:55:c8:7d:2d:6c:2d:1e:3b:
                    d0:8f:9e:9f:4f:64:76:5e:e2:73:bd:48:07:d0:a7:
                    95:3b:8a:87:55:34:d6:60:ad:82:18:86:bc:71:fa:
                    2f:79:1e:95:90:62:ba:bd:38:43:6d:eb:db:c2:9a:
                    c1:cb:22:59:03:4c:f8:92:dc:dc:e6:d1:b6:67:18:
                    c6:5c:b1:16:af:a8:74:95:2e:60:59:e6:eb:37:bb:
                    cb:8c:73:5a:56:1e:b7:d8:2f:24:99:fe:57:55:ba:
                    30:60:9b:70:fc:dd:59:68:e1:03:48:38:fd:a4:4c:
                    f8:d0:6a:04:88:8e:69:06:e3:fc:b5:ad:b1:0e:69:
                    47:86:07:8c:64:11:03:aa:fe:d0:1f:35:58:c7:ee:
                    07:87:be:57:e5:4e:1e:10:de:cc:48:83:0c:7e:ad:
                    1a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DE:66:DB:F4:5B:36:58:27:22:87:3D:0E:16:AD:5E:89:26:C3:D4
            X509v3 Authority Key Identifier:
                keyid:D9:DA:58:E3:67:C1:67:98:86:28:58:02:36:AB:41:A8:EC:54:79:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/1/D9DA58E367C167988628580236AB41A8EC547986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9DA58E367C167988628580236AB41A8EC547986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/1/3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:6e:e9:39:9e:8d:87:ec:34:99:8a:96:ff:21:77:e3:64:e2:
         f7:35:44:22:4f:e7:e5:df:8f:63:bc:16:aa:fe:9d:61:5e:01:
         16:49:62:2a:75:94:28:be:6a:ca:ec:65:f7:da:39:83:54:02:
         d1:2b:83:af:49:a5:de:8a:dd:e5:eb:60:4f:32:0b:79:11:5d:
         a1:53:99:9a:b2:ba:9c:2d:ab:07:e3:f0:39:7a:0d:68:ae:49:
         6b:49:27:16:9a:fa:87:de:9f:ca:1c:25:dd:2e:4c:27:d7:3d:
         26:1b:6f:13:c7:c5:8b:df:43:9f:1e:29:92:e8:c4:79:93:f6:
         06:d0:67:6c:ef:20:13:d4:8a:c4:52:0b:f9:ba:1f:63:29:60:
         ca:24:7d:b5:9a:a4:86:c1:3d:d8:d0:2b:ab:04:d3:ce:46:08:
         ed:ff:c8:d7:5a:09:dc:95:dd:ec:18:fc:a7:f1:bb:28:7c:39:
         48:fa:52:d8:9e:f3:3b:41:3f:5d:67:ce:b7:d1:43:67:2d:f3:
         4b:19:3c:ce:b7:b9:c4:49:d6:f1:85:82:fe:8a:47:e2:e9:9d:
         26:34:b8:db:f7:fd:1d:da:ae:49:0c:83:a7:b2:8d:c5:0a:55:
         4a:17:af:5b:ff:f0:cc:8a:72:dc:08:9f:f9:df:bb:34:63:eb:
         3c:43:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org