Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/3136342e3136332e3230342e302f32322d3234203d3e20323635393733.roa
File:                     3136342e3136332e3230342e302f32322d3234203d3e20323635393733.roa (raw, json)
Hash identifier:          jnqy18BwzoIRMJbbj0D68fW25xDm8XisUaLHBM4BHng=
Subject key identifier:   0C:5C:87:C3:2A:32:B6:FF:D2:36:A4:A5:F0:02:B8:27:E9:7B:09:56
Certificate issuer:       /CN=1BD4DF6B313B4686E880F6DF3BA773F5959625D9
Certificate serial:       0FAE7BCE2B3DB7BC0072E62F86E8A6D5571593EC
Authority key identifier: 1B:D4:DF:6B:31:3B:46:86:E8:80:F6:DF:3B:A7:73:F5:95:96:25:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD4DF6B313B4686E880F6DF3BA773F5959625D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/3136342e3136332e3230342e302f32322d3234203d3e20323635393733.roa
Signing time:             Thu 04 Apr 2024 02:17:15 +0000
ROA not before:           Thu 04 Apr 2024 02:12:15 +0000
ROA not after:            Thu 03 Apr 2025 02:17:15 +0000
asID:                     265973
IP address blocks:        164.163.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ae:7b:ce:2b:3d:b7:bc:00:72:e6:2f:86:e8:a6:d5:57:15:93:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD4DF6B313B4686E880F6DF3BA773F5959625D9
        Validity
            Not Before: Apr  4 02:12:15 2024 GMT
            Not After : Apr  3 02:17:15 2025 GMT
        Subject: CN=0C5C87C32A32B6FFD236A4A5F002B827E97B0956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:49:3a:ea:c0:5f:a4:cd:18:21:57:39:cc:
                    9a:c8:ac:4e:58:1d:1e:86:63:97:94:dc:03:9d:81:
                    71:be:6b:a2:52:33:71:a0:d3:bd:3e:cf:d5:b5:1f:
                    41:fa:34:4e:a6:3f:92:ad:8b:8c:9a:51:15:0f:9e:
                    c1:ad:e5:27:60:02:84:49:06:cd:a4:94:6f:67:4d:
                    97:ef:cd:03:ae:3f:47:b4:1c:c4:5b:81:69:0a:d8:
                    09:bd:3c:bc:56:22:1d:46:0a:e7:fb:a7:55:c5:9b:
                    14:94:54:ad:83:36:1d:44:83:2f:aa:8e:c1:ce:ff:
                    30:37:62:d3:4d:90:e9:96:32:df:ff:4e:21:06:4d:
                    d0:c6:26:1c:8e:b1:42:35:b2:d7:04:53:e8:a5:fc:
                    a6:2a:01:b6:d9:18:3b:6e:b3:d4:c4:d3:09:4e:13:
                    c3:a3:33:98:68:e4:7d:29:3c:08:15:32:b4:20:db:
                    a0:e6:9f:ee:8b:e8:42:aa:ab:fa:90:44:05:f1:da:
                    54:59:38:f3:39:16:54:24:6b:7b:91:9d:ab:1d:d0:
                    80:ec:34:a5:49:41:52:97:7d:e1:31:00:69:a6:ed:
                    28:8e:7f:7f:42:fa:d1:b8:8e:c8:06:1f:28:b4:1f:
                    2e:af:3b:e9:cf:3a:0c:e1:e1:6e:b0:64:70:53:9c:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5C:87:C3:2A:32:B6:FF:D2:36:A4:A5:F0:02:B8:27:E9:7B:09:56
            X509v3 Authority Key Identifier:
                keyid:1B:D4:DF:6B:31:3B:46:86:E8:80:F6:DF:3B:A7:73:F5:95:96:25:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/1BD4DF6B313B4686E880F6DF3BA773F5959625D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD4DF6B313B4686E880F6DF3BA773F5959625D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/3136342e3136332e3230342e302f32322d3234203d3e20323635393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:8b:6c:65:2a:5b:cb:f2:52:bb:c1:24:2d:bf:db:54:c7:fd:
         43:ff:7c:11:4c:e6:5c:70:10:a5:a5:92:ea:c4:6e:85:cd:06:
         ea:42:71:3d:83:5f:a6:97:0c:f2:6b:1d:e4:f5:f9:e6:9c:36:
         44:7f:8d:6b:32:75:49:55:c7:90:0c:4b:eb:33:cd:00:b6:44:
         58:09:16:36:b4:b2:b1:fa:0f:0d:57:85:b1:fa:33:f9:0d:56:
         f6:22:5f:a0:18:f3:3e:68:78:0d:87:9d:02:e5:3e:29:e4:fa:
         42:7a:ba:b5:ad:56:eb:b5:3c:27:18:e9:74:a0:b6:ca:f5:3a:
         ef:9c:0d:48:78:71:f2:75:b6:ee:61:e3:99:c7:cd:45:d4:f8:
         54:c0:00:f1:d2:3f:2e:ec:21:63:b3:4c:78:14:d3:33:29:c8:
         d5:7d:d5:b2:ea:bf:44:da:ff:50:3e:1c:2a:81:84:12:f5:43:
         e7:35:f5:3f:e1:bb:8d:23:92:6b:81:80:8e:e1:14:c3:cf:c9:
         c8:b9:88:65:0b:81:20:8c:8e:ae:c2:bd:dc:a8:2d:56:42:f4:
         d1:d6:67:4f:c9:b7:72:1c:fa:39:67:0a:eb:4b:ba:9d:dc:45:
         c1:cd:f8:94:cd:4a:31:53:d3:fb:20:37:e5:6a:25:c5:45:b3:
         ad:dc:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org