Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa
File:                     3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa (raw, json)
Hash identifier:          iPcebJDG7clsAupCdb11CpBlqEddUDlkS6ZYX6ktH68=
Subject key identifier:   4B:82:80:4E:42:E0:5A:DB:6B:BB:29:B4:0F:6E:32:64:A2:AA:43:D7
Certificate issuer:       /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial:       073E6E88A5E6C69D8A3333B15F9F685DC2771CF8
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa
Signing time:             Fri 23 Feb 2024 23:41:00 +0000
ROA not before:           Fri 23 Feb 2024 23:36:00 +0000
ROA not after:            Fri 21 Feb 2025 23:41:00 +0000
asID:                     265485
IP address blocks:        168.197.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3e:6e:88:a5:e6:c6:9d:8a:33:33:b1:5f:9f:68:5d:c2:77:1c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
        Validity
            Not Before: Feb 23 23:36:00 2024 GMT
            Not After : Feb 21 23:41:00 2025 GMT
        Subject: CN=4B82804E42E05ADB6BBB29B40F6E3264A2AA43D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:ee:ac:3d:d7:58:66:93:68:7d:0e:af:1f:
                    a5:10:32:fa:66:2c:db:a0:66:8a:0a:ea:58:56:5d:
                    94:a3:0a:19:9f:08:1e:d2:f5:ea:d0:8d:84:d4:40:
                    ba:46:ba:3a:40:6d:8e:90:0a:3e:79:65:87:8b:77:
                    54:59:98:a6:29:f0:fe:89:9d:5e:ee:5c:a6:a5:ba:
                    a5:e6:c6:04:48:39:12:24:8e:d3:4b:5a:15:62:cd:
                    32:74:d4:d7:65:ed:39:c2:60:b5:14:17:6b:17:e1:
                    48:0f:8b:f7:0f:a1:67:53:6f:69:70:1d:97:7c:95:
                    16:b4:67:90:8d:5d:ee:c4:be:ac:86:96:db:b6:50:
                    ee:6c:7a:3f:55:13:e2:51:3a:75:cb:41:2b:ce:a7:
                    ef:1b:47:8a:37:6b:b9:ea:84:bb:2e:55:26:2c:e4:
                    fd:b5:f9:07:19:3d:eb:ea:6d:e7:5d:3f:b8:96:ce:
                    5b:ba:73:4f:56:ce:58:2a:0d:5b:02:66:17:ba:24:
                    67:e0:43:4b:ed:93:82:ce:52:2d:bd:89:7c:9d:40:
                    77:06:21:ea:24:9c:d1:6d:3f:7e:b2:d3:45:9b:c7:
                    78:ff:c2:55:39:b2:2b:6a:d3:63:cc:d4:63:89:ee:
                    96:f9:4d:87:4b:5d:f4:21:87:64:c6:f6:30:2c:8e:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:82:80:4E:42:E0:5A:DB:6B:BB:29:B4:0F:6E:32:64:A2:AA:43:D7
            X509v3 Authority Key Identifier:
                keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:78:34:8a:b4:80:08:a6:a2:9e:47:00:e4:fb:8b:57:f1:4f:
         0c:63:8e:97:ff:81:50:77:6b:56:da:9e:ea:49:8e:8b:97:63:
         bd:45:de:cb:88:96:ab:8d:8a:04:c2:6b:24:95:16:46:69:46:
         f7:0e:49:6e:35:5f:ad:ce:38:3c:46:cc:e9:34:81:6d:ff:25:
         78:ad:36:5a:54:a1:90:c3:e5:44:b5:1c:81:be:80:3b:33:bd:
         7c:ba:a1:6e:44:57:74:3a:b3:25:8d:58:85:00:14:a1:52:26:
         3b:67:3c:ba:27:35:ed:b9:67:4d:fc:b6:92:4b:44:0d:25:05:
         51:ca:71:7b:bc:c7:65:c5:82:22:c7:b4:71:d8:25:f4:0e:4f:
         d4:0a:15:40:3b:1e:cc:38:5c:11:04:49:2b:f0:99:6b:2f:92:
         bb:39:03:08:f1:ef:65:9b:27:eb:5a:6f:9c:d2:eb:d3:06:2f:
         ef:64:d3:a0:27:b3:89:a4:28:ee:4a:c8:70:1f:74:2d:c8:c3:
         a1:7c:cb:2e:53:28:97:e4:e1:19:6e:44:f5:e9:66:ab:ca:b8:
         c7:71:62:13:b4:6b:41:95:b6:b8:32:a9:0d:48:e8:af:ac:3d:
         95:64:5d:4e:7e:e3:0e:2c:43:a2:58:31:69:a6:ae:c4:e1:93:
         24:fc:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org