Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3130382e302f32332d3233203d3e20323632383139.roa
File:                     3136382e3139362e3130382e302f32332d3233203d3e20323632383139.roa (raw, json)
Hash identifier:          cLUyWsv2ne8kbDWyRiwOBfTFuGHCceeb13KZ6ghVK2k=
Subject key identifier:   29:FA:BC:50:D9:E6:08:8A:41:B9:FB:C0:94:53:B6:32:63:E1:1D:C9
Certificate issuer:       /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial:       489C8A5A183E91CE42C01FB7FE9400ACA83A989A
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3130382e302f32332d3233203d3e20323632383139.roa
Signing time:             Wed 09 Nov 2022 20:11:02 +0000
ROA not before:           Wed 09 Nov 2022 20:06:02 +0000
ROA not after:            Wed 08 Nov 2023 20:11:02 +0000
asID:                     262819
IP address blocks:        168.196.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9c:8a:5a:18:3e:91:ce:42:c0:1f:b7:fe:94:00:ac:a8:3a:98:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
        Validity
            Not Before: Nov  9 20:06:02 2022 GMT
            Not After : Nov  8 20:11:02 2023 GMT
        Subject: CN=29FABC50D9E6088A41B9FBC09453B63263E11DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:67:a6:8a:41:cc:78:dd:9a:0b:46:6f:35:
                    83:6a:0a:75:5d:4d:e3:02:73:27:eb:2b:22:5a:71:
                    92:b6:d1:50:8e:c5:d5:20:79:f2:3d:31:8a:ce:0c:
                    a9:3c:28:e3:7f:26:11:84:89:a9:66:66:18:c8:02:
                    03:61:6c:2a:f3:8d:f7:c6:ba:94:1d:a6:67:a9:38:
                    40:ea:af:0f:2c:4c:a1:38:d7:e2:db:4d:0d:07:f9:
                    52:74:b8:03:62:3a:a9:9f:b3:7c:31:c2:bc:30:ee:
                    cb:51:48:59:e4:4f:7e:d5:3d:96:6e:5e:76:4b:f3:
                    28:e8:1e:d2:4d:c4:23:b6:b7:b5:da:4b:95:cd:77:
                    9a:fe:c7:31:98:72:ee:2d:8d:94:fa:1c:b5:5e:86:
                    a1:37:c4:dd:96:97:73:f7:22:f4:28:65:02:13:8e:
                    52:21:8d:70:ae:3d:64:a0:e9:5c:14:76:4a:7c:ba:
                    ee:f2:7d:f3:91:00:49:0f:d6:9c:50:b7:d2:9c:bc:
                    ea:70:ba:d5:68:b8:42:b6:94:1c:19:7a:79:69:38:
                    75:b0:bd:75:ed:44:c7:01:b0:07:da:79:ac:66:aa:
                    84:4e:d2:90:f9:ad:b8:4c:20:70:f4:d6:0e:69:53:
                    3f:3c:cd:dc:a8:09:2f:9d:b7:39:49:f3:ff:df:20:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FA:BC:50:D9:E6:08:8A:41:B9:FB:C0:94:53:B6:32:63:E1:1D:C9
            X509v3 Authority Key Identifier:
                keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3130382e302f32332d3233203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:3f:98:c7:bb:72:c4:40:8a:83:66:78:75:d7:d4:10:f9:58:
         f1:93:04:f9:6a:33:56:84:0e:e0:85:8d:49:53:0f:73:65:e0:
         48:56:5d:5c:d2:0c:91:f5:a8:f9:cd:52:f5:5f:1a:cd:7e:de:
         46:e6:38:b4:f5:81:da:7b:87:b6:53:74:84:e5:cc:e7:c8:bc:
         9c:0f:5a:4a:c3:cb:63:41:20:7b:1b:be:99:c7:4a:df:b7:2c:
         a4:e4:53:a2:ef:dc:48:23:e6:2d:d2:17:63:4f:68:49:e6:d5:
         6c:9d:76:a0:a3:7e:93:50:10:a0:c1:f2:57:a6:bd:d0:61:ee:
         09:62:d4:c7:cc:7e:46:95:af:7f:06:47:0b:fc:1e:70:b4:fb:
         99:73:9a:4c:0c:59:08:db:14:de:13:23:02:4b:d2:96:c6:bf:
         3e:36:63:3c:64:a2:b2:94:a1:42:80:f5:6b:c7:76:de:01:b5:
         fa:0a:ec:9b:2d:54:ff:6d:27:c3:9b:68:08:ed:38:02:5d:24:
         99:9c:64:68:0d:9f:52:cb:de:43:7d:14:35:79:5d:14:c4:6f:
         66:9c:74:6d:2e:90:8a:80:52:7c:7a:f9:7c:e7:70:6f:ac:a1:
         37:94:32:cf:c6:65:78:4a:bb:b8:49:f2:94:5a:57:e2:79:20:
         8d:f2:02:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org