Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3136342e3136332e342e302f32342d3332203d3e20323731343239.roa
File:                     3136342e3136332e342e302f32342d3332203d3e20323731343239.roa (raw, json)
Hash identifier:          MNcTG6MIQwdkDAYidrJDrn/18cO3MVP/o2CarjY1b6g=
Subject key identifier:   BE:69:C6:93:0D:7C:32:F0:91:EE:1A:18:BA:0C:FC:41:DE:D7:65:2C
Certificate issuer:       /CN=7B3808E35EB2161CDC3AD97918339F8892412C15
Certificate serial:       6953BF81C2BA63266A361C51D97EB1C43D574FEE
Authority key identifier: 7B:38:08:E3:5E:B2:16:1C:DC:3A:D9:79:18:33:9F:88:92:41:2C:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B3808E35EB2161CDC3AD97918339F8892412C15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3136342e3136332e342e302f32342d3332203d3e20323731343239.roa
Signing time:             Fri 23 Feb 2024 13:16:55 +0000
ROA not before:           Fri 23 Feb 2024 13:11:55 +0000
ROA not after:            Fri 21 Feb 2025 13:16:55 +0000
asID:                     271429
IP address blocks:        164.163.4.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:53:bf:81:c2:ba:63:26:6a:36:1c:51:d9:7e:b1:c4:3d:57:4f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B3808E35EB2161CDC3AD97918339F8892412C15
        Validity
            Not Before: Feb 23 13:11:55 2024 GMT
            Not After : Feb 21 13:16:55 2025 GMT
        Subject: CN=BE69C6930D7C32F091EE1A18BA0CFC41DED7652C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:0e:62:53:ae:75:04:09:c8:fb:99:a4:2c:
                    2c:10:11:b2:bc:cd:e5:ac:72:a1:d4:02:fc:e0:94:
                    5f:cc:e0:17:3d:d5:01:97:5f:21:6d:1b:48:16:67:
                    e8:6d:f1:0b:99:76:7a:e7:f2:e8:9c:48:51:7c:66:
                    a8:ad:47:7d:01:b2:39:26:f6:22:28:59:d3:62:b2:
                    96:e6:4e:69:5c:78:4e:7f:84:01:bf:f7:01:51:67:
                    c8:40:bb:af:74:50:46:1c:76:a8:95:28:84:f7:72:
                    ae:50:25:14:71:ea:18:d3:9e:4e:d9:4e:12:69:89:
                    05:c3:62:ef:95:d1:d9:4e:75:de:7f:6a:bf:a3:cc:
                    e4:cb:3f:31:55:89:af:ec:80:3a:8b:d1:35:fa:6c:
                    12:bb:59:31:33:36:6c:9f:7d:5b:a1:05:cd:e1:c2:
                    cd:a1:f9:c0:2d:5b:b7:36:9b:a0:7b:94:29:d8:e9:
                    98:f7:35:8b:b9:74:de:c1:3e:30:8d:1d:b9:19:10:
                    4c:62:25:ba:6b:7a:3b:43:a0:33:76:05:3e:97:4b:
                    15:a5:cc:c2:8d:c9:69:22:05:f7:37:3f:24:4a:de:
                    a5:bd:89:2e:f9:32:5a:d5:22:b0:19:ff:40:a8:d8:
                    b5:10:83:3a:bf:68:7e:6d:3b:b1:b3:a0:c8:1f:dd:
                    86:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:69:C6:93:0D:7C:32:F0:91:EE:1A:18:BA:0C:FC:41:DE:D7:65:2C
            X509v3 Authority Key Identifier:
                keyid:7B:38:08:E3:5E:B2:16:1C:DC:3A:D9:79:18:33:9F:88:92:41:2C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/7B3808E35EB2161CDC3AD97918339F8892412C15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B3808E35EB2161CDC3AD97918339F8892412C15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3136342e3136332e342e302f32342d3332203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:21:72:5c:9a:c4:6f:8d:96:d1:3c:e3:b1:f8:51:27:45:d6:
         c8:3d:c6:d0:c7:86:71:a6:5e:0a:e1:d7:d4:47:b6:7a:67:30:
         39:18:58:ec:3f:98:e0:21:5c:1d:81:1f:cb:5c:31:52:02:44:
         f0:2c:42:02:2e:37:c6:ac:e2:cd:60:0b:96:73:56:20:fa:f5:
         78:94:81:9b:bd:88:6b:a7:86:fa:2e:4c:c3:20:76:17:d9:53:
         0b:74:b1:95:49:e6:08:d9:37:2f:24:21:79:d8:af:05:e8:a0:
         5e:29:67:12:d3:54:16:51:f6:cc:cf:b1:86:02:8c:75:36:2a:
         25:3a:f0:66:a6:a1:29:4d:b7:8a:c7:5e:75:de:4c:34:e5:4d:
         55:ae:ec:8d:d8:55:bb:ab:f7:84:72:ff:95:2d:3f:e3:02:3c:
         cc:c4:7a:b5:9d:1c:1f:20:ad:32:bb:75:d0:14:c4:ab:9a:30:
         ba:a3:bd:87:d2:1a:96:ad:33:ad:c0:42:95:b5:c0:91:09:e1:
         69:e6:47:7c:83:38:57:9d:3b:b4:5b:56:f0:72:cb:7b:4f:7a:
         03:32:a4:05:85:72:b8:26:e7:d0:eb:1b:d6:8c:eb:48:a0:e9:
         b0:42:e7:7e:b1:25:06:c0:bd:fe:56:52:c1:a2:75:f2:ae:0d:
         3c:b1:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org