Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3136382e3138312e31322e302f32342d3234203d3e20323635333335.roa
File:                     3136382e3138312e31322e302f32342d3234203d3e20323635333335.roa (raw, json)
Hash identifier:          /ZMXvukusEBx5VCpDXuni9Cn1OFCcUojAc832NVId3c=
Subject key identifier:   35:AB:98:4D:95:33:CC:5D:41:8E:4E:EF:F1:29:CE:6E:8F:A9:FD:84
Certificate issuer:       /CN=F263F2205304C2F06E9E9C8B6E4D4475AC4358A5
Certificate serial:       5F344E3C75F285CADC4A1E690E1637590F37A464
Authority key identifier: F2:63:F2:20:53:04:C2:F0:6E:9E:9C:8B:6E:4D:44:75:AC:43:58:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3136382e3138312e31322e302f32342d3234203d3e20323635333335.roa
Signing time:             Wed 20 Dec 2023 19:15:53 +0000
ROA not before:           Wed 20 Dec 2023 19:10:53 +0000
ROA not after:            Wed 18 Dec 2024 19:15:53 +0000
asID:                     265335
IP address blocks:        168.181.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:34:4e:3c:75:f2:85:ca:dc:4a:1e:69:0e:16:37:59:0f:37:a4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F263F2205304C2F06E9E9C8B6E4D4475AC4358A5
        Validity
            Not Before: Dec 20 19:10:53 2023 GMT
            Not After : Dec 18 19:15:53 2024 GMT
        Subject: CN=35AB984D9533CC5D418E4EEFF129CE6E8FA9FD84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:8c:ff:3d:3f:4c:73:62:09:c5:59:cf:96:
                    91:fc:36:db:d5:2c:b8:9c:ce:ca:4a:ec:0e:22:63:
                    b0:7a:54:26:16:d3:71:b0:06:c4:3b:1c:29:74:39:
                    db:cc:e7:d8:d5:87:c7:a3:37:73:71:d8:fe:15:db:
                    6b:6a:a2:7c:77:9d:28:9d:f2:37:bf:77:dc:c3:64:
                    ef:06:24:e1:24:f0:1f:6b:f1:f6:a1:dd:ed:c1:6f:
                    ad:64:d7:29:c5:19:15:4c:37:ed:35:e1:3b:87:ae:
                    70:fb:7f:2f:5a:f3:a3:df:7a:b0:87:c4:c1:70:3e:
                    b6:af:18:1e:a3:b5:e1:85:f4:fa:d2:c1:ea:dd:0b:
                    79:5c:20:b8:37:ea:c6:d7:cf:d1:2a:aa:00:ae:60:
                    5e:e4:7a:c0:dd:cc:a3:52:27:ad:ab:a6:46:7a:ee:
                    64:89:39:ec:ee:7b:e7:57:63:14:73:4c:f4:73:1a:
                    6c:87:4b:c2:9f:83:19:8e:fe:84:a9:1f:21:b3:1b:
                    77:04:fa:25:96:4b:a4:68:b3:de:d9:f5:38:c8:f3:
                    54:e1:95:27:08:e8:83:f7:b3:36:1d:62:b0:87:2b:
                    61:b5:42:20:e3:99:13:f1:6f:2c:8d:96:0a:2b:3e:
                    1f:36:b9:58:2a:fb:87:ca:c1:82:91:43:0a:c3:28:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AB:98:4D:95:33:CC:5D:41:8E:4E:EF:F1:29:CE:6E:8F:A9:FD:84
            X509v3 Authority Key Identifier:
                keyid:F2:63:F2:20:53:04:C2:F0:6E:9E:9C:8B:6E:4D:44:75:AC:43:58:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3136382e3138312e31322e302f32342d3234203d3e20323635333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ae:33:c5:cd:00:15:0d:7e:51:91:5f:d4:1f:69:ba:82:8b:
         67:3f:95:d4:af:d3:8f:74:30:6b:a9:69:d3:d6:28:a6:70:6e:
         5b:67:09:c0:fc:4b:dc:cb:67:e0:f3:1d:a7:f7:52:50:b8:f0:
         24:ac:97:ac:86:8b:31:e5:f2:e2:dd:48:f1:0c:dd:8b:d1:61:
         c9:48:f6:e0:38:8a:6a:a3:7a:00:f8:13:23:6d:51:51:b0:5f:
         18:47:71:f7:59:5b:30:33:3c:a4:be:2f:18:1b:66:6a:89:52:
         61:7d:23:fa:0f:45:0c:08:fc:94:04:c5:5c:a5:52:08:a2:05:
         8b:3a:4b:23:81:1b:b7:91:a0:02:49:ef:8f:15:20:76:eb:73:
         f5:7e:aa:9c:d0:7b:c0:84:3b:b6:5a:62:d8:9b:9d:e7:f3:11:
         4d:d5:2a:f8:10:cd:4c:f6:40:3b:a0:78:8b:65:e8:ae:06:a5:
         7e:7f:0c:ea:bd:23:53:ba:49:cc:74:a3:01:65:e6:7e:09:96:
         4a:79:a2:5b:8e:15:c5:bc:e2:0a:2b:ef:34:3e:de:5d:48:ca:
         d8:52:02:2b:93:61:0c:be:01:80:cb:c3:54:15:93:cc:4f:5b:
         2c:29:01:d7:00:b0:d9:d7:b3:1c:66:02:75:76:1e:0b:81:eb:
         ab:24:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org