Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/3136382e3132312e32302e302f32322d3234203d3e20323634333930.roa
File:                     3136382e3132312e32302e302f32322d3234203d3e20323634333930.roa (raw, json)
Hash identifier:          yA/MIsB54sgX3Mxgq0dF2FTnQ4WhzXgnxLXF/5u/KXE=
Subject key identifier:   46:2F:10:DD:E2:80:24:2E:FD:F2:56:BB:96:A6:00:4C:BC:12:95:9A
Certificate issuer:       /CN=18F419A180314B79E88307605FA439DF04529F3D
Certificate serial:       743EC512809D53C98F93A43112A81627BC45F91C
Authority key identifier: 18:F4:19:A1:80:31:4B:79:E8:83:07:60:5F:A4:39:DF:04:52:9F:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F419A180314B79E88307605FA439DF04529F3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/3136382e3132312e32302e302f32322d3234203d3e20323634333930.roa
Signing time:             Wed 28 Feb 2024 10:25:27 +0000
ROA not before:           Wed 28 Feb 2024 10:20:27 +0000
ROA not after:            Wed 26 Feb 2025 10:25:27 +0000
asID:                     264390
IP address blocks:        168.121.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3e:c5:12:80:9d:53:c9:8f:93:a4:31:12:a8:16:27:bc:45:f9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F419A180314B79E88307605FA439DF04529F3D
        Validity
            Not Before: Feb 28 10:20:27 2024 GMT
            Not After : Feb 26 10:25:27 2025 GMT
        Subject: CN=462F10DDE280242EFDF256BB96A6004CBC12959A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:98:62:be:ef:5e:d5:a1:7f:3f:c0:3f:2d:
                    64:a4:94:19:62:ef:d7:f8:53:69:9f:ae:58:8e:95:
                    1a:29:a9:1c:4a:8b:7a:c0:5d:70:23:af:1e:c0:07:
                    c8:11:e0:94:3c:41:c3:54:ec:fb:3f:7d:20:58:c0:
                    6f:bd:c9:ed:63:21:e5:77:b0:7a:6f:5a:d3:d1:18:
                    9d:66:28:cb:f8:13:c8:25:e7:7f:98:3d:37:89:e8:
                    ab:3d:84:37:eb:fc:ab:f9:76:f8:ab:30:b4:c4:6e:
                    48:28:85:e9:e4:ff:b5:98:cd:0e:6d:17:17:35:6d:
                    fa:52:93:e7:8c:f0:cd:6f:3b:c3:6a:c8:81:e3:53:
                    99:4f:57:47:1f:c1:ee:6d:d3:64:4f:54:b2:a9:8f:
                    65:6f:04:9e:db:4c:87:26:75:d4:8f:19:01:af:da:
                    49:5b:b4:3f:11:a1:1f:27:cf:fe:cd:d5:bf:bc:63:
                    85:cf:4d:28:40:bd:0e:cf:e6:8c:22:7a:15:b3:a5:
                    61:b0:dc:a8:c8:fc:b4:4a:9c:73:5f:14:cf:34:90:
                    0b:74:c2:51:b6:9d:ec:75:a3:5a:0d:fc:f4:7b:69:
                    9a:4b:f6:52:9e:3d:a6:a6:8f:17:2b:cb:66:57:0a:
                    d4:87:3b:aa:93:a5:7a:3a:76:85:7a:b1:61:86:66:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2F:10:DD:E2:80:24:2E:FD:F2:56:BB:96:A6:00:4C:BC:12:95:9A
            X509v3 Authority Key Identifier:
                keyid:18:F4:19:A1:80:31:4B:79:E8:83:07:60:5F:A4:39:DF:04:52:9F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/18F419A180314B79E88307605FA439DF04529F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F419A180314B79E88307605FA439DF04529F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/3136382e3132312e32302e302f32322d3234203d3e20323634333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:20:78:2c:7a:b5:9a:e9:44:c0:79:33:9f:7f:7d:4d:2e:73:
         26:a7:0e:80:70:30:a9:bd:76:60:be:55:91:cd:bc:87:9e:5d:
         f8:cb:43:c4:90:f6:99:e6:7b:22:87:eb:67:f0:fd:58:6f:5d:
         34:0f:8c:5d:ef:9f:38:dc:c0:cb:12:ce:59:db:29:06:1a:23:
         8b:37:be:da:2c:af:84:ba:51:8d:0c:fd:53:ad:7c:67:1b:94:
         b6:37:fa:39:a0:eb:0a:b7:0a:33:3f:a9:79:df:17:f7:53:16:
         32:49:b7:87:2b:57:ae:93:98:d9:52:0e:c3:55:54:02:10:bd:
         49:14:79:34:ba:fe:03:15:ec:48:a1:c4:0c:c1:db:ec:46:01:
         57:be:6a:7b:93:4e:c3:01:fb:9f:2d:ec:66:de:e5:5f:64:a1:
         b0:e6:45:f3:0a:be:f3:c3:ed:f0:9d:df:60:ba:ba:e7:99:d5:
         17:50:45:79:51:ad:88:15:77:dd:58:f5:2d:2e:d9:2e:53:d6:
         a8:27:38:07:09:a7:68:fe:f5:59:58:56:b3:73:4c:db:75:6f:
         fa:85:c7:31:ea:fe:86:a2:e3:ed:f5:d0:e2:5a:6f:26:db:b3:
         ec:78:86:dd:8e:11:e2:0b:9e:bd:f8:03:64:18:b8:c6:92:64:
         10:86:16:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org