Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130382e302f32322d3232203d3e20323635393530.roa
File:                     3136342e3136332e3130382e302f32322d3232203d3e20323635393530.roa (raw, json)
Hash identifier:          PfdzskLtn9yKhSP5yXTY5wmTRrB1iJfLrNY7Ipjzq74=
Subject key identifier:   9F:F4:4A:C5:EC:24:1D:1F:05:21:A5:4A:38:2F:1A:DF:F1:D6:76:0D
Certificate issuer:       /CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
Certificate serial:       0334A12A359B81EA5A75062F0F2DF21534027C8B
Authority key identifier: 1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130382e302f32322d3232203d3e20323635393530.roa
Signing time:             Sun 24 Sep 2023 21:58:52 +0000
ROA not before:           Sun 24 Sep 2023 21:53:52 +0000
ROA not after:            Sun 22 Sep 2024 21:58:52 +0000
asID:                     265950
IP address blocks:        164.163.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:34:a1:2a:35:9b:81:ea:5a:75:06:2f:0f:2d:f2:15:34:02:7c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
        Validity
            Not Before: Sep 24 21:53:52 2023 GMT
            Not After : Sep 22 21:58:52 2024 GMT
        Subject: CN=9FF44AC5EC241D1F0521A54A382F1ADFF1D6760D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:c4:65:33:67:d6:1e:5f:b7:66:6e:08:d6:
                    e3:6e:98:28:92:10:ae:6b:0a:aa:1b:c1:81:cd:d5:
                    8e:95:e6:4b:cd:7c:ba:01:23:1d:60:0b:85:da:91:
                    83:e6:8a:23:dd:6c:6d:3e:96:33:d7:cf:52:79:f4:
                    d1:d3:1e:b0:f5:a0:91:03:52:cb:c6:fd:e3:36:c4:
                    55:8a:58:e4:fc:a7:7b:0f:48:cd:36:26:55:3e:7b:
                    fe:2d:60:83:a1:6e:c5:f1:c2:45:b6:fd:47:e4:4a:
                    b9:c7:50:23:5f:99:18:1a:65:bc:0b:76:61:38:37:
                    b1:01:b3:6c:ff:a8:46:de:96:e8:cd:c4:5d:8d:8a:
                    e3:28:4d:3c:dc:7b:3b:88:0e:0d:6e:49:13:45:c5:
                    c2:84:b5:fc:0c:15:05:d8:52:00:75:57:4d:2b:03:
                    37:24:90:e7:84:0c:d6:cb:91:b6:ff:42:c7:ff:2c:
                    ce:14:9e:53:96:b5:03:0b:45:b4:49:4d:74:57:8a:
                    83:32:ac:28:d3:53:20:a3:22:01:2c:a1:dc:fc:75:
                    b7:2a:cc:98:c5:dc:9d:2c:46:0e:1f:e3:2a:e6:cd:
                    9d:0a:d7:37:ca:bc:ce:7f:8e:9a:a8:7f:a0:dc:d3:
                    3a:df:6c:fc:04:4d:85:80:bc:8a:a3:a7:59:c6:3f:
                    fe:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F4:4A:C5:EC:24:1D:1F:05:21:A5:4A:38:2F:1A:DF:F1:D6:76:0D
            X509v3 Authority Key Identifier:
                keyid:1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130382e302f32322d3232203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:a7:b5:27:8d:a6:1f:a3:25:a9:8d:0a:81:a8:03:e7:c2:19:
         df:22:fe:54:41:df:6f:4b:a1:26:b1:db:06:e3:36:d0:b2:66:
         c6:67:b1:46:59:fb:7b:7b:49:e2:02:6d:22:db:6b:24:d4:79:
         67:3d:3b:3c:9c:43:55:91:77:28:52:55:fc:66:4e:5b:d5:86:
         cd:e6:72:ea:34:da:cb:3c:16:ec:9d:cd:64:4b:a7:90:1b:e2:
         4a:ab:e2:ce:1c:34:0c:07:42:69:23:0e:a4:57:7e:f2:0e:92:
         93:11:3c:9d:39:0d:5c:59:b1:3b:7e:a8:62:3c:11:32:dd:56:
         a1:6f:db:8c:db:63:50:82:9b:83:18:73:7a:d1:c5:74:1f:92:
         94:b1:05:1b:2e:9b:f0:a3:fb:ce:a5:9d:a2:2a:14:10:24:8d:
         e7:02:3f:ff:9f:a8:6a:07:58:bd:13:b1:ac:db:e6:83:e5:06:
         e0:73:21:f1:ee:6f:40:f8:7a:51:6d:63:27:f3:34:3f:3f:9a:
         7a:e4:2f:77:97:1e:6b:3d:ad:e5:08:50:a0:78:0f:ed:84:96:
         3d:53:5e:8b:06:a3:e7:31:52:4b:74:ac:b2:14:0c:b0:1e:27:
         bf:f9:8c:db:96:bb:ce:ab:4a:7b:5a:ca:0e:02:37:09:0d:10:
         63:d1:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org