Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3131312e302f32342d3234203d3e20323635393530.roa
File:                     3136342e3136332e3131312e302f32342d3234203d3e20323635393530.roa (raw, json)
Hash identifier:          lysgucHHOwowHlXlV7GwPyD22TjxtOW2gs0g5LrYjTo=
Subject key identifier:   E2:A5:A0:6C:F8:D1:A5:A1:46:20:AD:3C:5A:94:66:7A:41:69:BB:7C
Certificate issuer:       /CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
Certificate serial:       27E333D4FCDE5CE616704BB38BE803B857CE684E
Authority key identifier: 1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3131312e302f32342d3234203d3e20323635393530.roa
Signing time:             Sun 24 Sep 2023 21:58:53 +0000
ROA not before:           Sun 24 Sep 2023 21:53:53 +0000
ROA not after:            Sun 22 Sep 2024 21:58:53 +0000
asID:                     265950
IP address blocks:        164.163.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e3:33:d4:fc:de:5c:e6:16:70:4b:b3:8b:e8:03:b8:57:ce:68:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
        Validity
            Not Before: Sep 24 21:53:53 2023 GMT
            Not After : Sep 22 21:58:53 2024 GMT
        Subject: CN=E2A5A06CF8D1A5A14620AD3C5A94667A4169BB7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:14:e0:ed:94:aa:37:51:4d:38:5e:12:12:
                    76:b1:38:04:0c:68:86:ab:8a:b6:0d:25:5b:16:72:
                    51:bc:c4:17:75:60:63:98:87:d1:a9:72:46:8c:d1:
                    6b:18:e8:2e:c5:3e:e3:bf:03:a5:d0:ed:8d:8b:ca:
                    99:70:d2:a4:76:b4:fc:40:f4:2d:6a:33:b1:15:ed:
                    f6:b9:ae:90:cc:7b:4b:42:fb:e1:b7:8d:bb:6e:22:
                    bb:5e:8d:3d:38:98:a4:27:40:d2:16:12:69:1d:42:
                    0a:c1:26:d0:4d:50:a6:24:77:af:1e:44:81:6d:11:
                    bd:27:a6:73:f2:c2:de:d6:c9:b1:a5:74:4a:30:1a:
                    5a:cc:2d:c9:2b:89:a8:f0:8b:44:9c:62:97:3c:0f:
                    d1:5d:d3:67:f1:c7:60:55:6b:85:4e:09:71:c1:f3:
                    a1:f3:9c:0e:0e:a3:da:d8:1a:41:61:29:43:97:5f:
                    eb:88:c3:cf:21:2f:65:20:a6:de:25:ca:65:93:c8:
                    94:8b:2e:42:eb:c8:d9:3a:7c:8d:b5:a3:2c:61:ae:
                    4c:fa:ea:30:71:a7:fa:dd:b3:e3:de:08:ff:30:02:
                    ee:21:73:7c:d5:6b:ce:6b:cd:73:8c:97:9e:59:08:
                    77:f2:96:cc:1e:68:32:4b:d4:93:a3:12:9d:8f:65:
                    18:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A5:A0:6C:F8:D1:A5:A1:46:20:AD:3C:5A:94:66:7A:41:69:BB:7C
            X509v3 Authority Key Identifier:
                keyid:1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3131312e302f32342d3234203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:02:58:06:97:3b:4f:c1:5e:c7:79:75:71:90:2a:95:3a:ea:
         59:b8:94:e1:17:b9:44:b0:9b:a5:5c:37:cc:34:a6:36:17:3d:
         6b:b6:f9:61:37:4b:e4:72:9c:27:77:79:27:f9:ad:e5:8f:4f:
         d2:36:41:38:8d:e0:01:b8:03:6b:66:78:10:0c:70:c4:70:da:
         8e:91:de:4d:f4:cb:5f:06:2a:c3:ac:b8:c3:bd:88:d8:36:8b:
         06:dd:ac:c8:b6:6c:39:9f:70:cb:58:05:1e:7a:1e:8d:3a:c0:
         a5:70:b4:e8:b6:61:1b:87:3e:82:3f:20:d2:57:1b:8f:7a:fb:
         56:3b:d6:8b:c4:ee:25:2a:a7:b4:fc:6e:39:02:50:8f:39:13:
         39:b5:cb:30:62:74:4c:16:14:00:9f:b0:42:b5:b2:fb:d0:72:
         36:5d:28:c5:15:bd:3c:b4:23:b8:12:2b:09:c2:5d:f6:cd:38:
         84:ce:89:9f:46:d1:09:be:64:3f:11:f2:bf:7e:bf:7a:ae:ab:
         72:9a:eb:d5:e9:12:12:86:1f:27:94:1d:fd:30:35:39:e3:e3:
         8a:19:0c:6e:48:bd:0b:84:6b:fb:df:de:94:05:c2:2f:61:a9:
         da:59:a5:88:4d:6c:78:b2:9f:c2:bd:2c:e5:14:4d:64:e3:a7:
         26:9f:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org