Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/1/3136382e3233322e3139362e302f32332d3234203d3e20323634393438.roa
File:                     3136382e3233322e3139362e302f32332d3234203d3e20323634393438.roa (raw, json)
Hash identifier:          7WKU4WYWSs0sW896S188szSHyZ4SF7Y/2sJc8wOZf08=
Subject key identifier:   16:D8:9B:A3:44:C7:98:82:81:67:88:A4:56:DF:5E:B0:E1:31:69:EA
Certificate issuer:       /CN=711FA892AF4913E4E1F9A25D92C488BA1D60CE7D
Certificate serial:       26E4CCC12BF5AF75033C9543F6587E85E8435525
Authority key identifier: 71:1F:A8:92:AF:49:13:E4:E1:F9:A2:5D:92:C4:88:BA:1D:60:CE:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/711FA892AF4913E4E1F9A25D92C488BA1D60CE7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/1/3136382e3233322e3139362e302f32332d3234203d3e20323634393438.roa
Signing time:             Thu 04 Apr 2024 15:48:15 +0000
ROA not before:           Thu 04 Apr 2024 15:43:15 +0000
ROA not after:            Thu 03 Apr 2025 15:48:15 +0000
asID:                     264948
IP address blocks:        168.232.196.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e4:cc:c1:2b:f5:af:75:03:3c:95:43:f6:58:7e:85:e8:43:55:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711FA892AF4913E4E1F9A25D92C488BA1D60CE7D
        Validity
            Not Before: Apr  4 15:43:15 2024 GMT
            Not After : Apr  3 15:48:15 2025 GMT
        Subject: CN=16D89BA344C79882816788A456DF5EB0E13169EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:2a:ff:c2:52:50:77:f6:74:9b:99:32:2d:
                    de:a1:55:da:48:19:ae:43:48:9c:d6:e7:19:58:63:
                    2a:6d:cc:58:d4:7a:57:30:71:57:00:0f:ba:99:fe:
                    9c:38:e1:a1:dd:4d:13:c4:52:ea:b2:b7:27:30:99:
                    c2:2c:50:3d:25:c2:cd:3c:10:30:cc:40:84:d5:cd:
                    c4:73:d2:4c:4e:85:aa:be:bb:c6:c3:c5:13:0f:ed:
                    00:2a:31:bc:2c:b7:08:45:e1:85:8f:36:0f:47:80:
                    3f:07:ca:47:d3:63:df:58:b1:a8:30:b8:fe:b2:7d:
                    eb:90:5f:00:55:f6:34:4e:ac:38:cc:f9:c9:4a:ec:
                    0a:ca:2f:81:e2:91:6a:dc:e9:23:9e:0f:f1:f2:af:
                    19:0d:15:7d:1c:e8:87:9c:70:8b:6c:88:03:a1:f9:
                    63:f5:c3:27:4d:b1:60:34:e8:f1:a3:c7:e9:32:29:
                    95:5c:6c:6f:dd:11:09:90:17:f0:46:cb:af:59:d2:
                    0a:1a:1a:d8:06:15:94:48:5f:d5:db:3f:d3:26:f9:
                    f1:2b:0d:e8:44:84:83:8a:f2:de:18:d2:8c:8a:8c:
                    86:7f:93:29:74:ba:07:0b:08:f4:40:9e:9b:e5:96:
                    ba:1a:5c:22:35:b2:34:20:29:80:73:1c:6a:1b:50:
                    56:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D8:9B:A3:44:C7:98:82:81:67:88:A4:56:DF:5E:B0:E1:31:69:EA
            X509v3 Authority Key Identifier:
                keyid:71:1F:A8:92:AF:49:13:E4:E1:F9:A2:5D:92:C4:88:BA:1D:60:CE:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/1/711FA892AF4913E4E1F9A25D92C488BA1D60CE7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/711FA892AF4913E4E1F9A25D92C488BA1D60CE7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/1/3136382e3233322e3139362e302f32332d3234203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:6a:0d:49:96:96:dc:b1:1e:e1:42:b3:4b:51:0b:6b:fb:98:
         e9:1b:6d:e1:ac:f1:73:d9:bb:ad:f6:11:e2:e2:bf:4a:cd:09:
         07:13:77:f6:32:6b:71:82:2e:7d:58:50:e8:fb:40:48:1d:c7:
         bf:5b:ef:b9:78:34:2f:16:d2:cd:30:c9:7a:e3:0d:63:11:17:
         99:3c:e2:f9:1f:36:46:bf:6b:c2:09:cb:11:ad:bc:60:48:91:
         9d:2e:57:7b:75:8d:48:9c:0f:49:3d:c1:70:d4:24:73:51:68:
         7b:55:86:00:5f:8e:2b:d7:72:43:a0:0c:c3:0b:de:cf:c4:b2:
         3d:fd:88:19:a1:f6:41:1d:58:fb:d7:39:e6:68:e3:8d:fd:0c:
         ce:cc:6b:ab:84:55:4a:79:b0:87:6a:1e:48:6b:a6:66:a9:84:
         12:bf:99:d5:a2:a6:ec:0f:68:c4:80:dd:fb:18:95:58:11:f6:
         40:40:a1:08:bb:7c:82:82:a0:22:42:35:da:2d:d5:c4:e3:fd:
         f3:c3:80:89:1c:68:54:7b:4b:5e:cd:f5:e0:36:b7:9a:ff:86:
         e9:50:0c:e3:35:cd:c6:57:c2:d5:f9:78:1d:5e:ae:cc:ab:2b:
         99:be:8f:89:49:97:9c:14:39:f1:f4:a7:e5:7b:5b:50:63:71:
         46:6c:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org