Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa
File:                     3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa (raw, json)
Hash identifier:          bsE6Gx3BXdUyrtAS9BKpyGVF5HjgWfrDMsVgE5Q/iVQ=
Subject key identifier:   B4:D7:DA:18:C2:6E:E8:B0:88:62:D3:79:43:51:11:77:98:4E:DE:92
Certificate issuer:       /CN=7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12
Certificate serial:       202A61EC69D36ECB08B5F6B1C4FE841470F3F967
Authority key identifier: 7F:4B:88:B5:BE:DB:CA:A5:FE:25:F0:48:1C:69:FC:C7:ED:70:1C:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa
Signing time:             Wed 03 Apr 2024 19:16:04 +0000
ROA not before:           Wed 03 Apr 2024 19:11:04 +0000
ROA not after:            Wed 02 Apr 2025 19:16:04 +0000
asID:                     265328
IP address blocks:        168.181.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2a:61:ec:69:d3:6e:cb:08:b5:f6:b1:c4:fe:84:14:70:f3:f9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12
        Validity
            Not Before: Apr  3 19:11:04 2024 GMT
            Not After : Apr  2 19:16:04 2025 GMT
        Subject: CN=B4D7DA18C26EE8B08862D37943511177984EDE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:c0:5f:ea:75:6f:bd:1a:2b:b5:b8:36:22:
                    68:66:70:ea:c4:52:dc:95:3f:a9:62:d1:15:3d:5a:
                    12:04:65:1c:46:92:1f:07:a6:01:a6:db:e6:1e:07:
                    0f:2b:36:dc:b4:e1:e9:81:c0:e0:46:88:20:5b:bb:
                    cd:41:75:2c:62:ec:a6:62:33:b4:53:85:6e:d3:14:
                    a6:bf:51:d3:5b:e8:0d:c2:fc:5f:ac:85:f5:ea:f1:
                    d1:d6:57:1c:39:95:a0:84:f2:98:e4:4d:ef:12:cd:
                    08:e3:53:e7:ec:e6:91:8d:86:ca:82:f8:3d:65:5e:
                    f1:ef:a2:ce:3f:1b:6c:07:48:ec:cf:9b:8b:de:6b:
                    bb:f1:a8:87:ba:d2:56:a5:45:39:e7:4f:55:01:c8:
                    e3:66:7f:f6:5f:50:64:29:3f:25:56:23:c4:9b:ae:
                    db:4c:cd:31:a1:54:86:46:ad:b2:f0:f6:70:8b:3d:
                    71:b6:1f:51:fc:cb:23:0c:d2:99:29:2a:49:c3:dd:
                    45:0d:99:60:0c:57:bd:6b:75:26:90:04:08:d3:ad:
                    a3:58:9a:3d:2b:2b:db:fa:05:e7:ae:e7:7a:7c:e8:
                    b9:fc:d6:81:03:8c:31:64:41:e0:61:7d:fb:05:5c:
                    3d:99:37:ea:be:33:40:b0:56:50:ab:73:37:37:1f:
                    97:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D7:DA:18:C2:6E:E8:B0:88:62:D3:79:43:51:11:77:98:4E:DE:92
            X509v3 Authority Key Identifier:
                keyid:7F:4B:88:B5:BE:DB:CA:A5:FE:25:F0:48:1C:69:FC:C7:ED:70:1C:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:b7:d6:07:e5:a1:4d:f1:d3:f2:4f:9d:34:89:93:e1:11:1d:
         43:3d:9d:fa:ad:f1:4e:d9:44:74:c9:1a:d4:dd:56:4a:82:34:
         35:0e:ac:63:31:04:52:41:16:15:cc:6c:ee:8b:af:cf:da:d9:
         32:29:ad:35:d7:bf:a7:c9:dd:c7:01:c9:13:d3:ef:98:72:4f:
         1a:5a:25:76:c6:49:4d:eb:31:f7:2e:80:c1:27:24:6c:e5:ae:
         70:b5:7e:1f:1f:fd:2b:4b:fa:8f:d5:dd:dd:11:54:fe:03:d2:
         33:16:24:ea:c3:3d:c6:0d:10:9f:ba:9c:f9:63:cd:ee:eb:52:
         53:be:cf:71:2d:a2:51:03:6e:27:ae:16:04:03:36:57:8b:35:
         69:cd:1c:76:d4:6f:e1:7d:b5:a8:fb:51:17:9e:1e:96:b8:8d:
         4e:a8:8c:dd:8b:97:37:05:4f:ff:ed:77:33:ff:77:6b:8d:fb:
         4b:02:38:e6:40:c0:cf:55:7f:9e:67:1f:11:d9:25:5f:96:6a:
         69:09:b8:01:f3:a4:58:ba:22:46:c4:07:96:af:44:b0:70:24:
         c7:81:82:e1:5a:2c:90:cb:aa:e9:a3:ac:07:90:ce:d7:5f:b3:
         3f:19:a2:2d:da:fc:79:58:75:de:b9:10:35:9e:cf:7e:ea:b2:
         2b:69:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org