Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/1/3136382e3233322e3139382e302f32342d3236203d3e20323634393438.roa
File:                     3136382e3233322e3139382e302f32342d3236203d3e20323634393438.roa (raw, json)
Hash identifier:          3/poq/zVAJJfXD0eDfNsL9jJjphn1c9/EIoNI/B05fI=
Subject key identifier:   C5:0A:55:6E:52:E6:D0:44:AF:DE:EF:BC:AF:75:9A:4F:F3:EC:C5:98
Certificate issuer:       /CN=711FA892AF4913E4E1F9A25D92C488BA1D60CE7D
Certificate serial:       2E0F5F780FA26860ECA1C74A24A271D768682014
Authority key identifier: 71:1F:A8:92:AF:49:13:E4:E1:F9:A2:5D:92:C4:88:BA:1D:60:CE:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/711FA892AF4913E4E1F9A25D92C488BA1D60CE7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/1/3136382e3233322e3139382e302f32342d3236203d3e20323634393438.roa
Signing time:             Thu 04 Apr 2024 15:48:15 +0000
ROA not before:           Thu 04 Apr 2024 15:43:15 +0000
ROA not after:            Thu 03 Apr 2025 15:48:15 +0000
asID:                     264948
IP address blocks:        168.232.198.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0f:5f:78:0f:a2:68:60:ec:a1:c7:4a:24:a2:71:d7:68:68:20:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711FA892AF4913E4E1F9A25D92C488BA1D60CE7D
        Validity
            Not Before: Apr  4 15:43:15 2024 GMT
            Not After : Apr  3 15:48:15 2025 GMT
        Subject: CN=C50A556E52E6D044AFDEEFBCAF759A4FF3ECC598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:2e:2a:00:89:c5:e6:fa:69:a0:55:f5:d3:
                    f2:6c:54:60:ca:08:ea:e6:96:79:10:21:60:60:f5:
                    42:27:36:48:e1:30:fa:de:a9:d5:df:79:aa:a6:bf:
                    37:99:d2:59:1c:3c:ed:d0:34:ed:4e:4e:82:36:63:
                    01:ea:71:7b:a6:cf:1d:0d:fd:2c:82:87:ab:d7:61:
                    1f:a5:1b:d6:7b:9a:9b:2a:7d:48:f8:91:7a:fa:8d:
                    a4:1e:00:32:71:ed:bf:1e:ee:37:0b:67:c6:1e:9e:
                    62:bd:0a:58:06:2b:4e:42:c8:7c:b5:69:3e:e9:42:
                    9b:f3:b9:ce:e1:89:a8:4e:06:1e:ac:60:a6:0c:07:
                    db:36:f2:e8:b7:49:af:2e:fb:88:c0:04:31:31:99:
                    d9:1b:d8:2f:75:06:02:4a:80:68:16:3e:ea:f0:8b:
                    57:2b:90:49:ff:74:ff:1d:cb:7d:ad:da:9e:a3:55:
                    51:4c:77:62:93:9c:c9:ac:48:d5:e4:aa:11:5c:43:
                    3f:12:c3:f6:0f:a4:7c:b9:1c:af:f3:a0:ea:59:e0:
                    2b:da:df:c0:92:88:c3:ee:af:b6:3e:9c:75:98:17:
                    6a:a7:80:a3:26:fa:ef:03:1e:6c:0d:72:fc:f4:a0:
                    d8:f5:f8:fa:75:ac:28:de:cf:81:12:e0:8c:03:e3:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0A:55:6E:52:E6:D0:44:AF:DE:EF:BC:AF:75:9A:4F:F3:EC:C5:98
            X509v3 Authority Key Identifier:
                keyid:71:1F:A8:92:AF:49:13:E4:E1:F9:A2:5D:92:C4:88:BA:1D:60:CE:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/1/711FA892AF4913E4E1F9A25D92C488BA1D60CE7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/711FA892AF4913E4E1F9A25D92C488BA1D60CE7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/1/3136382e3233322e3139382e302f32342d3236203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:a2:f9:b7:75:60:90:e4:27:a2:6a:9f:d4:92:13:04:10:88:
         2a:6c:f3:62:ea:66:ea:1a:05:eb:8b:73:78:60:a2:ce:a6:38:
         42:cd:40:b7:63:a9:73:75:50:63:7f:0a:1c:9a:ef:c2:b6:8e:
         d0:a6:fc:74:f8:3f:a5:ca:a4:0f:b7:ae:97:dd:fb:c4:20:28:
         37:36:30:81:f3:f8:aa:92:d5:fe:bb:f8:b4:e0:cd:9a:98:c7:
         05:d0:6d:d9:57:e7:da:29:cb:b0:99:96:5e:9e:6b:a6:9a:fe:
         d3:ae:49:bc:43:73:60:2c:2b:bb:5e:13:0e:d5:09:9e:b0:ad:
         12:bb:2b:14:43:87:2d:1c:7c:43:f6:98:1a:2d:16:2f:e8:01:
         1b:03:78:7b:36:40:68:d8:d7:97:48:d6:c0:36:58:58:d6:fc:
         49:29:32:43:00:13:79:02:80:19:af:d5:bf:b9:c6:37:38:e6:
         97:8f:74:49:9a:ec:33:97:36:fa:4a:44:2d:ce:fd:57:3c:cd:
         b4:6a:c3:33:66:62:e4:d6:35:72:d9:37:ca:0a:d1:19:46:b5:
         c4:cf:0d:69:f9:d2:b9:10:26:3d:5c:46:4b:e6:4c:b8:05:6a:
         97:38:be:db:db:fa:63:f5:63:3a:30:0a:fa:2c:8f:7b:8e:14:
         96:d5:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org