Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa
File:                     3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          rBgMDIldTvWmJHPKaegRJza5h9UTe1Qq8Or/k+5Ly8U=
Subject key identifier:   A4:E6:14:80:B1:7B:1D:76:64:39:F4:87:8B:1F:CE:54:26:5B:7C:B1
Certificate issuer:       /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial:       3EF4B4F9CCE414DAEC1C3E6E5BAB22AEAB131EA3
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa
Signing time:             Mon 08 Apr 2024 20:11:32 +0000
ROA not before:           Mon 08 Apr 2024 20:06:32 +0000
ROA not after:            Mon 07 Apr 2025 20:11:32 +0000
asID:                     263665
IP address blocks:        168.196.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f4:b4:f9:cc:e4:14:da:ec:1c:3e:6e:5b:ab:22:ae:ab:13:1e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
        Validity
            Not Before: Apr  8 20:06:32 2024 GMT
            Not After : Apr  7 20:11:32 2025 GMT
        Subject: CN=A4E61480B17B1D766439F4878B1FCE54265B7CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:dd:35:9a:d0:ee:bc:1b:b8:34:e2:c6:c2:
                    1e:35:ab:3d:37:37:59:e8:5b:18:72:ed:84:1d:4b:
                    71:be:d2:99:3f:8e:b2:a7:74:2c:13:89:47:70:20:
                    c4:bb:ca:af:36:81:9a:e8:b6:40:73:c7:22:0e:0b:
                    4f:e9:c6:cd:ea:26:3e:16:af:9a:31:9e:e4:5e:35:
                    07:fb:37:fa:31:e9:38:eb:74:37:65:b2:47:42:f3:
                    76:a4:4f:a6:75:14:97:e1:3d:fa:21:a1:56:67:11:
                    21:39:68:dc:29:ac:df:bd:52:aa:38:d8:88:34:53:
                    99:60:6e:ce:f9:f7:fd:9a:e2:aa:57:a3:ce:dd:65:
                    95:b4:23:10:7d:50:91:90:7c:ff:4c:c7:7f:37:f9:
                    3d:aa:1c:13:23:ea:56:e0:a6:8a:71:43:b6:70:64:
                    f9:a5:5a:13:de:5f:47:9b:bd:dc:2d:78:2f:13:21:
                    bd:ca:8b:87:f4:96:28:24:17:ff:fb:51:03:6a:cb:
                    f4:61:dd:57:e8:ee:f7:a9:f3:e5:d9:bc:81:e1:cf:
                    21:64:af:94:c5:c5:1f:0d:8b:88:86:73:1a:f4:a7:
                    2f:d1:b1:2c:46:3f:0d:5a:87:53:1c:e2:4b:4f:65:
                    80:c8:61:2d:81:0e:30:24:48:34:3e:4a:94:39:14:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E6:14:80:B1:7B:1D:76:64:39:F4:87:8B:1F:CE:54:26:5B:7C:B1
            X509v3 Authority Key Identifier:
                keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:dd:31:d2:83:00:4e:cb:54:68:e1:9e:0d:ee:c3:1d:c7:91:
         0f:f3:e0:5b:de:cf:8c:e1:2a:db:e2:fb:1c:a5:9d:3c:2c:52:
         06:5c:2e:33:3d:23:74:e0:2c:4f:54:ce:6d:6a:c6:8b:c8:52:
         05:5f:93:45:c2:fe:5c:2f:0f:39:24:3f:5d:76:d9:0d:3d:ff:
         2a:24:92:40:32:d2:f0:6d:ba:c0:d5:71:6e:48:30:a8:a6:f1:
         da:8b:9f:be:88:90:e1:0a:b4:10:d1:96:f1:4c:ff:c2:18:48:
         bb:75:1b:29:d8:a6:15:21:72:c7:e6:43:dd:1e:d2:d3:d1:ac:
         50:f5:77:b9:a3:a9:6c:77:de:08:f0:32:61:c3:f6:c6:91:de:
         f9:ce:d2:5d:65:59:44:7a:ee:1b:62:01:4f:cf:7c:9b:f7:b1:
         45:05:2e:e7:5a:7c:12:8e:b8:6d:9f:8d:0d:b5:19:4b:8d:7d:
         85:1c:3c:4f:7d:0d:d2:53:a4:a8:48:56:f7:fa:f3:ae:cd:96:
         08:12:d3:25:6f:60:a3:2a:1f:da:4f:03:93:95:20:f8:6d:5a:
         19:26:23:76:55:3f:75:7e:31:66:84:23:69:1d:37:1e:82:33:
         1b:c7:0c:08:31:eb:3b:ec:ad:aa:8f:1c:fc:72:5f:37:05:70:
         55:d6:4e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org