Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/3136382e3139342e3235312e302f32342d3234203d3e20323635343134.roa
File:                     3136382e3139342e3235312e302f32342d3234203d3e20323635343134.roa (raw, json)
Hash identifier:          nOplYCvjt1r8/T4ZXGdG4f660f8aRGseldME2jfhnJk=
Subject key identifier:   AB:AB:C7:05:EC:4E:DD:72:4E:8C:12:23:68:06:26:CA:19:21:E6:41
Certificate issuer:       /CN=C559E73AC49546C7651D4CF85CAD64308E9041D4
Certificate serial:       3D3D38A619A0C9172A389677ADEDBE6FA51D565E
Authority key identifier: C5:59:E7:3A:C4:95:46:C7:65:1D:4C:F8:5C:AD:64:30:8E:90:41:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C559E73AC49546C7651D4CF85CAD64308E9041D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/3136382e3139342e3235312e302f32342d3234203d3e20323635343134.roa
Signing time:             Fri 05 May 2023 18:05:22 +0000
ROA not before:           Fri 05 May 2023 18:00:22 +0000
ROA not after:            Fri 03 May 2024 18:05:22 +0000
asID:                     265414
IP address blocks:        168.194.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3d:38:a6:19:a0:c9:17:2a:38:96:77:ad:ed:be:6f:a5:1d:56:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C559E73AC49546C7651D4CF85CAD64308E9041D4
        Validity
            Not Before: May  5 18:00:22 2023 GMT
            Not After : May  3 18:05:22 2024 GMT
        Subject: CN=ABABC705EC4EDD724E8C1223680626CA1921E641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:f3:64:53:40:a7:18:23:97:be:54:0d:1f:
                    f6:47:19:4f:47:b9:27:76:95:f0:e3:7c:3d:12:6f:
                    10:39:c0:ae:2b:70:7b:19:23:c6:8c:15:59:03:a4:
                    b3:1e:d3:43:b0:76:22:56:e2:a7:93:51:61:b2:4a:
                    d1:fd:23:6c:ad:a8:e3:9a:57:4e:e0:88:e9:d7:8b:
                    ec:5d:1d:65:7d:ac:f7:06:d5:10:d6:8e:c7:b1:e8:
                    43:6d:a1:55:9b:45:85:74:5b:2f:fb:2e:83:01:a8:
                    25:9f:c0:03:56:68:79:d7:06:da:ef:74:7f:b3:47:
                    39:ac:81:a7:f5:6e:2b:46:08:f2:e7:64:ae:3f:c4:
                    60:8c:7e:1e:dc:ca:ff:22:a9:e9:ab:ee:5a:f3:29:
                    f5:e0:9c:87:e1:d9:3b:c2:fb:4f:6f:f5:f2:8b:92:
                    9d:60:17:d4:57:19:17:f2:fa:00:23:f5:44:d2:ce:
                    41:b7:c8:27:d1:3a:ad:40:fa:34:1f:b0:d4:e8:11:
                    ba:cd:17:8c:ce:85:13:93:bb:0f:50:e0:ef:9d:b3:
                    c1:ce:58:43:66:4d:7a:98:a5:12:cd:79:bc:59:84:
                    21:f6:9f:8b:a9:71:83:49:eb:52:e7:f5:15:80:dc:
                    8b:f4:2e:fb:5e:19:46:16:64:ad:fa:2a:d0:a1:2f:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AB:C7:05:EC:4E:DD:72:4E:8C:12:23:68:06:26:CA:19:21:E6:41
            X509v3 Authority Key Identifier:
                keyid:C5:59:E7:3A:C4:95:46:C7:65:1D:4C:F8:5C:AD:64:30:8E:90:41:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/C559E73AC49546C7651D4CF85CAD64308E9041D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C559E73AC49546C7651D4CF85CAD64308E9041D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/3136382e3139342e3235312e302f32342d3234203d3e20323635343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:73:55:fc:d2:2a:aa:4a:c7:5d:b0:f7:a4:2e:e3:e6:77:fc:
         77:bf:fe:86:01:95:7a:d3:a1:47:76:94:cc:ca:42:23:ad:5d:
         81:39:48:1b:96:4a:20:fa:07:d7:c4:b7:be:84:9d:4d:85:80:
         23:cd:2a:0a:2c:c6:56:ab:6d:e3:93:ec:30:1b:ca:e7:da:63:
         3d:1a:c7:8a:f3:7f:79:a2:49:de:1f:19:04:92:a3:b6:00:f8:
         37:bb:1b:d7:49:53:75:09:fc:74:18:71:1c:90:e9:0f:5b:2b:
         6e:a6:25:94:06:53:80:97:2b:3c:d3:7b:a9:65:18:a8:ab:b2:
         e3:40:4a:6e:85:b7:6e:6f:56:d0:76:c2:8a:43:c1:19:0d:37:
         3f:d3:24:6e:0e:4b:c3:59:3c:20:45:07:8a:8c:32:39:db:2d:
         9a:05:43:21:70:25:17:bc:d9:89:4d:b9:b0:25:cb:c9:8e:6f:
         d8:5c:54:1a:14:65:38:af:4a:25:c3:e7:2b:ab:0a:95:5c:ba:
         6d:54:68:12:95:18:2c:ee:6e:cf:09:d5:d4:91:a1:e8:a4:c1:
         d2:60:31:ed:eb:d1:e3:d9:03:7d:60:5c:e2:71:75:7a:65:2b:
         df:07:13:10:4c:71:91:1c:68:c0:5c:52:39:f4:28:ac:ec:b0:
         cb:45:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org