Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3136382e3139362e3134342e302f32322d3234203d3e20323633393934.roa
File:                     3136382e3139362e3134342e302f32322d3234203d3e20323633393934.roa (raw, json)
Hash identifier:          fynPegb3trvJfz2CgRF00kII4xmpcpP08xzI6KRDUg8=
Subject key identifier:   C4:46:C4:39:28:85:F0:67:C2:E2:D5:88:6D:10:A4:E8:A7:4E:34:9F
Certificate issuer:       /CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
Certificate serial:       7DDA94A22421EF4F066F91F33C020CF3FA4DE245
Authority key identifier: CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3136382e3139362e3134342e302f32322d3234203d3e20323633393934.roa
Signing time:             Tue 05 Dec 2023 22:00:00 +0000
ROA not before:           Tue 05 Dec 2023 21:55:00 +0000
ROA not after:            Tue 03 Dec 2024 22:00:00 +0000
asID:                     263994
IP address blocks:        168.196.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:da:94:a2:24:21:ef:4f:06:6f:91:f3:3c:02:0c:f3:fa:4d:e2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
        Validity
            Not Before: Dec  5 21:55:00 2023 GMT
            Not After : Dec  3 22:00:00 2024 GMT
        Subject: CN=C446C4392885F067C2E2D5886D10A4E8A74E349F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:56:70:aa:cf:df:7a:9c:80:f2:09:65:8f:1b:
                    99:ff:6b:f1:73:5b:98:e0:5e:33:1e:85:5f:ee:67:
                    72:9e:9a:3e:db:a2:58:21:86:6b:31:62:7b:38:95:
                    cd:88:08:a7:06:9a:a8:93:63:58:62:80:58:c8:9b:
                    bb:70:0f:49:14:05:b0:c8:fb:df:d2:f7:3b:5a:c8:
                    98:b9:3d:d1:e1:33:07:a4:54:d0:6b:57:a4:f4:d7:
                    7f:49:86:ff:b5:31:e3:5d:a2:3c:30:5f:ac:89:00:
                    c5:a0:47:fd:1b:8f:9a:86:21:2b:8d:b7:8d:cc:8f:
                    8e:14:a7:78:ff:3c:22:ac:0e:2c:f6:f0:60:5a:71:
                    ee:72:bf:2e:e4:9d:2e:a2:4b:7c:83:cc:86:5d:09:
                    ad:5e:98:75:64:96:14:11:1d:a7:b2:81:dd:5f:18:
                    98:49:c7:8b:4a:e0:51:d8:d9:e0:fd:5b:2a:7e:66:
                    38:4f:7e:41:9f:b0:95:6a:9e:8b:11:4d:69:fb:60:
                    4d:24:fd:0e:e8:b4:04:4c:fd:03:31:73:fe:c9:cd:
                    27:59:23:81:18:4a:d7:15:7f:bf:cf:95:93:57:61:
                    0b:80:49:9f:df:f5:5b:df:a1:90:b3:8c:65:12:9f:
                    87:fc:71:1f:6d:69:a5:84:b8:5e:a6:6c:a0:bc:ca:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:46:C4:39:28:85:F0:67:C2:E2:D5:88:6D:10:A4:E8:A7:4E:34:9F
            X509v3 Authority Key Identifier:
                keyid:CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3136382e3139362e3134342e302f32322d3234203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:76:17:d4:c9:25:e3:8c:ab:c1:fa:ae:51:0f:cb:f5:7e:4f:
         7d:05:d7:e1:b1:a0:ea:3b:12:e6:68:2e:d2:1b:51:51:18:0b:
         8a:4e:b0:eb:0e:eb:c8:b7:0d:95:02:48:a9:2c:02:45:85:a1:
         4d:a3:9e:65:f5:fa:8e:36:f3:11:32:56:ff:de:1e:14:20:10:
         cb:85:5a:64:5b:3b:2e:e1:e8:05:32:07:5c:b0:05:30:4e:9a:
         61:87:98:df:45:31:d9:a7:4d:73:6f:79:10:07:08:5f:d2:a0:
         bc:95:a5:58:fa:d7:54:6a:28:ab:e9:bf:47:15:ad:29:b2:a0:
         ed:56:6f:a7:9f:11:b2:c0:5e:e0:34:1b:25:53:78:47:6e:c5:
         6a:5f:64:3b:85:e5:44:14:6e:61:6c:ce:33:0c:20:cb:3e:f1:
         90:3f:6f:0a:33:b6:60:7d:8b:06:a7:e2:92:f2:5e:aa:09:d6:
         c2:30:0c:73:d6:43:1e:82:c9:00:a9:54:5d:48:25:a4:3b:a0:
         44:cb:3b:ba:f5:09:d0:5e:14:c5:e8:21:52:56:ed:3f:0c:99:
         65:e5:42:4e:8f:96:dd:2a:a4:69:2e:5b:b7:43:67:b2:c6:65:
         3e:b8:9e:db:fb:e5:aa:c5:be:7f:68:83:8d:f1:0b:6d:52:98:
         ad:17:8a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org