Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3136382e3230352e3132382e302f32342d3234203d3e20323635333635.roa
File:                     3136382e3230352e3132382e302f32342d3234203d3e20323635333635.roa (raw, json)
Hash identifier:          Td+u37Tzqa8wxmSJlaZXQ6ONtqQYHUgKX08ykRi1SMQ=
Subject key identifier:   E6:67:BF:EE:A5:51:89:A5:5F:07:23:28:A8:6C:E4:C1:97:ED:EE:C1
Certificate issuer:       /CN=3ED26604F180666257EA8C65758E6A93C0EA50F8
Certificate serial:       7F7F63222F54ED3195C71E2E84618D002D6DB36A
Authority key identifier: 3E:D2:66:04:F1:80:66:62:57:EA:8C:65:75:8E:6A:93:C0:EA:50:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3136382e3230352e3132382e302f32342d3234203d3e20323635333635.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     265365
IP address blocks:        168.205.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7f:63:22:2f:54:ed:31:95:c7:1e:2e:84:61:8d:00:2d:6d:b3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED26604F180666257EA8C65758E6A93C0EA50F8
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=E667BFEEA55189A55F072328A86CE4C197EDEEC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:9a:0a:b1:e4:82:7f:3b:25:17:80:59:8c:
                    89:0e:d7:d2:c9:9b:fb:7e:5e:85:91:ae:42:99:44:
                    fd:c3:db:36:19:f1:86:0a:70:36:ef:dd:93:dc:81:
                    b5:e4:6f:b1:d5:ba:50:ab:06:c4:ee:e0:ee:9c:4d:
                    4a:72:27:fc:6c:a8:5e:f6:72:a2:12:a6:28:c3:64:
                    dd:c4:80:d1:29:cc:c2:1a:27:11:65:4a:d4:16:a2:
                    7b:f1:53:19:92:10:ba:25:3d:df:53:1e:23:37:ec:
                    7a:06:40:0c:7e:0e:5d:37:75:d7:f6:ca:85:c3:a7:
                    0f:ea:9a:a4:9c:33:29:86:5e:7c:e1:01:48:71:67:
                    cf:b5:c9:29:22:7f:59:ea:91:7f:49:5e:d8:f7:0b:
                    4e:84:d3:bd:c2:42:79:ed:d3:f6:6e:13:8f:8f:82:
                    4b:d7:f5:63:32:5a:08:7f:9c:71:fa:1e:8e:40:f9:
                    94:9d:01:45:33:22:0c:43:be:55:07:2c:5a:0b:a6:
                    a8:31:be:e6:6a:5b:53:d9:bb:d5:c2:cd:c3:16:f4:
                    7e:60:d2:a5:0f:68:3d:92:a6:c7:2b:b5:90:ea:23:
                    7b:cc:ae:ec:be:e8:17:61:08:db:5a:48:4d:8a:35:
                    d6:c8:3a:4a:e2:88:47:59:24:5b:cd:9a:ab:b2:4d:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:67:BF:EE:A5:51:89:A5:5F:07:23:28:A8:6C:E4:C1:97:ED:EE:C1
            X509v3 Authority Key Identifier:
                keyid:3E:D2:66:04:F1:80:66:62:57:EA:8C:65:75:8E:6A:93:C0:EA:50:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3136382e3230352e3132382e302f32342d3234203d3e20323635333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:0e:38:57:7f:cd:e9:3b:24:aa:db:9a:b8:ba:3c:e1:bf:
         62:fd:31:f2:1e:06:fc:84:f0:4f:0e:4e:69:03:f6:79:5f:d4:
         cf:af:55:74:4e:bb:cb:b6:f9:4c:57:65:5a:ce:12:13:ff:64:
         84:df:e3:71:c8:9a:04:06:b4:d3:51:e1:2d:fa:d4:46:58:67:
         fd:ca:57:5c:12:6a:61:cb:18:d0:07:a8:16:dc:cb:be:cf:3e:
         67:a3:88:18:61:fc:41:54:c0:58:4d:d8:29:6c:54:c7:f2:8b:
         8d:62:60:6d:3e:ad:ef:f7:2f:6d:bc:c7:83:e6:d9:ea:52:e6:
         59:26:7a:6a:67:01:2d:73:2f:d8:50:8c:6a:15:e1:87:7c:8d:
         3d:99:5d:25:e3:d8:58:5e:92:10:71:c8:da:8b:c4:6d:b1:c1:
         38:87:f2:86:3a:9e:c4:87:7b:75:1a:cf:2d:72:75:fd:4b:9b:
         2a:23:7b:6e:22:33:97:31:95:e6:3a:83:73:67:2d:15:26:61:
         09:8d:fa:e7:61:5d:95:53:e1:89:d2:e2:ed:2e:0a:d2:66:c2:
         97:33:74:30:f4:8d:05:56:78:6e:a0:f3:74:65:6c:83:da:49:
         a2:fc:e4:f1:d8:83:b1:56:dc:16:36:52:11:f0:39:a2:95:46:
         3f:e8:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org