Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3136382e3230352e3132392e302f32342d3234203d3e20323635333635.roa
File:                     3136382e3230352e3132392e302f32342d3234203d3e20323635333635.roa (raw, json)
Hash identifier:          Ijl8/8sVJ3vNbxQODyaA9XJ27gA3VBqO3Yd/zVHPIwE=
Subject key identifier:   C9:54:69:C0:3B:C2:DD:77:11:8C:D1:8F:D2:53:83:1F:BC:FF:88:14
Certificate issuer:       /CN=3ED26604F180666257EA8C65758E6A93C0EA50F8
Certificate serial:       310C56A85237722B3E18D30A5DDE7CBED9432A75
Authority key identifier: 3E:D2:66:04:F1:80:66:62:57:EA:8C:65:75:8E:6A:93:C0:EA:50:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3136382e3230352e3132392e302f32342d3234203d3e20323635333635.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     265365
IP address blocks:        168.205.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0c:56:a8:52:37:72:2b:3e:18:d3:0a:5d:de:7c:be:d9:43:2a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED26604F180666257EA8C65758E6A93C0EA50F8
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=C95469C03BC2DD77118CD18FD253831FBCFF8814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:00:62:97:fa:c2:0d:9a:2c:22:6b:f9:33:d7:
                    09:66:d7:e4:ff:d3:83:dc:9e:84:79:60:9e:13:cf:
                    5d:20:c9:f9:73:1f:f0:01:6c:65:c5:2e:57:0f:b7:
                    d1:9d:e5:57:ae:cd:ce:00:6a:08:f5:ee:7e:37:17:
                    93:f8:cf:02:a1:2e:4b:22:86:6c:50:af:23:7b:0d:
                    fa:bd:5c:03:b4:c5:06:3e:c0:c7:e4:40:fc:bd:bd:
                    4d:74:09:0d:6a:47:4a:c2:80:39:26:5e:30:68:ad:
                    a7:b2:4e:cc:e7:4f:86:a6:a6:8d:c8:fd:e6:94:6b:
                    e7:b7:26:0f:78:11:dc:cc:c8:83:79:e9:65:09:5a:
                    b8:30:89:36:e7:d6:bd:9f:c8:c0:61:64:81:ad:40:
                    86:4e:6b:3f:52:74:27:01:48:44:06:ce:d4:47:af:
                    e6:c0:6b:52:ea:3a:e6:8c:6f:a2:4d:20:d0:8c:5e:
                    06:fc:fc:cd:8b:06:53:a6:d5:57:25:13:c2:56:cb:
                    e0:1f:17:0a:b1:ae:5b:5b:e8:d3:c8:39:03:67:eb:
                    f1:12:0b:04:95:ed:e5:0e:f8:4a:e9:b2:9e:d1:25:
                    ab:a4:17:18:d3:22:10:59:ba:7b:52:d4:6f:57:aa:
                    de:44:4b:8a:eb:b3:93:b0:6a:a2:00:29:da:fb:cc:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:69:C0:3B:C2:DD:77:11:8C:D1:8F:D2:53:83:1F:BC:FF:88:14
            X509v3 Authority Key Identifier:
                keyid:3E:D2:66:04:F1:80:66:62:57:EA:8C:65:75:8E:6A:93:C0:EA:50:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED26604F180666257EA8C65758E6A93C0EA50F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/1/3136382e3230352e3132392e302f32342d3234203d3e20323635333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:21:c6:43:4f:12:2d:d3:43:fd:ae:d5:e5:8f:fd:49:c4:
         83:35:bd:92:08:a2:d1:10:5a:23:de:c9:50:c6:e5:a2:d1:66:
         4b:8d:69:1b:bd:01:cc:d1:5a:75:df:16:ad:f4:2c:e9:dd:4c:
         d5:c3:91:de:5b:c7:a8:51:e8:7a:16:53:67:9d:c5:7f:b3:27:
         a6:c2:4a:3c:3d:4f:b0:2f:e5:6d:4b:51:3b:38:be:9b:16:70:
         a0:67:72:e2:5e:da:d5:ea:3f:7f:ec:94:6c:c6:aa:83:ea:5b:
         e6:b7:c6:98:85:c3:a8:d7:d8:ed:d4:23:1b:0d:f6:4e:38:c4:
         b7:f9:05:87:f2:3b:52:f4:3c:cb:10:a8:cb:dc:a0:2e:42:82:
         ea:48:62:97:27:2b:82:c1:1c:35:06:e6:64:4c:69:c5:f2:04:
         b9:97:2b:6b:bc:54:35:df:ed:9d:36:a4:af:b4:28:93:0b:a4:
         c8:72:35:c9:4e:c2:aa:49:84:29:77:9e:26:b6:bf:b0:5f:93:
         62:b4:ad:b4:2f:77:b3:0e:d9:a8:50:a5:82:b2:a6:fd:03:9a:
         36:c2:78:e0:08:a8:e5:07:92:da:5d:69:35:d8:13:b9:37:cf:
         cd:9f:d1:a5:2e:f1:c5:d7:bb:e4:11:10:02:9c:43:93:30:3d:
         06:70:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org