Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/3136382e3138312e36362e302f32332d3233203d3e20323635333238.roa
File:                     3136382e3138312e36362e302f32332d3233203d3e20323635333238.roa (raw, json)
Hash identifier:          x5EueAE1M7zz8aTI0eudw18jcSO0Aj7JCStLDI8axfI=
Subject key identifier:   DD:6E:D5:78:7E:2C:C5:A3:01:1B:18:81:51:98:B6:CB:A0:59:17:AB
Certificate issuer:       /CN=7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12
Certificate serial:       294FBA555855AA89CBCA7AA15CCC68E4F6FA043C
Authority key identifier: 7F:4B:88:B5:BE:DB:CA:A5:FE:25:F0:48:1C:69:FC:C7:ED:70:1C:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/3136382e3138312e36362e302f32332d3233203d3e20323635333238.roa
Signing time:             Wed 03 Apr 2024 19:16:02 +0000
ROA not before:           Wed 03 Apr 2024 19:11:02 +0000
ROA not after:            Wed 02 Apr 2025 19:16:02 +0000
asID:                     265328
IP address blocks:        168.181.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4f:ba:55:58:55:aa:89:cb:ca:7a:a1:5c:cc:68:e4:f6:fa:04:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12
        Validity
            Not Before: Apr  3 19:11:02 2024 GMT
            Not After : Apr  2 19:16:02 2025 GMT
        Subject: CN=DD6ED5787E2CC5A3011B18815198B6CBA05917AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:b4:17:02:25:0e:c7:9d:51:b7:61:26:cd:
                    d9:10:82:36:34:7d:9a:cc:93:c6:97:00:e3:cc:73:
                    c9:9a:31:8a:ca:f5:8a:d2:83:72:03:4a:ec:65:80:
                    f4:fb:9c:f8:81:98:2a:68:e3:51:ed:58:f6:cc:4d:
                    34:f9:ce:c3:60:c9:03:3d:12:30:60:e1:76:81:b3:
                    02:8d:5b:60:eb:e0:3f:0b:96:7d:ec:c0:37:1a:16:
                    ec:ae:b9:9e:92:c1:6a:21:a2:d8:4c:77:4c:e0:bf:
                    e2:4f:85:84:be:e2:b4:58:8f:c1:82:84:b4:b6:4f:
                    97:42:b7:cc:f1:b2:44:d2:f1:dd:21:a5:aa:98:99:
                    57:9e:5f:02:f0:99:fd:6e:aa:3e:ca:16:d3:74:69:
                    7f:a9:9b:d2:10:58:e1:05:76:39:f1:07:14:f6:14:
                    9f:bd:6a:4a:ab:15:3e:a5:49:3b:4a:ef:09:00:35:
                    1e:e4:57:b8:77:54:dd:22:13:f4:3e:be:f9:53:de:
                    20:45:e8:1d:0d:61:36:7f:09:25:78:e9:e0:a9:ec:
                    b8:f9:f1:73:bd:27:fb:0a:c1:b3:5e:99:7a:96:13:
                    ff:26:ea:e5:4d:f1:e9:cf:ef:84:54:4a:7d:28:c6:
                    47:35:a5:2c:99:90:61:07:03:b5:dd:37:ec:6b:b7:
                    d6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6E:D5:78:7E:2C:C5:A3:01:1B:18:81:51:98:B6:CB:A0:59:17:AB
            X509v3 Authority Key Identifier:
                keyid:7F:4B:88:B5:BE:DB:CA:A5:FE:25:F0:48:1C:69:FC:C7:ED:70:1C:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/3136382e3138312e36362e302f32332d3233203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:84:8f:2d:a5:43:1f:df:72:3b:08:9e:aa:b5:1b:f1:60:ca:
         af:e7:b9:da:9b:21:17:2d:b6:a8:21:1d:17:aa:4a:0c:56:31:
         5b:22:b9:83:f8:9d:46:06:f5:16:d4:d4:e1:a5:ba:99:4a:03:
         11:56:ea:04:d8:e7:96:2f:b5:d0:85:b5:50:77:d5:56:7d:8f:
         fe:dc:b1:3e:10:9b:f7:06:a3:8e:4d:99:48:8d:0d:7d:a1:2e:
         e8:85:eb:f9:1f:30:7f:59:db:64:b5:0d:b5:8d:10:c9:0f:9a:
         ff:7a:eb:19:d7:35:a6:71:62:01:74:15:a1:40:67:b9:85:a7:
         11:c5:f9:ee:d2:27:30:7e:ba:61:ec:57:34:7b:37:cf:5f:fd:
         19:60:f4:3e:da:67:f6:aa:72:24:94:e3:ba:7a:89:54:03:5d:
         45:ab:42:4e:fc:14:0a:ce:99:68:0a:ec:90:1d:13:21:83:d0:
         69:33:83:f0:a9:c7:21:6b:36:cd:42:82:df:11:e1:c0:1c:54:
         9c:b7:e8:fd:d3:ef:b7:53:83:e1:ce:ec:58:93:fe:ff:b1:38:
         25:93:79:d4:ec:c7:91:6a:66:81:1a:bc:e6:e5:56:50:ca:16:
         70:b8:6b:a7:7c:9c:7c:19:9c:b4:a4:78:b2:4d:ff:c9:1c:3c:
         5e:69:8b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org