Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/3136382e3139342e36342e302f32332d3233203d3e20323635333739.roa
File:                     3136382e3139342e36342e302f32332d3233203d3e20323635333739.roa (raw, json)
Hash identifier:          hS3UgOsY2VEm1NSbPA9OtxdWwBuOpoZJryW2lKE94/w=
Subject key identifier:   99:FA:89:8D:A5:5F:CB:50:4F:E2:2E:59:10:C7:B1:6B:C7:77:8A:85
Certificate issuer:       /CN=088F189D0C73ADF77B005E95BF5583276C57D174
Certificate serial:       6266B2E993041792FC57B0A0EC643AEF253FC7A3
Authority key identifier: 08:8F:18:9D:0C:73:AD:F7:7B:00:5E:95:BF:55:83:27:6C:57:D1:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F189D0C73ADF77B005E95BF5583276C57D174.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/3136382e3139342e36342e302f32332d3233203d3e20323635333739.roa
Signing time:             Sat 16 Dec 2023 00:00:01 +0000
ROA not before:           Fri 15 Dec 2023 23:55:01 +0000
ROA not after:            Sat 14 Dec 2024 00:00:01 +0000
asID:                     265379
IP address blocks:        168.194.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:66:b2:e9:93:04:17:92:fc:57:b0:a0:ec:64:3a:ef:25:3f:c7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088F189D0C73ADF77B005E95BF5583276C57D174
        Validity
            Not Before: Dec 15 23:55:01 2023 GMT
            Not After : Dec 14 00:00:01 2024 GMT
        Subject: CN=99FA898DA55FCB504FE22E5910C7B16BC7778A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:b0:b9:ab:00:7d:21:e0:76:d2:06:8e:44:
                    9c:99:5b:b4:cd:eb:8f:06:f7:ef:39:c4:76:76:76:
                    ce:84:a7:75:9b:67:c7:51:47:9b:b2:78:10:00:4c:
                    e7:89:07:7f:93:4c:84:c3:1b:2e:c9:be:28:6b:59:
                    eb:03:00:2b:ff:96:3c:67:36:da:57:f0:6f:aa:a0:
                    8e:6c:e3:d6:a5:f8:4a:bb:3f:b7:4c:53:64:27:b6:
                    f8:25:05:2f:1a:d5:56:5e:10:f8:f7:93:33:d3:8d:
                    8f:ac:e0:ee:4f:34:75:9d:6d:08:90:19:d8:79:93:
                    1a:32:1f:45:c9:0a:f1:94:f4:5e:f1:a3:8e:d0:bb:
                    44:ac:e4:fc:3a:1f:5e:ba:a7:a0:91:aa:fe:29:0d:
                    e1:23:a7:2d:ae:ab:dc:bf:15:05:c2:90:09:80:ea:
                    f6:7a:0e:6c:b7:7a:d2:82:06:1a:a1:52:00:d8:9c:
                    d7:dd:d9:ee:8d:74:40:3a:a1:ca:a3:05:b5:f3:0a:
                    99:85:5f:76:e6:5b:a4:87:84:c5:5a:b0:4e:35:c0:
                    9c:2d:15:fc:84:b6:a2:69:1e:bd:5d:b6:f6:44:df:
                    c6:d7:ed:11:d0:10:a6:cf:6c:53:b2:77:a3:14:12:
                    75:9f:e3:cc:73:d2:34:9c:37:23:30:06:d6:cd:4b:
                    3f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FA:89:8D:A5:5F:CB:50:4F:E2:2E:59:10:C7:B1:6B:C7:77:8A:85
            X509v3 Authority Key Identifier:
                keyid:08:8F:18:9D:0C:73:AD:F7:7B:00:5E:95:BF:55:83:27:6C:57:D1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/088F189D0C73ADF77B005E95BF5583276C57D174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F189D0C73ADF77B005E95BF5583276C57D174.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/3136382e3139342e36342e302f32332d3233203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:9e:64:24:18:07:df:4e:50:3a:76:79:dc:31:a3:e3:24:
         25:81:ca:08:4d:d8:23:59:e4:a2:c5:0e:db:14:16:75:7c:17:
         4c:22:a6:c7:9e:f8:72:cb:a3:21:fe:e3:4e:00:ce:09:37:89:
         37:b4:c1:ba:45:90:50:c9:00:ea:a9:08:dc:53:29:d6:75:6b:
         7a:5b:84:52:0e:72:2a:0b:b7:e8:ab:8c:18:39:17:0d:dc:34:
         83:f6:e2:da:53:6b:76:88:06:8a:4c:80:e3:2d:bc:8b:d6:1a:
         fe:fe:bf:a6:78:30:45:48:69:89:57:ec:7d:76:6a:bd:6a:46:
         a9:51:f5:63:d6:b5:a9:6c:84:2d:55:4b:7c:a4:35:68:f6:94:
         16:40:59:84:08:6b:ea:15:c5:b3:44:1d:dc:27:06:c7:77:a7:
         80:6e:ce:83:06:89:1c:26:b4:a4:c5:ea:e9:00:3a:7b:49:34:
         58:f3:c1:d9:ed:7a:3d:a5:f1:9e:0a:34:d0:bf:0f:6a:ea:e0:
         1e:3e:f0:0e:e0:c1:70:ee:9c:91:42:db:c9:08:e5:22:9e:53:
         b4:72:21:5a:39:cc:eb:a6:c0:33:60:78:fd:64:14:8d:44:a7:
         92:33:29:0e:97:65:ac:e3:06:d1:3c:50:38:58:92:32:2f:e4:
         b1:45:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org