Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3136382e3132312e35332e302f32342d3234203d3e20323632353039.roa
File:                     3136382e3132312e35332e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          YLJkUp4EuMAwXA55SrICuJYjCAiq/ovQLIji7orGLwQ=
Subject key identifier:   0A:B9:33:10:14:37:0B:71:B6:56:3F:0E:05:CF:9E:A0:B0:96:13:C6
Certificate issuer:       /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial:       6F4FDB50C36184F051A59EDD2CADFED7A9C080F5
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3136382e3132312e35332e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 23 Jan 2023 22:16:18 +0000
ROA not before:           Mon 23 Jan 2023 22:11:18 +0000
ROA not after:            Mon 22 Jan 2024 22:16:18 +0000
asID:                     262509
IP address blocks:        168.121.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4f:db:50:c3:61:84:f0:51:a5:9e:dd:2c:ad:fe:d7:a9:c0:80:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
        Validity
            Not Before: Jan 23 22:11:18 2023 GMT
            Not After : Jan 22 22:16:18 2024 GMT
        Subject: CN=0AB9331014370B71B6563F0E05CF9EA0B09613C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:76:35:b6:bb:d3:03:74:a6:d5:b1:89:ac:
                    22:70:b7:e5:b2:c8:58:89:46:d6:e5:d2:53:2f:d9:
                    19:7f:00:a5:dd:64:22:76:ea:fe:87:51:02:4b:a2:
                    f3:f2:19:98:8f:ce:32:35:10:93:c0:70:59:b1:01:
                    be:ae:29:c0:bc:73:09:85:21:9d:61:27:fc:ea:1a:
                    7f:68:64:8d:0e:1d:43:a9:82:9b:ed:4d:81:bb:e7:
                    8c:8a:db:8d:8d:3a:dd:aa:c7:3c:9b:2f:a1:b7:df:
                    20:ca:22:94:77:54:47:bc:9c:ed:c1:27:1d:93:be:
                    88:8c:88:17:d7:c2:0a:b3:7c:73:1a:97:6a:b4:28:
                    75:7d:54:33:30:84:2e:92:77:67:22:2e:d8:30:50:
                    e4:af:ac:c0:0d:41:61:46:37:1b:3b:f6:f5:52:1b:
                    57:11:cb:ca:3d:3c:aa:4a:26:03:78:3c:7a:d1:c8:
                    57:a8:ce:b8:fa:2b:d8:4a:d3:fb:26:fc:64:84:0f:
                    f1:c0:90:88:f5:ad:d0:02:ed:b6:29:fb:a9:58:0b:
                    d9:29:b6:92:54:59:5e:99:8e:e7:ac:3b:96:13:d8:
                    aa:cb:2d:4b:e4:72:de:e2:ff:0d:09:36:78:96:17:
                    1e:39:77:98:f5:68:a4:61:3c:14:2e:d2:51:46:72:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B9:33:10:14:37:0B:71:B6:56:3F:0E:05:CF:9E:A0:B0:96:13:C6
            X509v3 Authority Key Identifier:
                keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3136382e3132312e35332e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:45:61:41:74:19:c5:e7:ce:68:44:c3:4e:87:6b:e4:31:88:
         d9:76:04:20:58:2c:fa:b8:0e:70:d2:05:1f:01:09:c0:c7:a5:
         31:4a:c1:e3:de:9a:23:d2:37:c8:84:0e:d3:51:08:d0:30:4d:
         74:2a:8d:3c:31:b9:87:21:e1:16:ba:d9:8e:a7:8d:1e:84:62:
         5c:cc:2a:f9:73:20:f4:62:eb:e1:fe:2e:a6:e6:8a:00:cb:a2:
         ec:7e:d6:a1:9c:4b:16:59:c3:b0:cd:1e:5c:f7:c7:84:3f:25:
         8c:bc:65:d1:8b:16:44:96:3a:40:e2:eb:c2:53:bf:39:4b:a5:
         dd:f5:73:86:aa:13:67:cd:b4:71:db:08:c0:54:8a:ba:18:03:
         f1:5a:a1:39:82:50:3e:c1:f6:c8:c9:9a:dd:03:b6:73:6e:c7:
         b7:b5:05:1d:f9:c8:3b:f7:e1:d0:e5:cc:40:73:9b:1f:4b:8d:
         be:8d:b5:2e:5c:4d:a2:7e:f4:5b:c3:c6:21:63:7f:4b:60:cc:
         9a:f3:28:fa:3c:7f:8d:87:99:cd:5d:c2:cb:b0:53:8e:fc:b9:
         9b:2f:ab:4d:d3:c4:4d:2d:4b:4e:db:7b:97:9b:8c:16:06:51:
         b5:9c:dd:98:0a:39:1d:66:c8:1a:9c:ba:ab:02:68:58:36:64:
         88:60:1c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org