Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/3136382e3138312e36372e302f32342d3234203d3e20323635333238.roa
File:                     3136382e3138312e36372e302f32342d3234203d3e20323635333238.roa (raw, json)
Hash identifier:          DWHlRqKJdpjZ78y19FCf8L6wrA9RlChv2ARA95PkJOA=
Subject key identifier:   34:75:25:3E:19:04:EA:C5:B4:05:C5:60:09:19:EE:19:90:75:4F:0A
Certificate issuer:       /CN=7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12
Certificate serial:       1EE9B813EC66931858EB796042AC3C41D6AAD635
Authority key identifier: 7F:4B:88:B5:BE:DB:CA:A5:FE:25:F0:48:1C:69:FC:C7:ED:70:1C:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/3136382e3138312e36372e302f32342d3234203d3e20323635333238.roa
Signing time:             Wed 03 Apr 2024 19:16:04 +0000
ROA not before:           Wed 03 Apr 2024 19:11:04 +0000
ROA not after:            Wed 02 Apr 2025 19:16:04 +0000
asID:                     265328
IP address blocks:        168.181.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e9:b8:13:ec:66:93:18:58:eb:79:60:42:ac:3c:41:d6:aa:d6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12
        Validity
            Not Before: Apr  3 19:11:04 2024 GMT
            Not After : Apr  2 19:16:04 2025 GMT
        Subject: CN=3475253E1904EAC5B405C5600919EE1990754F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c8:c0:cb:9a:4a:8c:55:4b:75:23:87:21:f3:
                    85:a1:4b:57:8a:ec:c4:e5:6f:40:49:9b:f9:6b:5b:
                    5d:00:98:f7:83:29:3c:d0:c0:fd:05:23:26:88:fc:
                    5b:5c:9c:9a:44:cf:d8:97:c5:60:6e:46:63:6c:d3:
                    2c:54:2b:70:30:07:45:d1:5d:10:7f:78:cc:b7:87:
                    40:04:6f:b7:b1:49:2d:0a:9d:55:6a:be:93:e2:59:
                    c7:80:23:84:82:4f:2d:2a:33:85:ed:0c:fd:ce:49:
                    77:03:d3:ef:c6:cc:41:d0:44:4a:24:0b:fa:c5:1f:
                    2a:18:66:f4:f2:06:eb:de:c4:57:9e:b2:5b:06:8e:
                    d7:81:e3:9d:36:b6:e3:86:33:5f:7f:4f:ee:4f:17:
                    5c:dc:d9:29:58:d0:b8:77:26:36:c8:ac:d0:80:b8:
                    80:9c:28:d7:d9:c7:27:e1:09:86:64:a6:7c:22:38:
                    88:e9:8b:c4:8b:f3:ee:d9:8c:4e:eb:cd:47:da:6f:
                    cf:40:7e:9e:4b:b1:10:f4:e2:3d:2b:df:b6:47:cf:
                    01:fd:10:e2:05:84:d1:b4:a0:8a:53:e6:8b:2e:c8:
                    ae:fb:95:4c:8f:1f:6f:63:c3:06:51:21:1f:7f:44:
                    69:d0:9a:85:1d:6c:ba:7b:1b:6a:39:19:de:fe:1b:
                    6b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:75:25:3E:19:04:EA:C5:B4:05:C5:60:09:19:EE:19:90:75:4F:0A
            X509v3 Authority Key Identifier:
                keyid:7F:4B:88:B5:BE:DB:CA:A5:FE:25:F0:48:1C:69:FC:C7:ED:70:1C:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/3136382e3138312e36372e302f32342d3234203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:1d:fd:58:56:95:74:d9:5b:13:c1:d1:c8:af:1c:06:a1:77:
         e7:9b:64:5b:fa:38:1b:7e:b4:78:b9:5b:d8:ec:26:a1:48:2f:
         b7:58:ca:f3:67:8f:1e:0f:10:01:7f:87:e2:6b:9e:a1:2e:62:
         88:27:be:3e:71:a5:a4:06:c1:1d:31:07:7c:62:39:ef:2f:3a:
         54:e6:95:ba:aa:39:a9:97:ee:a3:52:d6:38:03:56:f9:e4:79:
         99:0d:3e:2a:2d:55:d8:72:13:a3:70:5d:c6:64:04:c5:91:08:
         e4:36:4f:a6:83:cd:f1:b1:23:53:3f:2a:0c:bd:75:1c:57:44:
         37:12:f8:ac:fb:7f:d8:a7:71:c5:56:19:50:26:9e:93:59:0f:
         e5:07:35:af:ff:2f:80:02:2a:6f:18:9a:e9:8d:7b:7c:92:09:
         b1:9f:51:fb:14:a4:ff:00:cf:2b:7a:a4:bc:42:b7:3d:0e:51:
         49:75:ea:85:93:e3:6a:bd:bb:f9:49:10:82:2a:84:ff:f1:b9:
         56:3c:2b:28:a7:33:d3:e3:f8:28:9e:98:eb:ee:60:f3:b9:70:
         c6:41:49:b5:8d:ad:26:04:8f:6d:3f:f0:c7:0b:ef:40:e3:7d:
         0e:73:d6:c5:5a:a5:88:43:8e:f5:96:49:22:d3:7c:77:93:b4:
         81:82:8f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org