Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32332d3234203d3e20323634393438.roa
File:                     3136382e3233322e3139362e302f32332d3234203d3e20323634393438.roa (raw, json)
Hash identifier:          v0um65nJxctidbQQ/L49CAMRqgrBNkxU/In47a78UQM=
Subject key identifier:   6A:5C:4C:32:C7:4B:38:96:C9:4F:67:7D:AB:EA:44:88:D7:65:0F:6E
Certificate issuer:       /CN=46E827DE98C674A14FD2E85CA05F5520380CF093
Certificate serial:       0C1D2E224B42267BD358FEF02BFED5CE20BFAF93
Authority key identifier: 46:E8:27:DE:98:C6:74:A1:4F:D2:E8:5C:A0:5F:55:20:38:0C:F0:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E827DE98C674A14FD2E85CA05F5520380CF093.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32332d3234203d3e20323634393438.roa
Signing time:             Tue 12 Mar 2024 13:45:00 +0000
ROA not before:           Tue 12 Mar 2024 13:40:00 +0000
ROA not after:            Tue 11 Mar 2025 13:45:00 +0000
asID:                     264948
IP address blocks:        168.232.196.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1d:2e:22:4b:42:26:7b:d3:58:fe:f0:2b:fe:d5:ce:20:bf:af:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E827DE98C674A14FD2E85CA05F5520380CF093
        Validity
            Not Before: Mar 12 13:40:00 2024 GMT
            Not After : Mar 11 13:45:00 2025 GMT
        Subject: CN=6A5C4C32C74B3896C94F677DABEA4488D7650F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4a:17:f1:ac:a4:67:1b:be:c6:c3:75:44:21:
                    6d:d9:de:a7:b2:2c:15:df:ee:cf:82:c6:ac:ac:b7:
                    75:a9:82:8b:3b:4b:bd:1b:f4:f7:46:39:bf:e9:00:
                    10:2d:4c:74:7f:6d:35:8b:ea:12:3d:b0:1a:4b:e9:
                    04:8a:15:7e:40:c5:a7:43:78:53:34:97:09:a3:02:
                    00:9f:88:76:0d:b2:37:bb:f7:66:37:0e:ca:86:14:
                    b1:75:9a:4a:58:0a:df:72:76:c7:be:ce:74:60:c1:
                    e8:2f:74:c7:42:a1:21:de:db:3c:d8:a1:6f:30:b0:
                    28:25:1e:8c:09:87:0c:48:11:46:0a:8d:49:0f:b5:
                    94:74:ad:f8:22:5a:b9:23:8e:ab:0e:fb:db:2e:e6:
                    b5:06:45:9d:22:03:39:0d:c2:12:8f:82:ec:9d:69:
                    dc:77:73:1d:e2:ad:75:21:34:d8:9d:c0:f7:83:1c:
                    a4:6a:d9:bb:48:d8:04:88:a1:e9:e7:6f:ac:fa:78:
                    89:ac:5e:25:92:e8:73:6f:30:c5:12:bf:4d:f4:bf:
                    16:a4:3c:51:f9:bc:4b:6e:5b:e6:1c:3f:61:83:15:
                    68:29:8b:fe:05:08:5d:b6:cb:07:68:b2:38:aa:71:
                    72:4a:c9:61:55:17:bf:fb:f2:f9:b3:2c:fa:74:19:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5C:4C:32:C7:4B:38:96:C9:4F:67:7D:AB:EA:44:88:D7:65:0F:6E
            X509v3 Authority Key Identifier:
                keyid:46:E8:27:DE:98:C6:74:A1:4F:D2:E8:5C:A0:5F:55:20:38:0C:F0:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/46E827DE98C674A14FD2E85CA05F5520380CF093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E827DE98C674A14FD2E85CA05F5520380CF093.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32332d3234203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:ee:07:10:af:43:87:79:c5:57:f8:d0:28:70:53:82:9e:98:
         25:bb:38:f8:83:d2:7d:eb:fa:28:18:48:1e:48:36:44:22:08:
         b6:3b:10:eb:83:17:f6:62:23:75:8a:a5:6f:c7:c2:58:00:82:
         95:95:8f:2a:ba:3d:e9:7d:56:12:34:05:d8:63:0b:c2:a4:ee:
         68:08:89:7b:73:d4:1b:c5:a3:6a:54:f6:2c:a2:08:6c:9a:08:
         6c:51:d2:5b:dc:be:f7:fe:bd:8b:53:31:04:24:cb:70:a1:27:
         16:bc:4f:c8:8a:88:8f:86:12:4c:5b:aa:f9:9a:a3:87:c0:a5:
         6d:10:14:0d:95:fe:0d:8f:3c:af:65:b2:90:78:f0:70:51:b5:
         1c:1c:d8:88:39:98:cd:13:84:b3:8b:fd:5f:ef:db:1e:88:bc:
         94:f1:b1:b8:46:f0:02:05:92:8b:6d:0a:a8:b0:fb:9a:9c:a2:
         91:ee:84:2a:23:91:dd:d5:85:6b:48:e8:9f:9f:e2:e7:44:49:
         4c:bd:c8:c8:7c:e4:0c:55:03:18:0b:cf:87:9a:f8:bc:06:46:
         e8:96:70:df:e0:dc:26:6e:bc:cf:54:70:50:45:6d:16:83:98:
         5d:77:19:29:5e:89:f4:5a:3a:0f:f3:9e:3a:ad:6d:06:9c:00:
         67:6a:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org