Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/3136342e3136332e3131382e302f32332d3233203d3e20323635393631.roa
File:                     3136342e3136332e3131382e302f32332d3233203d3e20323635393631.roa (raw, json)
Hash identifier:          Hg/HMkRlUJPVd2GNQuKtxtvz6RZzMnCnhrWjFmo8L7E=
Subject key identifier:   2C:AE:BE:51:BC:03:CF:13:E3:D1:8E:3A:AB:1B:5F:D8:17:41:E8:D8
Certificate issuer:       /CN=D61E35C6D73BF7E003298CCB24C4D4586086BB9D
Certificate serial:       07F7B8FA2EA8797A708901C1B96B676FB3F6D471
Authority key identifier: D6:1E:35:C6:D7:3B:F7:E0:03:29:8C:CB:24:C4:D4:58:60:86:BB:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/3136342e3136332e3131382e302f32332d3233203d3e20323635393631.roa
Signing time:             Wed 06 Dec 2023 19:07:55 +0000
ROA not before:           Wed 06 Dec 2023 19:02:55 +0000
ROA not after:            Wed 04 Dec 2024 19:07:55 +0000
asID:                     265961
IP address blocks:        164.163.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f7:b8:fa:2e:a8:79:7a:70:89:01:c1:b9:6b:67:6f:b3:f6:d4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D61E35C6D73BF7E003298CCB24C4D4586086BB9D
        Validity
            Not Before: Dec  6 19:02:55 2023 GMT
            Not After : Dec  4 19:07:55 2024 GMT
        Subject: CN=2CAEBE51BC03CF13E3D18E3AAB1B5FD81741E8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:88:b3:db:30:6e:5c:78:5a:35:8e:6b:d6:
                    c0:76:68:89:a7:22:8b:d6:82:bb:19:c8:03:87:7b:
                    a6:ec:e8:ad:4a:50:bd:c5:0e:0c:d3:e9:18:34:f9:
                    87:b5:d5:c2:3e:22:09:d5:d2:7b:c2:0d:00:c3:4e:
                    08:1b:a8:ab:56:f9:7a:7f:3d:af:aa:1e:a2:56:9d:
                    f5:1b:5d:64:8f:63:1b:cf:48:91:1d:d8:e0:b8:99:
                    41:8b:4d:0a:d7:ae:37:7e:e5:5a:43:da:34:d3:02:
                    e7:3e:d7:63:41:6f:f5:c3:ee:7b:6c:5b:c1:0f:0b:
                    89:41:7e:68:f0:06:b7:f8:43:29:61:1c:72:5b:98:
                    df:be:f7:24:6b:05:99:a0:1b:bb:4d:7c:fd:20:6a:
                    b8:f0:a1:66:4e:5a:2a:ec:15:81:8d:c2:3b:85:bd:
                    bc:39:33:56:78:b4:ec:0b:61:a9:f4:91:af:e7:e9:
                    3b:ae:93:c1:a3:7a:01:8f:fe:9e:c8:1d:9d:2d:fc:
                    bb:9b:7c:ed:45:84:25:7e:ca:04:86:aa:1d:a8:db:
                    a3:3c:d3:ee:23:80:2c:31:6b:5d:86:5e:b0:78:1c:
                    d5:e1:d5:cc:65:23:04:d4:ae:52:67:66:15:fc:1a:
                    bb:fe:67:7b:cb:4c:1b:82:30:6d:45:84:bb:32:a7:
                    e7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AE:BE:51:BC:03:CF:13:E3:D1:8E:3A:AB:1B:5F:D8:17:41:E8:D8
            X509v3 Authority Key Identifier:
                keyid:D6:1E:35:C6:D7:3B:F7:E0:03:29:8C:CB:24:C4:D4:58:60:86:BB:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/3136342e3136332e3131382e302f32332d3233203d3e20323635393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:2d:ce:dc:30:ea:e8:8d:6c:a6:92:e0:ca:b8:97:22:91:6c:
         99:b1:5a:31:63:58:60:b5:87:80:c5:02:53:76:4c:5f:53:cf:
         a0:e5:dc:4e:34:37:c6:1b:54:0c:75:ec:a1:1f:5b:6b:a5:e2:
         a2:a2:d7:a9:07:84:25:66:d4:60:6d:dc:b6:4e:c0:98:b1:8e:
         fc:d1:04:68:48:6d:58:6f:38:92:e1:a3:e7:20:90:f8:41:0d:
         16:18:23:a0:b9:7c:2f:ea:75:15:13:02:6e:3e:90:04:d5:83:
         c8:af:a5:7e:7a:df:4c:9b:8b:e6:2b:78:9f:bc:af:a8:f4:8a:
         ef:4e:98:55:e8:c9:a3:83:fc:e3:5f:d2:fc:fb:01:38:fc:68:
         54:d9:d2:e1:43:cd:ec:6b:40:3e:b7:67:62:6f:3b:c7:0e:4a:
         48:da:c1:fe:2f:e8:57:6d:7b:a4:ba:b6:87:af:7a:6e:f4:8f:
         b4:93:cc:b8:fd:d1:2f:d6:7a:74:35:be:e7:71:6c:28:47:f6:
         ba:a3:0e:e8:c2:db:d7:c9:1c:e3:d4:26:6b:12:93:96:f3:0b:
         a7:a8:45:da:ea:c5:47:f8:a1:dc:d3:11:32:0b:57:11:68:cc:
         3b:fc:48:52:3a:96:67:a8:5c:51:6c:76:90:f3:8a:05:79:4c:
         73:ef:cc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org