Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3132382e302f32322d3232203d3e20323635333635.roa
File:                     3136382e3230352e3132382e302f32322d3232203d3e20323635333635.roa (raw, json)
Hash identifier:          IcS6Tupvnh59K3vTLdr4zj5GeNuhPK76ld+OHTulk1A=
Subject key identifier:   EA:2D:09:33:63:72:93:E4:ED:D1:9F:55:84:5D:73:0B:87:EC:77:22
Certificate issuer:       /CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
Certificate serial:       046FD053566ABDF9B90F54B2C16BE21705EBF43C
Authority key identifier: 47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3132382e302f32322d3232203d3e20323635333635.roa
Signing time:             Mon 11 Sep 2023 18:11:05 +0000
ROA not before:           Mon 11 Sep 2023 18:06:05 +0000
ROA not after:            Mon 09 Sep 2024 18:11:05 +0000
asID:                     265365
IP address blocks:        168.205.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6f:d0:53:56:6a:bd:f9:b9:0f:54:b2:c1:6b:e2:17:05:eb:f4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
        Validity
            Not Before: Sep 11 18:06:05 2023 GMT
            Not After : Sep  9 18:11:05 2024 GMT
        Subject: CN=EA2D0933637293E4EDD19F55845D730B87EC7722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:b4:53:9b:3d:c0:bb:47:d1:5c:4d:6e:53:
                    1d:d8:80:aa:52:63:b6:0a:1e:e6:3f:3c:63:76:d0:
                    7e:8a:00:6e:9a:9e:4d:0f:cb:25:8f:1d:24:7d:f9:
                    c3:34:87:81:21:35:e6:bb:03:18:fc:26:98:08:72:
                    ab:57:0b:b9:95:17:71:e2:ea:a6:4d:06:d1:dc:51:
                    47:34:57:9c:d2:fe:44:83:d8:1e:b8:4f:f8:3f:56:
                    f2:6a:b3:d5:bd:33:9a:86:36:eb:28:b1:dd:ca:2c:
                    e8:19:04:5e:ac:db:af:7d:c4:ec:bd:98:6a:78:a4:
                    22:d3:54:ad:16:df:7d:40:01:9f:1b:0d:ba:c7:bd:
                    d2:55:55:ff:0e:91:96:45:d8:50:29:2c:61:ef:82:
                    24:03:93:93:a2:e7:56:cc:67:71:6e:83:b3:70:44:
                    29:9f:32:7d:3b:74:a7:44:00:93:72:35:a7:72:25:
                    e4:94:86:05:4a:b4:69:2c:26:2d:51:f1:f3:e5:29:
                    8a:f6:c5:34:95:77:d0:f3:c0:5e:a8:c4:6e:24:82:
                    ef:0f:2b:9f:b2:62:91:be:5a:87:d6:c7:d4:fd:23:
                    8d:6c:ba:ce:e4:3f:af:e9:de:b9:4f:60:30:b5:9d:
                    e4:c3:53:bd:4c:85:ee:43:3c:fd:1c:a6:05:41:04:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2D:09:33:63:72:93:E4:ED:D1:9F:55:84:5D:73:0B:87:EC:77:22
            X509v3 Authority Key Identifier:
                keyid:47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3132382e302f32322d3232203d3e20323635333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:28:1c:98:92:3f:51:8d:c5:06:de:04:79:90:51:f2:49:
         a2:b8:73:99:62:58:4c:f7:2d:d1:a6:60:38:7e:49:49:15:14:
         b7:06:c7:60:49:a5:5e:73:c6:f5:98:f4:0a:87:17:d6:bf:3c:
         b8:8a:af:ee:91:54:d0:68:a9:a5:5c:e6:eb:f1:9f:41:e5:08:
         a8:d5:da:b9:bb:4d:a9:f7:b5:0f:5f:de:3b:e1:e0:01:a4:d3:
         e2:94:4c:e6:51:22:8c:4b:6d:13:18:b9:47:cd:7b:b3:3b:40:
         ad:17:cd:b8:b3:34:62:3d:54:62:4f:93:81:cb:cc:57:f8:fd:
         86:dc:0c:1f:50:95:d0:4c:3a:e7:96:05:8b:7a:a3:85:3d:a5:
         a2:0b:e3:5e:3e:de:77:b0:31:1f:85:5a:e1:db:b9:80:46:49:
         83:c9:1f:fc:21:98:09:44:a1:5c:f3:4d:06:2f:6c:ff:d3:bb:
         86:06:9c:7e:ae:3e:89:70:ab:69:53:c2:ee:9c:0e:c6:b6:a7:
         11:3b:c0:93:43:79:fa:1c:e3:2d:6b:19:ff:31:c5:ce:a5:05:
         bd:45:68:61:8e:15:51:f1:59:25:e9:ef:b9:4d:bb:32:30:62:
         66:1f:bf:39:b3:72:cf:bf:8c:ea:aa:3d:7d:77:97:ea:f8:72:
         15:c0:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org