Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa
File:                     3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa (raw, json)
Hash identifier:          ap2bWM0hr39gHsJTItesSh9yCcbcZgZztBIgH8Ov1bc=
Subject key identifier:   71:92:BC:88:98:07:61:1C:4B:45:D9:CB:13:E6:F4:70:64:A9:5F:A6
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       36D0A47D91EC696FEE6DC90764F609170DA0E56E
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa
Signing time:             Sat 20 Jan 2024 18:31:24 +0000
ROA not before:           Sat 20 Jan 2024 18:26:24 +0000
ROA not after:            Sat 18 Jan 2025 18:31:24 +0000
asID:                     53143
IP address blocks:        168.195.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d0:a4:7d:91:ec:69:6f:ee:6d:c9:07:64:f6:09:17:0d:a0:e5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:26:24 2024 GMT
            Not After : Jan 18 18:31:24 2025 GMT
        Subject: CN=7192BC889807611C4B45D9CB13E6F47064A95FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:72:75:06:f7:b8:75:b3:94:05:b8:c5:3f:
                    48:84:38:5c:1b:72:9e:ce:53:c9:be:0d:ad:dc:71:
                    92:e2:dc:ac:30:80:05:c5:88:ad:dc:42:c8:49:34:
                    63:51:65:dd:a0:e1:79:f5:75:a0:f2:d8:c8:d3:95:
                    76:06:0b:eb:d0:31:0b:09:c7:d9:70:fb:79:d7:89:
                    43:7d:e5:ce:d9:05:90:ef:c6:86:33:2c:dc:d3:b4:
                    db:59:cf:3f:7f:ba:ff:95:31:ac:e2:fe:75:2f:78:
                    7f:eb:2d:39:ea:36:3f:77:02:e4:b6:6d:69:48:ff:
                    40:ab:a5:89:4c:5d:f3:c3:bd:91:23:37:ee:3f:30:
                    87:0e:c7:09:c5:28:d9:98:8b:d0:cc:66:8d:c4:5e:
                    fd:78:79:a1:66:c2:21:5b:2a:e0:93:33:23:62:ea:
                    5d:53:c5:84:19:af:c1:f6:15:8c:f3:3c:6e:de:b9:
                    3c:55:3d:f0:dd:9c:82:8f:15:9b:4e:45:f9:18:c8:
                    57:fa:89:a7:f0:6c:3e:d1:94:81:0d:c6:63:11:99:
                    bb:ce:19:7c:30:91:20:15:61:82:b7:08:8f:8b:c6:
                    55:cc:64:c3:da:10:87:fe:e1:46:a6:fd:23:db:1f:
                    40:f7:82:44:21:31:8d:3d:3c:78:2d:94:1b:cc:03:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:92:BC:88:98:07:61:1C:4B:45:D9:CB:13:E6:F4:70:64:A9:5F:A6
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:88:5f:2d:41:08:f0:bf:60:ed:ee:0c:6e:bc:62:6b:27:14:
         91:a8:38:9b:a7:60:62:51:d1:f3:d0:e9:f3:d1:92:b1:fc:9b:
         1a:4e:17:0b:d7:c8:29:38:ae:d9:02:94:ee:c4:95:13:c1:31:
         5c:a6:a2:81:6c:7d:50:43:c0:16:fc:2d:48:de:4e:55:1c:f7:
         5c:e3:53:70:6e:3b:ba:1c:9d:2c:77:84:b3:97:d2:c9:4d:53:
         aa:5d:cc:98:96:23:3f:c7:76:7b:bb:99:c6:4e:37:db:2c:01:
         bc:f0:9c:73:c6:5e:42:c1:21:93:9e:b8:36:0a:25:25:10:40:
         c8:e2:f6:52:19:8b:2d:c6:33:a6:a9:42:27:5e:fe:89:99:cf:
         a0:ea:c3:d4:f1:10:35:52:db:90:a7:11:f7:b0:49:9e:ce:73:
         d3:1e:9f:c9:7e:96:e4:6f:4e:97:d9:9d:8c:47:47:7a:ab:69:
         df:d4:c8:9a:95:fb:b3:83:0a:89:b1:6a:f5:28:b4:5f:2b:31:
         04:25:fa:ec:fe:c8:98:6b:d7:00:39:a3:9e:3b:12:a7:e5:24:
         31:c8:d9:54:13:97:e5:39:38:1b:23:75:cd:22:5c:7a:a2:52:
         6f:ad:d3:15:b8:e9:11:33:4d:b6:31:91:f6:35:ef:15:01:dd:
         20:fb:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org