Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3132382e302f32332d3233203d3e20323635333635.roa
File:                     3136382e3230352e3132382e302f32332d3233203d3e20323635333635.roa (raw, json)
Hash identifier:          abGc5MbmPFwqC567xC10YUhGs5a4HvaRFl47B/50G7I=
Subject key identifier:   25:B7:DB:2D:2C:18:15:0C:D5:E2:C0:DB:34:A0:76:F8:68:A3:BE:ED
Certificate issuer:       /CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
Certificate serial:       1880EE705F7B2CBC488D9ABF836DDB8A3C00A8E8
Authority key identifier: 47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3132382e302f32332d3233203d3e20323635333635.roa
Signing time:             Mon 11 Sep 2023 18:11:28 +0000
ROA not before:           Mon 11 Sep 2023 18:06:28 +0000
ROA not after:            Mon 09 Sep 2024 18:11:28 +0000
asID:                     265365
IP address blocks:        168.205.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:80:ee:70:5f:7b:2c:bc:48:8d:9a:bf:83:6d:db:8a:3c:00:a8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
        Validity
            Not Before: Sep 11 18:06:28 2023 GMT
            Not After : Sep  9 18:11:28 2024 GMT
        Subject: CN=25B7DB2D2C18150CD5E2C0DB34A076F868A3BEED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:74:70:0f:e9:f4:cc:e7:be:b5:3a:0b:58:
                    ce:f1:73:26:4f:81:d9:19:f6:ec:37:9e:19:2e:03:
                    c6:3b:6e:e7:e5:1d:93:06:26:ed:bf:ec:9e:96:de:
                    85:e2:c0:38:05:0a:5f:8e:d7:5d:da:ba:67:5d:eb:
                    70:c5:3b:28:54:a7:41:68:77:ae:a6:bf:1a:65:4b:
                    39:33:95:9f:d4:fd:c7:b0:5b:27:67:32:55:aa:5f:
                    b2:9d:cf:a6:49:8f:d5:e7:cd:b7:ae:0b:01:57:66:
                    21:87:b6:ef:cf:26:f2:d2:8a:c0:07:aa:41:b7:63:
                    c8:47:3e:c4:eb:a2:59:3a:26:60:90:6e:17:49:a2:
                    96:f5:99:72:76:3e:46:a6:57:7c:2e:a6:13:99:d0:
                    a5:0b:e5:f8:23:50:ba:45:d1:1a:8e:40:02:7c:9a:
                    a5:34:3e:22:e2:d6:61:a8:19:d3:90:74:8e:c2:35:
                    8a:a8:82:5f:dd:46:ee:ee:9b:ee:bc:5d:d7:77:6a:
                    72:68:79:31:ec:92:95:92:22:e3:d0:7e:a0:1a:e1:
                    94:09:fe:70:93:cf:55:8f:44:6e:0e:ce:88:71:7f:
                    29:45:fd:3b:dc:3e:10:c8:61:e6:1e:75:7e:51:50:
                    9e:2a:fc:ae:83:08:d9:f0:a2:ea:1c:1e:f1:5d:fe:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B7:DB:2D:2C:18:15:0C:D5:E2:C0:DB:34:A0:76:F8:68:A3:BE:ED
            X509v3 Authority Key Identifier:
                keyid:47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3132382e302f32332d3233203d3e20323635333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:c1:03:45:58:f5:e1:45:3c:df:5c:2c:0f:e1:ef:2b:51:9e:
         9f:3f:4a:90:2c:be:d8:3b:b2:14:d7:91:59:0c:67:67:44:6b:
         a8:af:6d:63:dd:f9:f6:82:db:1b:1c:6e:c6:37:45:cd:60:75:
         88:d8:37:65:94:7b:02:ea:9d:ca:85:bd:fc:26:0b:04:52:d2:
         ac:71:9b:49:25:10:8a:88:94:b0:1c:70:76:06:91:33:8d:e7:
         f3:33:27:30:d9:5d:08:4a:42:6e:56:9e:df:c7:f5:92:0b:a3:
         1f:f3:cd:19:33:5a:f2:0b:35:83:4c:5d:d8:de:0a:be:41:a9:
         21:15:97:31:2f:64:3e:42:e4:7f:55:a8:a5:5a:72:fe:a6:da:
         3c:1f:39:b8:39:88:ad:3b:64:73:ee:0d:95:b8:63:e0:95:b0:
         4a:23:2d:ee:2c:b0:15:ec:fe:d8:e5:3e:65:e3:6e:c0:9c:33:
         32:d3:1d:3a:55:42:80:c1:1e:7f:bf:b9:99:1a:4c:eb:5d:05:
         33:12:16:9d:27:7c:4f:69:19:d6:2d:e1:56:2a:5c:a1:cb:c5:
         a0:22:39:51:20:d6:fa:b7:f7:35:bf:a2:10:c6:95:b8:8b:8c:
         d5:b4:b5:90:2f:94:97:2a:5e:d8:af:64:c8:51:38:0b:0c:d1:
         fd:ad:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org