Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32342d3236203d3e20323634393438.roa
File:                     3136382e3233322e3139382e302f32342d3236203d3e20323634393438.roa (raw, json)
Hash identifier:          dIHrSAv6BygKffvFQZbh0XsviWRRq6JBV8kEnStstFI=
Subject key identifier:   E7:C5:50:45:67:C1:8B:5B:1C:10:60:0D:0E:0B:DE:9F:CD:92:38:76
Certificate issuer:       /CN=46E827DE98C674A14FD2E85CA05F5520380CF093
Certificate serial:       16BA8B52980B2D716925237E2632A0AB22EDCFF5
Authority key identifier: 46:E8:27:DE:98:C6:74:A1:4F:D2:E8:5C:A0:5F:55:20:38:0C:F0:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E827DE98C674A14FD2E85CA05F5520380CF093.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32342d3236203d3e20323634393438.roa
Signing time:             Tue 12 Mar 2024 13:45:07 +0000
ROA not before:           Tue 12 Mar 2024 13:40:07 +0000
ROA not after:            Tue 11 Mar 2025 13:45:07 +0000
asID:                     264948
IP address blocks:        168.232.198.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ba:8b:52:98:0b:2d:71:69:25:23:7e:26:32:a0:ab:22:ed:cf:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E827DE98C674A14FD2E85CA05F5520380CF093
        Validity
            Not Before: Mar 12 13:40:07 2024 GMT
            Not After : Mar 11 13:45:07 2025 GMT
        Subject: CN=E7C5504567C18B5B1C10600D0E0BDE9FCD923876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:64:35:2e:69:b5:7a:f8:85:89:82:da:56:8b:
                    00:a4:d7:11:38:ae:06:be:58:e4:be:77:ef:38:8f:
                    aa:e9:29:37:97:38:44:59:a3:fa:ee:f2:96:2b:b7:
                    9c:25:11:04:14:a9:55:85:0b:72:8b:2e:54:de:15:
                    64:5a:77:16:4f:14:e6:81:e8:42:7a:2e:40:79:68:
                    fc:99:4c:ab:e1:e8:b2:7f:5b:a0:95:4c:24:20:50:
                    2a:c0:7f:57:17:a1:02:bf:0b:55:bc:08:8c:94:97:
                    8c:d5:32:38:3d:db:f5:09:ab:e2:ec:53:c3:54:ea:
                    81:a0:8a:b3:34:d8:fe:82:d2:1d:32:00:78:5b:4a:
                    06:38:57:56:81:9b:7b:da:cc:1c:32:17:a8:26:13:
                    90:eb:dc:23:07:85:e3:59:ee:ab:19:86:9c:c5:a7:
                    19:b7:60:3b:d4:b9:1b:9b:0c:0e:3f:0f:81:c0:c0:
                    52:71:5e:0c:67:e3:5e:94:53:8e:a6:28:6f:6c:51:
                    1f:58:c2:59:a9:7c:4f:fc:aa:22:b5:e4:4a:9c:e1:
                    1e:b9:c7:ba:36:0d:a5:51:1b:05:a2:2b:d9:6f:43:
                    b0:bb:50:22:ff:6f:55:f8:bb:67:45:1a:f8:df:3b:
                    2c:48:5e:2b:c5:0e:e4:f9:fa:3a:d3:0d:37:01:ee:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C5:50:45:67:C1:8B:5B:1C:10:60:0D:0E:0B:DE:9F:CD:92:38:76
            X509v3 Authority Key Identifier:
                keyid:46:E8:27:DE:98:C6:74:A1:4F:D2:E8:5C:A0:5F:55:20:38:0C:F0:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/46E827DE98C674A14FD2E85CA05F5520380CF093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E827DE98C674A14FD2E85CA05F5520380CF093.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32342d3236203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:d3:1a:90:8e:f0:fa:ce:92:3d:ad:11:d2:27:b2:29:aa:d6:
         0b:97:0c:32:0c:0c:4b:d2:8b:bc:1d:4a:d5:4d:a7:c2:ff:cc:
         f8:85:cb:fc:76:df:e5:eb:7a:da:f3:97:c4:cb:99:de:7c:00:
         ee:68:db:15:05:7c:0e:04:93:c5:3e:ba:f8:b0:14:29:b9:62:
         52:2c:b7:76:ad:c6:f8:34:88:ef:ad:cc:bc:d7:81:a2:f4:e5:
         1d:13:43:33:d0:53:fc:e2:0a:c1:24:4d:b1:ad:06:84:36:41:
         dc:15:13:ee:7d:e8:0b:b9:35:c0:f3:bf:82:be:95:c7:e3:d5:
         a8:7d:fa:00:2e:5d:97:b1:b9:99:d6:c3:b2:38:9a:dc:d0:5b:
         99:fc:3d:d0:5b:c3:b2:4f:6d:d5:e0:87:99:36:72:e1:b7:1f:
         54:a6:73:8d:bc:67:80:eb:69:f8:9a:7d:3f:1e:de:71:4e:05:
         90:ce:66:a6:37:92:f2:ee:ac:00:e3:f4:e0:39:19:36:00:1c:
         a5:aa:69:15:d3:b6:59:19:e4:f4:16:be:a1:4a:ee:45:b6:e8:
         c2:ee:c8:c4:b5:43:a5:1d:44:72:ff:1a:a5:b2:17:9f:0a:74:
         37:23:d7:b3:1a:f9:d4:98:ce:ce:23:24:4e:76:b1:71:7a:9e:
         b5:07:93:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org