Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
File:                     3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa (raw, json)
Hash identifier:          SwD8T074aYbChN9b6/EF01/OPFpLgG/g08FCO5vN7l8=
Subject key identifier:   B4:69:16:0C:5C:BD:FB:27:E6:E7:B5:2A:0F:00:19:42:6E:38:EB:07
Certificate issuer:       /CN=EC682C741A777F706745E6705BE4FAC8CE53C496
Certificate serial:       1547E7813390A71099C8E676658A639075920B09
Authority key identifier: EC:68:2C:74:1A:77:7F:70:67:45:E6:70:5B:E4:FA:C8:CE:53:C4:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC682C741A777F706745E6705BE4FAC8CE53C496.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
Signing time:             Mon 29 Jan 2024 22:12:50 +0000
ROA not before:           Mon 29 Jan 2024 22:07:50 +0000
ROA not after:            Mon 27 Jan 2025 22:12:50 +0000
asID:                     265393
IP address blocks:        168.194.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:47:e7:81:33:90:a7:10:99:c8:e6:76:65:8a:63:90:75:92:0b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC682C741A777F706745E6705BE4FAC8CE53C496
        Validity
            Not Before: Jan 29 22:07:50 2024 GMT
            Not After : Jan 27 22:12:50 2025 GMT
        Subject: CN=B469160C5CBDFB27E6E7B52A0F0019426E38EB07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:85:91:8d:7d:47:5c:e5:c3:33:e2:7e:8d:
                    ab:74:1a:17:ff:c2:b0:0a:c5:38:53:58:12:ac:d6:
                    8d:c8:85:01:3a:56:85:52:88:72:66:0d:47:d5:8e:
                    97:59:49:03:1f:1d:02:ef:f4:5c:e1:60:3e:d0:d1:
                    01:69:af:4c:71:11:79:4e:1e:a4:bc:0c:cd:c5:2b:
                    f2:d3:e7:3d:7d:be:87:a4:69:b4:a7:1c:dd:a9:8b:
                    c3:fe:5c:4c:6d:e3:e4:ff:d6:8d:45:e1:ab:b4:ec:
                    ff:0d:fb:12:3a:62:d8:fd:8a:c5:12:76:1f:40:8b:
                    b5:ca:29:92:48:b5:63:93:8f:d0:ec:d3:25:7e:35:
                    e7:66:bc:88:6d:58:09:df:23:b7:c8:77:36:45:c3:
                    4d:d7:84:86:ed:58:94:1a:e4:14:ca:97:40:02:ec:
                    cb:82:05:e9:ce:32:91:50:2c:df:7d:35:c2:0c:0f:
                    e7:2a:e4:06:ca:60:76:de:16:5f:a7:a0:8d:75:4e:
                    65:3c:80:07:bb:24:69:2d:bd:99:8d:0f:95:48:e7:
                    53:c1:2c:7d:e0:bc:c4:37:68:15:ce:76:1b:6d:3f:
                    16:1e:1c:c7:cc:4e:20:a7:d5:5f:32:41:8d:95:a4:
                    a1:47:12:6b:53:81:cf:94:43:c0:a6:6f:9d:a3:6b:
                    71:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:69:16:0C:5C:BD:FB:27:E6:E7:B5:2A:0F:00:19:42:6E:38:EB:07
            X509v3 Authority Key Identifier:
                keyid:EC:68:2C:74:1A:77:7F:70:67:45:E6:70:5B:E4:FA:C8:CE:53:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/EC682C741A777F706745E6705BE4FAC8CE53C496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC682C741A777F706745E6705BE4FAC8CE53C496.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:e4:c3:cc:60:1b:ef:d5:65:13:5c:b1:4c:52:32:16:d7:3e:
         f5:39:1f:cf:4e:9e:a3:21:05:2f:2a:61:07:64:4b:0e:06:19:
         af:51:d6:91:54:6a:c9:c3:4b:5b:55:93:e9:6f:6c:70:fc:35:
         fa:f5:c3:d4:8e:b1:a7:fc:58:95:37:15:4e:60:b4:18:3a:d4:
         6a:d7:50:a0:36:94:ae:4e:7b:5b:71:7b:ea:11:c5:c3:60:c5:
         be:d7:33:71:ce:7a:81:da:e3:a7:bd:69:6d:e1:db:58:f0:a9:
         38:44:5d:61:89:53:45:fc:95:5d:61:f7:7b:fd:09:57:c6:e2:
         7d:33:4e:20:0c:5e:77:ab:4d:11:d5:8f:45:8b:ff:33:41:7f:
         a9:fa:39:d6:56:3e:fa:a1:c9:07:2c:77:f5:20:cf:ef:d1:63:
         a8:8a:a0:c2:8f:a2:8c:b6:9b:f7:58:10:61:25:46:14:a5:ef:
         a0:51:01:45:da:26:fb:52:a2:0b:eb:3d:c8:dc:c4:a5:8e:11:
         f9:f1:de:cc:ee:09:3c:be:dc:37:5f:61:50:b4:9d:2d:5e:d9:
         ce:9a:fb:07:a7:e8:2a:f2:24:d7:c5:d3:e1:64:dc:ce:cc:fa:
         2f:63:7f:d5:4e:33:bc:dd:9d:92:e5:a0:83:61:92:da:ac:0d:
         8e:0b:14:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org