Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135352e302f32342d3234203d3e20323632323933.roa
File:                     3136382e3233322e3135352e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          A361b53CcwSTO2YyC5naGa68wkuMAH30+pCdXDktznI=
Subject key identifier:   42:33:11:19:24:ED:45:F8:0D:98:BA:E1:35:B0:B4:9E:5C:E2:15:48
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       671AE5D335F15ACFEEEFBFD1005932826BC64A16
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135352e302f32342d3234203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:42 +0000
ROA not before:           Tue 02 Jan 2024 21:11:42 +0000
ROA not after:            Tue 31 Dec 2024 21:16:42 +0000
asID:                     262293
IP address blocks:        168.232.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1a:e5:d3:35:f1:5a:cf:ee:ef:bf:d1:00:59:32:82:6b:c6:4a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:42 2024 GMT
            Not After : Dec 31 21:16:42 2024 GMT
        Subject: CN=4233111924ED45F80D98BAE135B0B49E5CE21548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:4a:32:24:05:6e:34:2d:e7:a2:2d:69:c7:
                    7f:a3:0b:f7:64:79:c6:34:09:56:22:45:24:53:e8:
                    66:cf:a8:39:72:07:10:ff:9a:6a:1e:53:dc:74:c5:
                    5a:d0:75:23:ba:d2:ae:9b:fc:d0:46:c9:d1:66:51:
                    12:2d:b1:2c:19:01:04:44:da:40:63:66:01:cd:25:
                    e5:fd:dd:69:3e:77:20:de:b9:3d:e2:f7:76:a0:64:
                    d9:96:f9:7e:0e:2c:6c:93:a4:fe:fc:60:ee:9b:b3:
                    17:58:77:42:c0:68:05:45:5c:ed:a3:4c:39:1d:cc:
                    69:be:3e:a6:d3:ca:2e:2a:4b:89:c4:d8:a9:ba:7e:
                    b6:cc:ad:92:6e:08:6e:9b:69:fa:39:99:c5:bf:59:
                    e7:e1:f2:9a:e4:54:15:a4:fc:95:8c:b1:8b:43:8b:
                    16:a1:d2:4e:0e:2a:2e:a7:91:c1:1a:cf:c9:7c:08:
                    ae:41:8c:1d:db:64:2d:43:d3:31:0b:0a:7b:63:ef:
                    bb:b2:1c:97:42:78:7a:cb:1c:ab:d9:e9:a7:86:99:
                    01:d9:89:ba:7f:8e:bc:58:8a:ec:b0:9f:9a:eb:f4:
                    56:d3:d3:1a:e4:46:b2:42:21:ff:95:87:74:b0:a2:
                    51:f1:de:47:b4:ff:58:97:f6:34:44:e4:10:79:6a:
                    07:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:11:19:24:ED:45:F8:0D:98:BA:E1:35:B0:B4:9E:5C:E2:15:48
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135352e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:ff:93:9b:54:32:8e:fd:34:45:17:63:85:07:4e:8f:79:
         dd:b0:b6:e5:fa:80:0d:2b:43:58:52:be:ce:bf:1b:97:4a:1d:
         e4:99:15:42:06:40:70:cc:20:5f:e9:05:38:89:32:9c:5c:c7:
         98:5f:66:47:f2:4c:72:8f:00:61:70:67:be:aa:37:aa:4a:20:
         2f:e7:59:3a:53:fa:5c:8f:2d:68:f7:2d:37:6f:78:30:fb:a1:
         6a:46:4f:6c:f0:1f:bb:13:17:ef:14:18:4c:4e:33:00:02:4a:
         a2:63:c3:ff:8b:1e:e0:41:56:10:a1:f1:7c:9d:e9:93:a9:e7:
         56:42:8a:27:20:f0:92:9a:38:45:03:59:22:38:b2:5d:a9:d4:
         77:a5:60:93:96:8b:24:ca:1c:14:bc:c3:ea:09:8d:a2:ff:54:
         b8:84:51:a9:05:38:4f:96:09:4d:f1:38:7b:77:25:13:6d:ff:
         42:94:9e:e3:92:f9:cc:cd:22:a3:1c:59:48:a4:7e:9b:0d:fd:
         f3:5c:c3:7e:34:44:22:e1:5a:07:db:bf:99:0d:d9:ba:29:97:
         3f:7a:f1:85:0a:13:5f:a8:51:f8:b6:65:23:f0:c5:b6:03:db:
         c1:89:fc:50:a5:27:f4:af:37:a6:a3:4b:24:07:c8:51:56:d0:
         59:c6:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org