Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/1/3136342e3136332e3233332e302f32342d3234203d3e20323635393833.roa
File:                     3136342e3136332e3233332e302f32342d3234203d3e20323635393833.roa (raw, json)
Hash identifier:          uurH6udUFVnEEUoMYaBB0JMbjpBWvLRholY7jhbg+u4=
Subject key identifier:   86:A1:11:B5:07:85:B7:F8:CA:A4:EC:76:9E:F6:97:89:FE:C1:0E:46
Certificate issuer:       /CN=738CBA481120F0E8AD17BA80BE09F7F252570D31
Certificate serial:       4BF238AF154344C0A126AB3ED2751C0C14222E89
Authority key identifier: 73:8C:BA:48:11:20:F0:E8:AD:17:BA:80:BE:09:F7:F2:52:57:0D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/738CBA481120F0E8AD17BA80BE09F7F252570D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/1/3136342e3136332e3233332e302f32342d3234203d3e20323635393833.roa
Signing time:             Wed 10 Apr 2024 20:16:17 +0000
ROA not before:           Wed 10 Apr 2024 20:11:17 +0000
ROA not after:            Wed 09 Apr 2025 20:16:17 +0000
asID:                     265983
IP address blocks:        164.163.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f2:38:af:15:43:44:c0:a1:26:ab:3e:d2:75:1c:0c:14:22:2e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738CBA481120F0E8AD17BA80BE09F7F252570D31
        Validity
            Not Before: Apr 10 20:11:17 2024 GMT
            Not After : Apr  9 20:16:17 2025 GMT
        Subject: CN=86A111B50785B7F8CAA4EC769EF69789FEC10E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:8c:14:25:e7:e2:81:9c:60:b8:44:6a:59:
                    80:fb:e4:b4:3d:f3:c9:4c:2d:95:e8:79:ca:79:43:
                    11:7c:d1:80:59:47:bd:a1:b3:fb:f5:2e:ed:f7:2c:
                    77:d8:48:dd:29:c2:1e:33:5a:38:5e:23:7e:57:98:
                    05:b5:77:b2:ce:6a:69:84:06:69:26:99:2f:9b:7d:
                    9f:95:c1:0f:b1:19:24:17:62:0f:40:a8:3b:5d:0a:
                    3d:0e:bc:5d:8a:88:d1:89:bf:43:42:dd:50:61:8e:
                    d5:0c:13:d2:bf:b3:a7:22:32:5f:5c:e1:ed:cc:5d:
                    35:6d:7d:66:9f:68:c9:1b:c6:cb:aa:2f:03:72:8d:
                    08:db:fc:14:1d:b0:fd:e5:1e:69:12:92:35:0e:cf:
                    e5:d6:5d:70:4c:a6:73:32:18:11:aa:79:9d:e9:11:
                    0c:ac:d7:0c:d4:c0:23:ce:57:98:29:5c:9a:72:78:
                    bd:0c:a6:81:f8:21:99:e4:19:38:95:ce:05:68:cf:
                    81:94:7d:a0:31:be:8d:15:db:51:d5:87:9a:4a:ea:
                    ef:ce:35:ae:34:6d:3e:02:69:95:ac:e9:8e:00:32:
                    14:b2:38:ec:4e:9c:fd:78:c2:6c:e9:78:42:a3:44:
                    34:e8:62:02:d1:85:53:f5:16:09:ab:fe:09:77:b2:
                    7c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A1:11:B5:07:85:B7:F8:CA:A4:EC:76:9E:F6:97:89:FE:C1:0E:46
            X509v3 Authority Key Identifier:
                keyid:73:8C:BA:48:11:20:F0:E8:AD:17:BA:80:BE:09:F7:F2:52:57:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/1/738CBA481120F0E8AD17BA80BE09F7F252570D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/738CBA481120F0E8AD17BA80BE09F7F252570D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/1/3136342e3136332e3233332e302f32342d3234203d3e20323635393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:fb:9a:40:f1:6b:c1:23:2c:79:c7:d0:ac:00:bb:dd:e6:8a:
         58:7c:0b:c5:ae:d2:85:32:9f:23:d9:da:c1:6b:b7:14:c2:fa:
         e1:ce:ff:6b:bb:66:72:8e:90:cc:52:80:84:9e:af:e2:c6:f4:
         ea:1b:bb:c0:d1:aa:b1:e9:88:e7:1d:1d:59:65:6f:54:e0:1a:
         12:78:e9:eb:1d:9e:73:d3:2a:d5:5d:44:39:ba:dc:f6:2c:4e:
         7b:9d:10:e3:a5:cf:71:72:06:a1:c4:b4:c7:a4:1a:f2:e1:c2:
         42:29:c4:56:f6:75:7b:0a:57:e5:39:ba:81:e1:4a:bd:30:7a:
         17:ca:25:8e:0f:26:3c:18:dd:10:f8:e8:ec:0a:72:0d:2f:49:
         28:47:1c:f4:69:ee:80:dd:ce:ef:09:40:56:ad:78:05:e1:5a:
         be:dc:1e:77:41:64:73:b0:9a:aa:93:b1:72:fe:99:fb:28:14:
         2e:3c:ec:f0:fb:a3:ca:3e:84:65:69:69:69:f6:5f:96:7a:e6:
         38:18:80:65:b3:0f:63:63:ff:79:80:50:68:78:c2:b1:90:bb:
         5a:3a:aa:74:c6:ce:8d:2e:ff:df:9c:88:8a:fe:81:c5:a5:49:
         40:06:fb:bc:e1:17:96:bb:ac:84:a0:f3:0f:fb:1f:7d:3e:62:
         dd:04:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org