Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231322e302f32332d3233203d3e20323635343338.roa
File:                     3136382e3139352e3231322e302f32332d3233203d3e20323635343338.roa (raw, json)
Hash identifier:          ix6jwR6SVofftU7BTzAGmKgtCTLa1OVBwezkDvuztLc=
Subject key identifier:   55:99:71:A9:EE:9D:F1:5C:D3:8C:A4:31:0F:6C:95:1F:B3:5B:37:4D
Certificate issuer:       /CN=F195F9C596ADB608642A133DA471E40CFD879710
Certificate serial:       1A74E65AEA7B387E4AC4FE07AB15A461FE576FB4
Authority key identifier: F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231322e302f32332d3233203d3e20323635343338.roa
Signing time:             Tue 21 Nov 2023 15:56:05 +0000
ROA not before:           Tue 21 Nov 2023 15:51:05 +0000
ROA not after:            Tue 19 Nov 2024 15:56:05 +0000
asID:                     265438
IP address blocks:        168.195.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:74:e6:5a:ea:7b:38:7e:4a:c4:fe:07:ab:15:a4:61:fe:57:6f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F195F9C596ADB608642A133DA471E40CFD879710
        Validity
            Not Before: Nov 21 15:51:05 2023 GMT
            Not After : Nov 19 15:56:05 2024 GMT
        Subject: CN=559971A9EE9DF15CD38CA4310F6C951FB35B374D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:0a:14:2b:a4:42:8a:e1:78:e8:4b:be:14:
                    52:7d:c0:d5:a2:b8:e0:d3:83:db:c3:d3:48:08:4f:
                    32:03:41:84:3b:86:99:36:ac:58:e3:9b:2e:24:d4:
                    25:58:67:a7:80:ac:36:92:fa:92:2d:63:ef:c8:47:
                    e7:f1:06:e7:d6:10:7e:a0:e2:d6:08:96:6b:c1:c8:
                    60:70:85:05:50:f2:99:c4:f1:0b:49:fe:9f:4e:ba:
                    61:21:4f:01:af:d4:62:b5:2b:41:5a:b6:71:32:97:
                    38:25:74:72:39:29:52:ea:d1:90:86:18:1c:6a:68:
                    c3:74:81:09:45:8c:62:ea:11:7a:20:c5:f9:3d:8c:
                    e1:f9:f0:00:1f:cc:a3:de:e3:73:87:59:dc:4d:51:
                    c2:03:67:96:f6:50:50:c9:53:15:2b:58:f0:c2:41:
                    5e:20:50:3d:61:75:c0:34:2b:db:75:2b:fc:b7:66:
                    d8:78:d5:8a:ed:55:2c:5e:c1:75:51:d8:2a:ac:23:
                    5a:7c:1e:5f:62:66:03:d4:53:91:20:e2:51:47:54:
                    e5:37:62:db:85:12:a2:c5:80:00:8a:0a:6d:ab:b9:
                    d2:22:75:c4:28:a9:2e:f0:c9:9b:d5:9c:43:2a:c4:
                    63:cd:1f:8c:b9:c3:69:75:87:00:ae:f3:27:4c:17:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:99:71:A9:EE:9D:F1:5C:D3:8C:A4:31:0F:6C:95:1F:B3:5B:37:4D
            X509v3 Authority Key Identifier:
                keyid:F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/F195F9C596ADB608642A133DA471E40CFD879710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231322e302f32332d3233203d3e20323635343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:6a:95:28:45:64:29:20:ce:16:7a:9e:a7:fa:c7:06:36:cb:
         22:05:70:ce:05:a1:c5:58:87:5f:aa:85:7c:87:7f:78:3e:90:
         54:85:52:2e:9a:73:e2:4f:89:aa:fa:09:d0:ce:80:75:b7:4a:
         13:b5:cb:8e:1f:d2:1e:f2:26:7d:61:a0:a1:f8:b1:30:7f:17:
         dc:47:4d:58:a2:21:b1:40:f8:df:6f:35:26:35:bb:51:58:d6:
         a3:61:cd:4e:54:c8:43:31:d4:35:c4:3c:ae:40:bc:73:20:d8:
         db:81:5a:24:d7:fd:94:07:ca:1a:24:0c:28:b2:7b:58:db:6f:
         20:b9:97:5f:b5:12:17:4a:d7:c0:0a:80:a6:0c:c2:b6:2b:c5:
         00:10:37:2e:f2:e1:8b:9d:f4:c8:b8:48:0f:9a:17:83:dd:33:
         80:2c:99:46:8d:04:10:13:1d:ef:51:21:24:5b:87:cf:8e:85:
         f7:bf:fe:e9:dd:4a:c9:33:69:53:48:76:eb:7f:08:31:61:a3:
         4a:7c:e9:75:95:4d:69:a3:9c:4d:4f:9d:dc:6f:02:97:6e:27:
         94:31:40:2c:48:66:bb:b2:47:55:61:be:df:f1:4c:93:ff:d5:
         7a:ca:2d:b0:38:bd:38:36:18:92:ab:a1:ce:ac:64:72:7b:3a:
         b3:b3:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org