Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/3136382e3139342e39362e302f32322d3234203d3e20323632363435.roa
File:                     3136382e3139342e39362e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier:          vN/mNRQ20C+ny5U0k4B3U647ID5fynyONza60vv4qMI=
Subject key identifier:   2B:BF:15:DB:4A:AC:73:3E:D9:8F:A3:95:59:28:C2:B3:C1:56:B6:D6
Certificate issuer:       /CN=4C5E4BEB7398912F161523952333D01C9BF59452
Certificate serial:       5C8782EFC8FA2CD80199324C6134574F03AB0895
Authority key identifier: 4C:5E:4B:EB:73:98:91:2F:16:15:23:95:23:33:D0:1C:9B:F5:94:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C5E4BEB7398912F161523952333D01C9BF59452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/3136382e3139342e39362e302f32322d3234203d3e20323632363435.roa
Signing time:             Thu 23 Nov 2023 23:25:28 +0000
ROA not before:           Thu 23 Nov 2023 23:20:28 +0000
ROA not after:            Thu 21 Nov 2024 23:25:28 +0000
asID:                     262645
IP address blocks:        168.194.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:87:82:ef:c8:fa:2c:d8:01:99:32:4c:61:34:57:4f:03:ab:08:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5E4BEB7398912F161523952333D01C9BF59452
        Validity
            Not Before: Nov 23 23:20:28 2023 GMT
            Not After : Nov 21 23:25:28 2024 GMT
        Subject: CN=2BBF15DB4AAC733ED98FA3955928C2B3C156B6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:08:9e:f7:6d:51:c5:04:cd:89:1f:e4:2a:37:
                    6e:9a:79:af:cf:d8:4a:c1:e4:da:3c:bf:82:5f:68:
                    85:ec:55:10:bc:bf:5c:3e:e1:b0:26:94:fb:40:c5:
                    1f:62:00:a7:b6:bb:42:f4:fd:6c:4e:db:b6:40:ff:
                    dc:99:ef:45:0f:8e:25:22:d5:e1:46:92:3d:99:c6:
                    56:b3:a4:90:20:11:ba:59:b8:56:57:0a:1a:75:1b:
                    24:04:23:19:fe:21:d6:8a:f8:dc:6e:15:43:ce:f6:
                    f5:94:e0:be:3c:80:96:2b:cf:fc:2b:a5:59:aa:9b:
                    22:81:d4:46:be:95:9e:94:35:d2:0b:bb:e9:dd:a2:
                    e0:e3:14:eb:4c:01:7f:9d:54:d2:d3:30:9d:38:c2:
                    57:10:1c:d1:4c:e1:c1:26:0e:f4:2d:3d:ff:8d:b5:
                    1e:be:f8:61:e3:b5:c7:65:7e:14:95:2c:6a:0a:f0:
                    46:e5:0f:a5:2f:9b:48:1d:dd:c7:48:49:a1:d2:36:
                    92:68:8a:88:17:c1:35:12:6f:98:b1:78:ac:53:37:
                    f7:e4:21:48:e5:ca:75:d7:9d:d9:d8:4e:b3:7d:d3:
                    4e:28:de:32:ba:ee:b5:1e:6e:9d:01:2f:49:40:d7:
                    19:d7:f2:47:8f:07:75:79:e7:3e:7e:8b:c4:67:63:
                    81:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BF:15:DB:4A:AC:73:3E:D9:8F:A3:95:59:28:C2:B3:C1:56:B6:D6
            X509v3 Authority Key Identifier:
                keyid:4C:5E:4B:EB:73:98:91:2F:16:15:23:95:23:33:D0:1C:9B:F5:94:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/4C5E4BEB7398912F161523952333D01C9BF59452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C5E4BEB7398912F161523952333D01C9BF59452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/3136382e3139342e39362e302f32322d3234203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:f4:09:9e:b8:28:c6:f6:b6:a6:0d:43:a7:43:98:41:88:78:
         30:0a:d1:2c:62:2e:54:b7:43:59:79:2d:08:32:a1:c9:9b:f9:
         6c:7d:23:34:2a:87:0b:6e:d5:b9:21:ce:53:4c:58:4d:fb:a7:
         4c:b2:f9:99:6b:1e:6e:d5:f6:a8:5b:df:13:d2:35:83:5d:a0:
         e9:0a:1e:10:b4:cf:0f:fb:82:07:fe:93:22:d2:6b:d2:46:32:
         4a:cf:8d:32:69:57:23:18:48:42:4b:d9:36:30:20:8f:27:b5:
         da:47:cd:68:b9:a9:43:fb:5b:1a:70:ab:c8:59:15:a7:80:e4:
         3f:e1:d4:56:7b:78:d5:a9:f8:7f:f8:1d:98:1a:d8:ed:ce:b4:
         e8:98:c1:7b:49:49:14:12:44:dc:37:49:fa:23:c2:f3:12:d7:
         cc:72:e9:f3:7c:64:ca:92:0b:6e:e3:9a:57:ef:97:f3:a2:52:
         4f:fd:7a:2a:85:a1:3e:fd:73:f2:c2:b9:92:10:8f:d7:38:88:
         9c:5e:ee:ab:a3:08:43:cd:13:f9:0f:2f:1b:91:50:75:3d:89:
         bc:80:e0:26:94:2b:53:1d:1d:fa:f4:98:06:82:f7:32:d0:e9:
         da:37:5b:b5:58:f4:ba:be:cf:bf:ee:11:7b:f6:38:e3:87:6f:
         37:fc:49:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org