Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231342e302f32342d3234203d3e20323635343338.roa
File:                     3136382e3139352e3231342e302f32342d3234203d3e20323635343338.roa (raw, json)
Hash identifier:          pmcpIP5FmrMaQKVZEZ66KoHI5xD4JcOm8/egGZH3bdM=
Subject key identifier:   38:BC:E4:D0:26:CC:D1:44:F2:4A:87:96:52:EA:CF:80:25:26:3E:66
Certificate issuer:       /CN=F195F9C596ADB608642A133DA471E40CFD879710
Certificate serial:       64BFE607EF921D556F6605E28CE8F1490C1F60FE
Authority key identifier: F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231342e302f32342d3234203d3e20323635343338.roa
Signing time:             Tue 21 Nov 2023 15:56:06 +0000
ROA not before:           Tue 21 Nov 2023 15:51:06 +0000
ROA not after:            Tue 19 Nov 2024 15:56:06 +0000
asID:                     265438
IP address blocks:        168.195.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bf:e6:07:ef:92:1d:55:6f:66:05:e2:8c:e8:f1:49:0c:1f:60:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F195F9C596ADB608642A133DA471E40CFD879710
        Validity
            Not Before: Nov 21 15:51:06 2023 GMT
            Not After : Nov 19 15:56:06 2024 GMT
        Subject: CN=38BCE4D026CCD144F24A879652EACF8025263E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:d7:f9:d5:6d:fa:4b:ab:11:e3:7b:7b:ee:
                    8d:b0:ea:71:e9:69:df:a6:9c:4b:ac:bd:e3:82:01:
                    54:87:f3:51:d5:ce:b6:7d:98:05:ef:8c:16:ce:b9:
                    b6:ae:7b:9f:c5:75:d3:3b:a3:89:f9:c7:2c:11:c7:
                    25:86:66:c1:14:da:85:00:97:84:2e:95:5a:69:0c:
                    18:34:86:04:32:1d:59:ab:3a:d0:ed:55:f3:e1:4e:
                    16:98:e3:73:3e:25:22:49:b4:d0:f4:bf:da:52:d9:
                    fe:18:1e:87:59:49:20:60:9a:f0:58:dd:76:81:09:
                    3f:2b:80:8c:ff:e7:35:53:ae:be:38:18:72:7f:b8:
                    9a:22:2d:57:86:42:a2:14:33:98:db:73:51:d8:87:
                    a5:96:ef:d4:33:47:6b:52:40:a3:64:ee:04:c4:98:
                    f4:e3:02:75:f3:bf:eb:2c:f5:4d:cf:27:51:66:2e:
                    a8:53:52:26:de:91:53:05:da:b6:67:e3:c7:db:14:
                    1f:6b:d7:8c:3b:b3:36:5e:60:70:18:09:2b:ab:17:
                    a7:14:00:a7:c4:6d:38:f0:19:b4:f9:e1:fd:f3:fb:
                    ea:b0:ad:56:9e:0e:f6:33:55:b6:b0:87:b5:38:ee:
                    75:ed:56:96:3d:21:68:57:09:c5:8c:02:27:02:ac:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BC:E4:D0:26:CC:D1:44:F2:4A:87:96:52:EA:CF:80:25:26:3E:66
            X509v3 Authority Key Identifier:
                keyid:F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/F195F9C596ADB608642A133DA471E40CFD879710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231342e302f32342d3234203d3e20323635343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:57:40:61:82:9c:23:b9:a7:80:80:d9:7d:6e:49:0f:13:72:
         fc:0b:1a:4e:d9:dd:07:a9:08:4f:7e:fd:7f:5d:de:9c:9b:57:
         8c:95:a9:e9:75:6b:56:78:56:4c:59:1c:7b:38:d4:63:37:8f:
         fd:63:60:78:26:2c:d4:c4:cb:f6:46:b4:28:13:28:a7:71:a7:
         2f:b8:7f:bf:3b:5a:ec:e1:28:0d:ff:75:c2:79:9d:a3:86:cb:
         5d:64:eb:c5:58:15:1a:39:6c:c4:84:55:ca:9c:16:8e:69:1b:
         4f:9a:d2:52:d4:6f:92:67:9f:51:b9:a9:93:33:f5:e7:37:92:
         ea:7b:da:50:75:67:90:11:d7:c5:cc:3a:cf:a1:5a:2e:d9:3e:
         f3:31:f8:63:1d:aa:ae:2e:f2:df:17:25:55:1b:46:e8:80:49:
         d3:77:a0:30:a6:49:a9:6c:33:37:e2:2f:bc:d3:89:e7:71:21:
         20:05:4c:c1:f7:0e:b1:84:f5:b8:f4:8a:23:e3:42:09:a5:8a:
         78:46:04:54:5f:c1:00:2a:5b:45:23:c4:8e:2a:cd:aa:9a:1c:
         9d:23:3a:e6:ce:36:87:78:23:3d:41:3b:51:de:b7:44:28:17:
         18:67:cd:0b:3d:97:fa:ac:77:1c:7e:5a:8c:0d:18:8b:bf:72:
         42:e2:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org