Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/3136382e3139342e36362e302f32332d3233203d3e20323635333739.roa
File:                     3136382e3139342e36362e302f32332d3233203d3e20323635333739.roa (raw, json)
Hash identifier:          cGrb4R9yMiLd38Sz9F41M1iVHpBJtIU/pnksElNWIkw=
Subject key identifier:   5A:73:00:F0:AE:59:C7:A6:D0:95:C9:79:47:B4:EC:26:E4:E7:08:EB
Certificate issuer:       /CN=088F189D0C73ADF77B005E95BF5583276C57D174
Certificate serial:       054E0D00EB8516D69C39442F3B8F1FF677B5CAF7
Authority key identifier: 08:8F:18:9D:0C:73:AD:F7:7B:00:5E:95:BF:55:83:27:6C:57:D1:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F189D0C73ADF77B005E95BF5583276C57D174.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/3136382e3139342e36362e302f32332d3233203d3e20323635333739.roa
Signing time:             Sat 16 Dec 2023 00:00:01 +0000
ROA not before:           Fri 15 Dec 2023 23:55:01 +0000
ROA not after:            Sat 14 Dec 2024 00:00:01 +0000
asID:                     265379
IP address blocks:        168.194.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4e:0d:00:eb:85:16:d6:9c:39:44:2f:3b:8f:1f:f6:77:b5:ca:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088F189D0C73ADF77B005E95BF5583276C57D174
        Validity
            Not Before: Dec 15 23:55:01 2023 GMT
            Not After : Dec 14 00:00:01 2024 GMT
        Subject: CN=5A7300F0AE59C7A6D095C97947B4EC26E4E708EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:e8:e9:75:61:41:f1:29:87:44:7f:c5:ae:
                    8a:db:a7:1c:96:06:06:a8:71:bd:5a:b5:2e:ac:37:
                    1d:37:11:40:f2:c0:97:02:f6:02:56:6d:1b:45:d5:
                    72:ef:3c:2b:e4:1e:34:df:78:8c:7a:b1:aa:a6:67:
                    e2:33:a8:e8:b5:e6:d9:f1:90:5f:ea:f6:4f:9b:47:
                    fa:27:93:be:9d:81:76:29:be:26:2d:2f:47:ae:17:
                    c2:5b:db:a5:0c:af:ae:d9:e0:40:e9:2d:d7:24:c1:
                    fb:dc:77:6a:c6:85:33:ef:c6:af:40:b0:be:37:5e:
                    46:8f:0e:23:b9:39:dc:20:f1:df:d9:5c:cf:81:a8:
                    5c:e1:32:ef:27:7b:63:83:53:3e:d4:b9:1b:71:7f:
                    e3:68:cf:8a:31:bf:dc:04:a7:f7:ec:fa:b3:cc:a4:
                    94:f0:75:02:06:21:00:26:1e:12:c2:03:b2:cc:aa:
                    4f:f8:a1:cd:01:4e:b7:22:25:86:b7:98:f9:f1:20:
                    67:ab:9e:c8:d4:80:ce:fa:79:e2:36:21:ab:7e:45:
                    ab:93:70:b0:c2:de:8a:71:f2:21:69:24:bf:c5:c8:
                    95:45:a9:d0:12:c0:0e:28:51:81:67:f8:ea:d0:69:
                    aa:8e:fb:b9:c9:21:8f:8b:1f:8d:ce:a9:5b:fe:c4:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:73:00:F0:AE:59:C7:A6:D0:95:C9:79:47:B4:EC:26:E4:E7:08:EB
            X509v3 Authority Key Identifier:
                keyid:08:8F:18:9D:0C:73:AD:F7:7B:00:5E:95:BF:55:83:27:6C:57:D1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/088F189D0C73ADF77B005E95BF5583276C57D174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F189D0C73ADF77B005E95BF5583276C57D174.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/3136382e3139342e36362e302f32332d3233203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:b7:2a:de:32:89:c9:ba:22:5c:97:e2:1a:99:7a:46:99:49:
         a7:65:62:c8:f1:13:aa:cf:ca:1a:cc:80:aa:0c:9c:92:d1:7a:
         f5:09:2e:89:98:8f:5c:60:ed:f4:cc:78:12:46:7b:f9:42:74:
         d0:2b:14:e8:93:8a:88:26:1a:ef:96:61:32:d5:03:13:f4:9f:
         8e:58:be:09:a4:9f:90:d7:bf:f9:7d:45:ba:cd:aa:c7:7d:1a:
         30:fb:50:3c:84:98:4d:83:a2:56:80:4c:80:15:05:c5:62:e1:
         34:5a:b3:a1:d9:d9:fe:a6:06:5e:8e:c3:de:aa:b2:a0:1e:bb:
         c7:2a:11:0b:3a:0b:cd:4c:b0:2d:64:13:e9:cb:e6:22:ec:29:
         ae:96:69:4e:e5:2b:1e:08:73:b4:8e:8f:87:76:f8:01:82:e6:
         ae:32:ad:53:4f:84:d7:7d:97:48:40:d3:34:87:f5:1b:38:49:
         a3:e7:eb:18:67:52:c1:45:77:ac:af:2f:3f:6e:bb:f3:27:08:
         34:2e:e1:cf:ba:e1:fd:dc:cc:2b:6c:a3:fe:7e:ad:a8:b3:69:
         3c:3b:22:23:ff:45:55:1e:f8:95:93:b3:8f:11:b7:b5:e4:e8:
         4a:0f:98:09:e1:85:57:d1:92:2f:42:6c:88:73:41:9c:ff:1e:
         2e:34:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org