Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39372e302f32342d3234203d3e20323635343137.roa
File:                     3136382e3139352e39372e302f32342d3234203d3e20323635343137.roa (raw, json)
Hash identifier:          6OkVAEFN/jbxse0987TBvO77q/KH/z+ddjgQJXWT3Bw=
Subject key identifier:   70:93:4F:CB:57:C0:03:BF:4C:D4:4A:D5:86:D7:44:42:07:7A:C0:5A
Certificate issuer:       /CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
Certificate serial:       29977E354F1922715CA1765B799AAD5DD05D4244
Authority key identifier: 56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39372e302f32342d3234203d3e20323635343137.roa
Signing time:             Thu 29 Jun 2023 20:00:02 +0000
ROA not before:           Thu 29 Jun 2023 19:55:02 +0000
ROA not after:            Thu 27 Jun 2024 20:00:02 +0000
asID:                     265417
IP address blocks:        168.195.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:97:7e:35:4f:19:22:71:5c:a1:76:5b:79:9a:ad:5d:d0:5d:42:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
        Validity
            Not Before: Jun 29 19:55:02 2023 GMT
            Not After : Jun 27 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:e9:56:22:71:d6:73:93:ee:66:64:e3:4b:
                    63:1c:66:99:05:2b:6a:90:0f:10:d1:a9:8f:e4:92:
                    d3:98:6c:73:0f:a3:10:7e:97:0e:33:a8:1f:87:67:
                    e9:32:89:95:9f:f4:00:4d:8a:d5:df:19:a9:22:cd:
                    db:a0:87:c3:2a:95:8b:52:d3:17:1f:a7:f1:d4:87:
                    87:81:73:19:f2:6c:a5:7a:6e:40:80:0b:0c:dd:7f:
                    b9:4c:2a:68:02:f9:83:56:c0:7c:13:e9:92:cb:f5:
                    63:ff:a2:8e:4b:2a:fd:d8:aa:77:a2:c4:9b:db:7b:
                    18:f4:35:d1:35:e0:e4:6c:30:9a:32:6c:5a:6f:e7:
                    41:f9:5f:ae:4d:b1:16:84:1c:bb:4a:0a:52:ff:25:
                    86:a9:72:3e:6b:41:05:82:02:4f:b8:2a:c5:67:06:
                    12:4d:f8:27:37:f2:83:62:f5:de:e4:1e:5b:6d:ee:
                    05:82:44:56:ce:cc:78:5b:dd:79:6f:18:5f:67:be:
                    62:0c:67:48:e1:1f:cb:b1:c2:72:73:3d:85:f7:d0:
                    3c:e4:47:f4:02:c9:79:e3:ab:07:ed:cc:92:7b:2a:
                    27:5f:6c:fb:45:c0:1b:15:12:f8:ce:be:ea:c8:1a:
                    43:47:07:96:5a:6f:94:98:bd:ab:60:aa:da:2a:e3:
                    e2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:93:4F:CB:57:C0:03:BF:4C:D4:4A:D5:86:D7:44:42:07:7A:C0:5A
            X509v3 Authority Key Identifier:
                keyid:56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39372e302f32342d3234203d3e20323635343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:6c:27:c4:25:1a:9f:f3:e5:13:63:5c:a7:5a:a7:1c:97:4a:
         e0:18:99:93:4d:24:ea:7b:b9:1e:31:56:ff:25:69:15:d0:92:
         9b:61:8c:58:d7:e3:ca:10:9f:19:bb:d3:37:ff:53:b7:e0:6f:
         5e:ac:37:3a:44:9c:17:3a:89:62:c0:b1:6a:b1:c0:19:b3:92:
         c1:5e:b2:61:39:e7:c2:30:06:d9:a6:df:5c:a9:04:f8:d6:67:
         a0:fd:0e:7c:bb:b8:21:9d:48:a3:29:b8:5f:55:e8:e4:51:1e:
         46:f5:6d:5b:bb:0f:26:05:b2:c7:c9:73:81:bd:b9:a7:8b:b4:
         84:f9:42:fd:a4:14:16:bf:77:a0:fe:51:67:77:06:63:6a:25:
         a9:27:14:7e:d5:e2:2c:7e:34:03:06:42:d7:b7:90:b5:5c:bd:
         b1:06:7d:62:90:e3:39:10:42:c6:8c:0a:0d:da:b9:5d:19:f2:
         c9:40:dd:0f:48:01:00:e5:7f:c2:79:25:c1:ab:a9:3f:92:42:
         f4:8c:ec:78:43:4e:56:96:8d:6e:a2:de:1b:e4:44:12:56:82:
         15:1e:22:6a:f9:3b:00:73:6d:91:ae:2e:1f:a7:04:02:79:c2:
         62:d9:c6:bd:12:27:a8:fb:b0:24:21:0a:86:39:d7:c5:ce:88:
         13:f0:6c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org