Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/3136382e3138312e36342e302f32342d3234203d3e20323635333238.roa
File:                     3136382e3138312e36342e302f32342d3234203d3e20323635333238.roa (raw, json)
Hash identifier:          o/1k964dELI3xXWYqNA/Qd7xf2U8Q2iWsZN74YiVgI4=
Subject key identifier:   D1:72:7E:E6:6C:9D:9E:9B:47:2C:2A:82:DB:9A:CA:07:1A:15:89:24
Certificate issuer:       /CN=7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12
Certificate serial:       3995E1838500E5B71518E9D03B74A94C34E36D7E
Authority key identifier: 7F:4B:88:B5:BE:DB:CA:A5:FE:25:F0:48:1C:69:FC:C7:ED:70:1C:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/3136382e3138312e36342e302f32342d3234203d3e20323635333238.roa
Signing time:             Wed 03 Apr 2024 19:16:04 +0000
ROA not before:           Wed 03 Apr 2024 19:11:04 +0000
ROA not after:            Wed 02 Apr 2025 19:16:04 +0000
asID:                     265328
IP address blocks:        168.181.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:95:e1:83:85:00:e5:b7:15:18:e9:d0:3b:74:a9:4c:34:e3:6d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12
        Validity
            Not Before: Apr  3 19:11:04 2024 GMT
            Not After : Apr  2 19:16:04 2025 GMT
        Subject: CN=D1727EE66C9D9E9B472C2A82DB9ACA071A158924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:98:2b:a7:e0:55:41:43:2c:02:ab:5e:19:
                    1c:c0:9f:50:8f:01:d9:20:83:9d:72:d0:b2:27:f1:
                    65:56:8c:98:dc:bf:74:d1:fa:6f:26:42:a8:b7:11:
                    1d:e9:8a:a1:5b:9d:e9:29:41:ad:24:07:1a:a2:50:
                    98:ef:86:a6:59:b0:af:e9:da:6d:1b:2a:a8:f7:56:
                    c3:22:db:8f:ce:6d:5b:72:b1:46:0a:7a:7e:a7:11:
                    d2:0b:df:ba:a5:a6:8a:3f:1b:b8:e7:e6:6d:55:25:
                    50:32:95:8e:0b:b9:d6:38:ca:14:19:70:4d:10:34:
                    2b:11:a3:67:88:e6:4b:62:fe:8a:25:93:7f:d1:1e:
                    7f:75:19:e7:e8:d4:59:9b:8a:98:1f:fb:97:e7:6a:
                    f5:9f:ae:92:74:3c:c8:fd:ae:40:b7:c3:59:57:96:
                    2b:00:ec:32:81:fe:37:3b:19:1d:b0:70:e5:52:d0:
                    98:cf:7c:51:6f:9f:08:b1:a5:06:b8:f4:e1:3f:71:
                    77:c5:7c:4a:6d:68:60:d1:74:27:20:51:3b:c9:cf:
                    35:19:ff:0a:0b:8d:05:a4:bf:db:ad:81:76:e5:6d:
                    5c:60:68:31:9a:75:eb:fb:97:6f:23:0e:53:ba:f8:
                    77:69:fa:0b:59:a3:e4:ee:32:e7:15:d4:bc:b2:d6:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:72:7E:E6:6C:9D:9E:9B:47:2C:2A:82:DB:9A:CA:07:1A:15:89:24
            X509v3 Authority Key Identifier:
                keyid:7F:4B:88:B5:BE:DB:CA:A5:FE:25:F0:48:1C:69:FC:C7:ED:70:1C:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/3136382e3138312e36342e302f32342d3234203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:5e:22:27:c7:08:8c:17:f0:6b:06:19:ce:63:16:6b:73:5d:
         3a:65:d7:ac:64:42:e3:f3:f5:29:6a:9a:aa:00:c8:08:cb:32:
         b0:0c:8a:06:15:40:88:1e:cc:5f:d8:31:a8:8e:89:b3:7b:30:
         45:0e:a8:f7:b5:7e:ee:40:c0:b8:36:5c:c7:68:50:fe:c7:a0:
         60:15:e8:91:e7:c6:1a:47:e5:7a:aa:7d:29:1a:4f:2a:1b:1a:
         d6:b6:4d:e5:a5:c1:21:61:8c:7d:27:12:39:7f:5a:0c:d8:92:
         39:a9:ac:e6:25:17:a2:4c:68:a8:9e:4c:0d:b8:f8:c1:be:dd:
         b2:32:ed:03:33:d5:9d:ca:93:2f:40:f8:25:9a:a2:0c:5a:03:
         aa:e7:44:b4:b1:05:55:91:1f:08:23:67:9c:73:1d:1e:d9:d6:
         83:a7:8f:29:62:bf:f3:ab:c6:c5:33:e2:9a:3b:96:55:86:de:
         bf:24:cd:9a:71:fd:47:43:e4:bd:68:f3:58:f1:c6:83:6e:d4:
         9d:d9:04:5e:e3:d2:a1:50:aa:8a:69:ca:12:5f:98:f9:a3:28:
         31:b4:59:d9:f9:99:f9:72:fa:24:7c:78:bb:f9:33:88:8d:f9:
         f7:6a:58:2f:13:c6:15:1b:cb:06:5a:d9:7c:07:8a:a7:fc:7b:
         14:9b:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org