Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/0/3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa
File:                     3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa (raw, json)
Hash identifier:          c5IUUIYdsk2wSRmsj1Mx99/Bswo+6WzvFW/fe+X7y7I=
Subject key identifier:   CD:79:46:C5:B8:DD:74:48:BA:5E:EC:C6:D9:CE:36:37:9E:98:C4:3D
Certificate issuer:       /CN=911AE36F95E79FB0B3D9219FA8F96BC9C869035A
Certificate serial:       158E1F5CEDBAA4599F3B58561023E3E2D85B6222
Authority key identifier: 91:1A:E3:6F:95:E7:9F:B0:B3:D9:21:9F:A8:F9:6B:C9:C8:69:03:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/911AE36F95E79FB0B3D9219FA8F96BC9C869035A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/0/3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa
Signing time:             Tue 02 Jan 2024 15:00:00 +0000
ROA not before:           Tue 02 Jan 2024 14:55:00 +0000
ROA not after:            Tue 31 Dec 2024 15:00:00 +0000
asID:                     265938
IP address blocks:        164.163.44.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8e:1f:5c:ed:ba:a4:59:9f:3b:58:56:10:23:e3:e2:d8:5b:62:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911AE36F95E79FB0B3D9219FA8F96BC9C869035A
        Validity
            Not Before: Jan  2 14:55:00 2024 GMT
            Not After : Dec 31 15:00:00 2024 GMT
        Subject: CN=CD7946C5B8DD7448BA5EECC6D9CE36379E98C43D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d1:5d:28:8e:32:21:e1:c4:14:40:12:4f:8c:
                    96:f0:c0:42:6a:67:a5:af:96:a7:2b:95:84:5a:5d:
                    de:b3:3b:1a:2a:0b:a9:20:1f:55:2d:fc:f1:5e:95:
                    80:6c:44:b0:7c:28:c8:4b:ce:51:4a:d8:6b:2c:b5:
                    43:5e:ae:b3:22:d1:b0:7c:ba:7f:a2:26:1f:09:dc:
                    4b:19:03:a3:d0:64:e2:a7:11:64:06:05:56:d5:1b:
                    ee:33:f5:4e:c9:7c:e7:14:d0:e6:af:b2:14:4b:26:
                    f7:41:c1:7c:5c:50:4a:cf:f3:99:0c:69:ac:84:84:
                    9a:9a:63:92:70:66:9f:34:79:92:86:a4:4c:fc:54:
                    7d:01:87:34:22:7d:a7:94:70:b3:aa:f4:39:bc:44:
                    30:7c:25:52:af:5d:9a:9a:d7:13:74:7a:12:ab:4a:
                    be:86:4c:df:e7:80:50:b0:82:f7:e8:b8:bb:b2:bf:
                    cc:42:1d:b7:5c:07:7a:44:81:73:48:66:38:98:0a:
                    ab:16:f7:71:07:93:2c:ae:c2:16:7e:cb:99:c9:4c:
                    b6:61:1d:09:43:04:82:f2:62:55:01:8f:1e:fc:ef:
                    9b:10:c0:b1:69:5d:10:cf:a2:71:1a:83:6e:f1:35:
                    de:cd:3d:f9:68:60:13:d2:ff:4b:c3:5a:70:9c:69:
                    85:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:79:46:C5:B8:DD:74:48:BA:5E:EC:C6:D9:CE:36:37:9E:98:C4:3D
            X509v3 Authority Key Identifier:
                keyid:91:1A:E3:6F:95:E7:9F:B0:B3:D9:21:9F:A8:F9:6B:C9:C8:69:03:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/0/911AE36F95E79FB0B3D9219FA8F96BC9C869035A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/911AE36F95E79FB0B3D9219FA8F96BC9C869035A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/0/3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:7f:4d:1a:1b:89:46:7e:70:22:77:f6:89:39:d2:02:f2:1d:
         c8:ce:85:76:d4:5e:e2:e1:9d:f8:0f:63:94:8a:c4:8d:c8:71:
         75:2f:ae:37:05:8b:9d:a7:9f:40:51:64:cc:6b:a7:21:22:36:
         7a:7d:c7:8a:df:f1:5f:4e:82:33:38:50:14:d9:62:95:f1:05:
         78:97:40:21:a0:1b:5e:f4:5a:83:2a:2b:55:29:58:eb:46:28:
         48:64:8d:c9:d0:80:14:71:ba:4d:d9:1a:d2:92:f1:08:3e:b0:
         9e:ef:bb:db:1d:7d:3f:41:00:28:17:37:6d:1f:9a:fb:e7:3d:
         24:63:5a:42:53:0a:f6:21:31:c2:91:b3:30:e8:46:a4:ff:54:
         89:95:50:7b:79:9a:4a:81:43:e1:8f:21:f3:1a:9b:69:75:7d:
         ce:20:03:33:d2:f2:f3:dd:69:28:65:5d:49:0f:ac:7a:e7:4f:
         fe:0b:4f:5e:23:3e:8e:8a:c2:de:3b:ef:bb:3b:16:cd:e6:ce:
         83:19:ab:cd:2f:32:84:73:e5:01:c2:0a:12:82:ab:b4:04:35:
         6d:c6:fd:b8:e1:80:8a:3c:f1:1d:56:55:a3:8c:d4:4a:e4:6d:
         02:e9:80:a5:1e:b8:08:f5:a8:51:9c:7f:69:ca:c1:71:2c:a5:
         57:31:73:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org