Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3136382e3132312e3139362e302f32322d3332203d3e20323632383933.roa
File:                     3136382e3132312e3139362e302f32322d3332203d3e20323632383933.roa (raw, json)
Hash identifier:          ysykTwf8SmWnj1Wt1kZrb6/IgjZD8YOhuussc0KoRio=
Subject key identifier:   C2:18:03:1C:30:AA:A1:09:9C:E0:18:5A:A5:75:2C:54:D1:08:42:1A
Certificate issuer:       /CN=4502CD1B49644F16402D764130FC71B676EC91F0
Certificate serial:       7941A8202D6093672C201B2F76FCD5EEDF5461C3
Authority key identifier: 45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3136382e3132312e3139362e302f32322d3332203d3e20323632383933.roa
Signing time:             Wed 31 Jan 2024 12:36:51 +0000
ROA not before:           Wed 31 Jan 2024 12:31:51 +0000
ROA not after:            Wed 29 Jan 2025 12:36:51 +0000
asID:                     262893
IP address blocks:        168.121.196.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:41:a8:20:2d:60:93:67:2c:20:1b:2f:76:fc:d5:ee:df:54:61:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502CD1B49644F16402D764130FC71B676EC91F0
        Validity
            Not Before: Jan 31 12:31:51 2024 GMT
            Not After : Jan 29 12:36:51 2025 GMT
        Subject: CN=C218031C30AAA1099CE0185AA5752C54D108421A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:82:b8:a3:69:53:1e:4c:fb:ec:30:c8:63:56:
                    70:04:da:ab:30:94:12:7e:a4:6a:e3:2b:a5:66:3a:
                    6f:15:d6:37:19:44:46:62:7c:bc:99:41:fe:e8:8e:
                    99:f2:19:c5:fe:d3:51:d9:3c:eb:41:d7:62:f2:d4:
                    d6:1a:a4:07:db:30:25:e3:86:af:23:2c:a1:dd:d0:
                    81:0c:01:9d:db:80:76:fd:d6:7e:12:d2:fe:ac:74:
                    21:68:58:86:30:da:6c:c7:b0:ac:06:34:ce:91:85:
                    eb:df:10:97:0c:78:b5:05:cd:72:70:ae:65:f1:90:
                    84:61:2e:48:34:96:51:8d:f7:71:bd:21:92:61:5b:
                    59:9b:c7:51:2a:eb:66:85:46:4e:bd:3d:cb:1e:45:
                    c4:21:a9:1f:1b:85:ac:6b:3d:a2:48:a5:7f:ae:98:
                    72:aa:df:6b:aa:69:be:a7:3c:e9:ed:90:dd:84:d7:
                    14:75:2b:c8:23:1c:71:42:d2:be:79:bb:fb:62:c9:
                    88:44:9b:38:b5:8f:28:8b:fa:48:a8:db:28:1d:cb:
                    0d:47:95:b2:4a:72:96:a0:7d:86:5e:23:4e:a3:5b:
                    d3:47:5d:07:f9:4d:eb:53:3f:b0:7a:4a:2e:24:6b:
                    5c:f9:7b:f7:c7:d5:58:18:9b:81:f4:1a:78:9c:6d:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:18:03:1C:30:AA:A1:09:9C:E0:18:5A:A5:75:2C:54:D1:08:42:1A
            X509v3 Authority Key Identifier:
                keyid:45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/4502CD1B49644F16402D764130FC71B676EC91F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3136382e3132312e3139362e302f32322d3332203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:54:1d:e1:24:20:e7:83:b1:a0:4e:a1:23:d8:f5:24:37:9a:
         f8:7a:f2:23:b6:a7:58:c4:9c:cd:9a:a5:d6:65:56:97:07:df:
         47:21:c9:7e:11:eb:83:ad:65:e6:86:9c:d7:09:ef:0d:69:06:
         f1:68:04:1b:f3:fb:64:92:76:3a:b5:c6:52:5c:25:44:a2:d9:
         9e:4d:66:e1:57:4f:5e:33:cb:ae:bc:7c:69:af:2c:e0:86:0e:
         c9:95:47:95:10:39:dc:8a:b1:fb:e2:ba:0c:20:29:f7:27:c1:
         3f:e6:71:a1:2d:d4:22:ab:09:f8:c9:4c:f6:30:0c:91:4a:c1:
         41:9e:3c:ca:5d:bb:9d:c0:cf:a9:31:19:43:83:4c:a3:fc:8f:
         fd:45:44:bc:0b:2e:f0:ec:52:ef:71:91:39:7d:4b:79:00:25:
         fe:76:58:6c:31:b8:e7:b9:82:0c:07:6a:78:00:58:f9:24:67:
         06:4d:41:62:b4:53:e1:0a:ce:63:25:24:26:ae:7f:94:9a:a1:
         68:3e:b0:c1:ae:8a:ad:22:39:b0:13:24:f8:74:25:1c:98:52:
         1f:64:0d:43:33:9f:0a:54:82:48:36:41:8a:30:19:35:08:8b:
         69:76:a7:2d:b6:73:0a:31:7b:90:26:ce:ef:4f:3c:90:bb:23:
         77:e1:57:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org