Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3136382e3230352e3132382e302f32332d3233203d3e20323635333635.roa
File:                     3136382e3230352e3132382e302f32332d3233203d3e20323635333635.roa (raw, json)
Hash identifier:          yP0pWofwq9fjEIupXYjBUw/0Ve6Uyh2rGDB66TGRkhE=
Subject key identifier:   AA:8D:3F:89:99:AA:08:43:33:F3:85:83:EA:08:B8:57:B7:54:47:37
Certificate issuer:       /CN=3ED26604F180666257EA8C65758E6A93C0EA50F8
Certificate serial:       42AC015C9B8BBF34187C592E1A7D80A4E523E252
Authority key identifier: 3E:D2:66:04:F1:80:66:62:57:EA:8C:65:75:8E:6A:93:C0:EA:50:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3136382e3230352e3132382e302f32332d3233203d3e20323635333635.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     265365
IP address blocks:        168.205.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ac:01:5c:9b:8b:bf:34:18:7c:59:2e:1a:7d:80:a4:e5:23:e2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED26604F180666257EA8C65758E6A93C0EA50F8
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=AA8D3F8999AA084333F38583EA08B857B7544737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:42:62:11:8a:2d:8d:43:9c:44:c6:cc:35:
                    12:45:2b:95:d8:88:47:54:f6:e7:c5:39:43:ab:2b:
                    19:f3:2b:dd:4f:20:02:65:9c:a8:eb:bd:4c:a1:99:
                    0b:0c:eb:39:88:3a:ba:7c:69:50:ad:b0:d8:25:92:
                    2d:3e:43:5f:17:6b:28:78:45:ee:70:77:62:c6:a7:
                    03:11:86:40:51:8c:53:4b:9a:1b:fe:90:b0:01:76:
                    30:8f:c7:b6:38:63:5b:74:1e:7b:f0:4e:6c:7d:e5:
                    fc:55:23:bd:6e:f4:14:8e:e4:80:49:e0:af:fa:a9:
                    90:37:2d:2a:78:69:84:6e:74:ca:ed:83:f3:96:d0:
                    ae:87:84:d9:6d:3a:e3:28:43:ff:5c:1d:e3:2e:2b:
                    f9:e8:b3:3f:85:a5:bc:08:71:2c:a0:d2:7e:5d:37:
                    7e:5a:d0:fa:43:1e:53:a4:64:7c:25:63:ad:13:59:
                    a3:27:3e:fe:fd:13:fb:39:31:4e:f4:ac:cb:61:60:
                    81:19:2c:b1:21:23:7c:85:17:c3:a2:e2:70:65:3a:
                    d4:61:a2:94:0d:28:43:f3:03:12:55:04:19:06:8b:
                    05:dd:80:a9:15:1c:f9:d3:27:87:b0:e9:57:66:e9:
                    4b:4e:9f:b0:ef:50:b5:d7:e6:8c:4c:26:21:91:ce:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8D:3F:89:99:AA:08:43:33:F3:85:83:EA:08:B8:57:B7:54:47:37
            X509v3 Authority Key Identifier:
                keyid:3E:D2:66:04:F1:80:66:62:57:EA:8C:65:75:8E:6A:93:C0:EA:50:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3136382e3230352e3132382e302f32332d3233203d3e20323635333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:68:2d:11:e3:04:80:15:dd:b6:a9:d1:7e:7e:e9:cc:49:92:
         70:a2:0f:8a:e4:28:9a:1c:15:68:1a:98:fc:cc:2f:20:3d:95:
         9e:4e:d3:9e:14:88:a5:0c:dd:85:4e:06:3a:66:12:1c:15:76:
         45:15:b3:80:16:e3:10:30:0a:b0:ce:fd:a5:5c:08:45:77:6c:
         7c:54:32:52:f5:b9:38:2c:9b:c9:34:28:21:d6:4d:c8:c0:b6:
         80:29:76:76:05:4e:91:bb:ba:69:6f:3c:25:48:6c:72:48:8f:
         26:4c:cb:ed:ea:2b:8b:f9:55:2d:2b:43:41:3d:57:ef:72:9e:
         05:c3:73:b2:2f:87:18:ca:60:81:e6:62:4a:f9:cb:2e:35:ba:
         9b:c6:7c:32:5a:64:b9:f5:1e:d2:d3:80:5d:86:47:73:48:78:
         76:4f:31:7d:65:ab:5c:24:f5:fa:5f:72:52:21:80:46:c4:67:
         b2:36:07:0f:b9:ee:2f:07:25:5e:ac:d6:d8:9a:a1:93:2a:b7:
         52:d3:44:bd:c2:03:04:da:01:48:1b:a0:54:9b:d5:b3:0a:23:
         5d:1e:4a:5f:48:be:72:9a:6b:39:70:e0:a4:4b:73:ec:01:6e:
         e0:37:0f:58:03:b3:7b:41:a2:78:d4:86:6c:5f:a2:4d:b4:73:
         57:f4:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org