Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/3136382e3139342e36342e302f32322d3232203d3e20323635333739.roa
File:                     3136382e3139342e36342e302f32322d3232203d3e20323635333739.roa (raw, json)
Hash identifier:          to+5fbcuDRRLPC/xyOUe8WLDI0ywdJB7JcbnTnCLp98=
Subject key identifier:   A3:0F:F8:6F:8C:CE:5A:84:98:91:47:79:CC:CA:5D:9B:75:55:21:A0
Certificate issuer:       /CN=088F189D0C73ADF77B005E95BF5583276C57D174
Certificate serial:       713358E9A81BA77EDF8CEA7B83F527176E26B335
Authority key identifier: 08:8F:18:9D:0C:73:AD:F7:7B:00:5E:95:BF:55:83:27:6C:57:D1:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F189D0C73ADF77B005E95BF5583276C57D174.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/3136382e3139342e36342e302f32322d3232203d3e20323635333739.roa
Signing time:             Sat 16 Dec 2023 00:00:02 +0000
ROA not before:           Fri 15 Dec 2023 23:55:02 +0000
ROA not after:            Sat 14 Dec 2024 00:00:02 +0000
asID:                     265379
IP address blocks:        168.194.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:33:58:e9:a8:1b:a7:7e:df:8c:ea:7b:83:f5:27:17:6e:26:b3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088F189D0C73ADF77B005E95BF5583276C57D174
        Validity
            Not Before: Dec 15 23:55:02 2023 GMT
            Not After : Dec 14 00:00:02 2024 GMT
        Subject: CN=A30FF86F8CCE5A8498914779CCCA5D9B755521A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:ce:2c:12:0f:da:34:c6:3a:d3:65:0b:5e:
                    1a:a4:01:07:e6:fd:68:e8:5e:6c:64:52:d0:16:d2:
                    da:8d:32:8f:b3:c2:d6:3b:cf:ad:29:43:90:33:32:
                    78:b4:8e:78:6f:72:e7:46:fa:25:65:50:a9:56:b3:
                    bd:99:a5:0b:41:5f:1b:18:36:d0:67:cb:f7:07:2b:
                    71:b2:9c:87:b5:89:5b:a1:68:7c:7b:f1:eb:f6:3a:
                    91:e6:08:2f:c0:99:c8:43:e2:f4:97:f6:3a:22:b7:
                    a4:e3:8c:86:fc:70:be:1e:82:5b:e5:33:04:1c:b8:
                    ef:0e:a5:9a:ea:d3:5b:45:9e:e6:33:b7:b2:8b:92:
                    b0:84:42:02:d7:f0:ed:b0:26:0c:14:0f:b7:de:db:
                    e4:9c:4e:c1:c0:ae:f6:9e:e5:e0:c1:35:e4:ab:f0:
                    14:4d:c4:ed:dd:e9:09:5a:6f:60:10:39:95:fe:71:
                    ee:e2:0c:ab:5f:b0:7a:09:0b:ef:ae:9d:32:f3:4c:
                    7d:33:36:c1:54:3c:28:cc:78:2b:76:4b:6d:21:eb:
                    00:40:05:46:25:f6:4c:05:72:2c:8f:a7:5f:9e:e9:
                    7b:7d:50:fa:16:63:55:d4:69:ff:c9:49:b8:4a:02:
                    ee:b1:19:94:b1:03:b7:46:d3:ad:6e:85:7c:0b:d9:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0F:F8:6F:8C:CE:5A:84:98:91:47:79:CC:CA:5D:9B:75:55:21:A0
            X509v3 Authority Key Identifier:
                keyid:08:8F:18:9D:0C:73:AD:F7:7B:00:5E:95:BF:55:83:27:6C:57:D1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/088F189D0C73ADF77B005E95BF5583276C57D174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F189D0C73ADF77B005E95BF5583276C57D174.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/3136382e3139342e36342e302f32322d3232203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:6e:c9:e9:83:2b:7f:ff:96:dc:cc:a2:0f:3d:90:9d:47:82:
         e2:f8:02:b3:d7:19:d8:7b:05:81:02:43:36:5f:14:04:5f:6c:
         6d:a7:0b:b8:28:44:cc:fe:5c:32:1d:d1:9c:e5:c2:54:ca:19:
         44:1c:90:a5:72:5a:f4:a2:b8:be:86:7a:5b:6b:cc:e6:3a:7f:
         30:24:71:92:0b:18:1f:1a:d9:58:20:81:b8:ca:22:8f:52:ae:
         09:56:e9:3c:95:c3:86:b3:a9:3b:9f:8f:b1:f7:1c:79:8c:5f:
         8b:65:91:47:4b:b8:6a:38:32:4b:2e:27:0d:8b:29:cd:ef:37:
         c3:4f:02:a3:63:79:c5:df:5b:a5:ec:c3:29:79:6e:eb:9c:cd:
         47:0e:ee:25:15:02:36:6c:38:86:13:73:92:07:c6:7e:90:f2:
         c7:64:d8:c7:41:d5:32:d8:28:d2:9f:65:d9:00:0a:92:53:aa:
         99:72:fc:92:5f:e3:00:1b:49:50:51:93:ea:82:35:3f:92:11:
         68:2b:69:73:39:71:b8:bd:e9:46:d4:ee:5f:16:7b:f2:0a:43:
         e0:be:2d:36:42:e0:28:46:15:e2:98:9a:ab:e9:22:41:db:9b:
         57:13:b2:a9:d4:71:d8:d3:6d:87:35:ea:84:94:a1:35:bc:54:
         e5:8a:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org