Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/3136382e3139352e3135322e302f32332d3233203d3e20323635343335.roa
File:                     3136382e3139352e3135322e302f32332d3233203d3e20323635343335.roa (raw, json)
Hash identifier:          vXU7UeI+5WUmJQOlEtR3zRHPbKnJDZxIeIKwHbwLa2s=
Subject key identifier:   FA:7B:A7:90:74:81:84:90:F5:E0:AD:1A:C5:25:F5:F6:E5:DA:AC:9B
Certificate issuer:       /CN=7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B
Certificate serial:       370BE9E5FE810E2D7624F5A7784B5C58265DF1B2
Authority key identifier: 7A:C3:F8:6B:BB:41:4B:AC:E7:98:C3:4B:BF:24:8A:BF:FE:48:CB:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/3136382e3139352e3135322e302f32332d3233203d3e20323635343335.roa
Signing time:             Thu 29 Jun 2023 18:20:08 +0000
ROA not before:           Thu 29 Jun 2023 18:15:08 +0000
ROA not after:            Thu 27 Jun 2024 18:20:08 +0000
asID:                     265435
IP address blocks:        168.195.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0b:e9:e5:fe:81:0e:2d:76:24:f5:a7:78:4b:5c:58:26:5d:f1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B
        Validity
            Not Before: Jun 29 18:15:08 2023 GMT
            Not After : Jun 27 18:20:08 2024 GMT
        Subject: CN=FA7BA79074818490F5E0AD1AC525F5F6E5DAAC9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:91:80:64:06:58:01:d0:7f:10:19:42:91:1b:
                    fe:27:00:1e:55:ce:f3:72:e3:39:3b:2a:1b:b4:19:
                    c5:ee:c9:ff:7e:bf:0d:6c:47:b2:dc:e9:77:12:ee:
                    6a:9d:3f:2a:bc:6b:31:9e:0f:68:8c:cb:28:f7:c0:
                    d7:4c:64:a4:ea:a5:86:20:31:4a:37:3a:ea:d5:6d:
                    95:5b:0d:2a:58:e5:5e:8c:ca:c3:31:95:4f:eb:8d:
                    00:7a:ae:f5:e8:27:d4:c2:f4:96:84:72:5a:c8:c2:
                    47:6f:a3:31:da:01:b0:cf:03:39:95:74:dd:49:04:
                    35:62:7b:23:b9:79:67:5c:2b:fb:7e:a3:0d:6c:a2:
                    e7:f1:4c:d3:08:24:32:9b:2e:66:9c:2c:89:c5:89:
                    f5:bd:13:3b:f7:18:ec:5b:f8:8e:e2:b4:3a:c8:5f:
                    a2:43:f5:f9:16:1c:21:8c:b3:95:c0:1c:53:96:05:
                    db:64:c4:aa:f2:a2:65:37:65:dc:1a:92:39:07:c7:
                    47:3e:4d:11:0d:6f:e5:59:4e:56:19:af:2e:4f:d6:
                    6f:f0:07:8f:15:64:29:80:cd:01:f2:5a:98:d1:d4:
                    9a:aa:23:44:8c:08:41:62:05:85:b8:2d:f5:2f:34:
                    30:f6:33:0a:07:f2:26:58:98:6f:97:85:76:39:db:
                    02:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7B:A7:90:74:81:84:90:F5:E0:AD:1A:C5:25:F5:F6:E5:DA:AC:9B
            X509v3 Authority Key Identifier:
                keyid:7A:C3:F8:6B:BB:41:4B:AC:E7:98:C3:4B:BF:24:8A:BF:FE:48:CB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/3136382e3139352e3135322e302f32332d3233203d3e20323635343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:f4:0d:29:1c:5a:7f:1a:85:16:8d:eb:c7:99:4b:04:1a:7f:
         17:27:be:6e:1f:ca:d5:cf:7a:98:3a:31:03:85:95:3c:d9:49:
         19:eb:a9:f5:3f:ea:19:6a:a9:50:90:ad:ce:93:5d:0f:1b:f3:
         d9:af:5c:6e:f9:27:8c:94:65:a7:87:00:ec:dd:7c:a3:fd:b0:
         f2:07:77:2b:09:0f:f5:ea:a2:57:de:14:14:5c:7b:9e:3f:39:
         03:f2:77:df:f3:9a:ec:10:2d:7c:82:e7:66:44:b6:16:cc:05:
         09:67:09:01:65:9e:ae:1f:74:c3:2c:f7:d0:b3:66:3e:a9:d7:
         6c:57:db:e3:7e:58:26:2c:97:25:fe:88:41:42:ef:ae:75:84:
         ad:e1:03:f4:c6:a8:9a:db:7a:31:cd:8c:45:62:77:9c:96:72:
         59:da:02:34:45:20:97:40:f3:88:b5:1a:6f:50:8a:93:4c:c3:
         ea:ab:65:b0:fb:4d:8c:d0:ca:e8:28:6c:fa:b5:3f:ff:8e:50:
         7a:80:35:8b:0d:c1:40:fd:6c:47:9b:45:7d:5c:8a:c5:8d:25:
         24:2f:2b:8f:9c:82:09:e4:52:1f:ec:67:9b:a2:f1:be:82:a8:
         ee:1a:e4:1c:e9:50:d3:b4:3f:92:80:d1:15:6e:75:56:7d:a1:
         9d:41:4b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org