Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39382e302f32332d3233203d3e20323635343137.roa
File:                     3136382e3139352e39382e302f32332d3233203d3e20323635343137.roa (raw, json)
Hash identifier:          +oqnaRlaPnQaJ8EzJCiLu2eNg7E3BsZOMRNQPzt3t7g=
Subject key identifier:   C5:F0:15:ED:F1:D2:B9:9A:F5:1D:8E:17:13:44:DA:29:DE:0D:C3:6E
Certificate issuer:       /CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
Certificate serial:       2DF4BC4327F865DC95FBAB864D764DBCB725BEB2
Authority key identifier: 56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39382e302f32332d3233203d3e20323635343137.roa
Signing time:             Thu 29 Jun 2023 20:00:02 +0000
ROA not before:           Thu 29 Jun 2023 19:55:02 +0000
ROA not after:            Thu 27 Jun 2024 20:00:02 +0000
asID:                     265417
IP address blocks:        168.195.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f4:bc:43:27:f8:65:dc:95:fb:ab:86:4d:76:4d:bc:b7:25:be:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
        Validity
            Not Before: Jun 29 19:55:02 2023 GMT
            Not After : Jun 27 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:19:b5:da:10:11:eb:e9:34:e4:d1:ec:53:
                    4c:92:5b:d4:2b:70:16:15:06:ad:34:d5:39:43:ba:
                    20:37:f7:3b:14:04:61:11:d1:72:69:df:07:ef:dc:
                    8a:8e:fc:14:87:2a:a2:eb:54:3b:e1:45:ba:9d:0c:
                    96:a5:e5:13:55:29:08:48:09:b7:a2:c5:da:6f:6f:
                    db:9b:33:c9:17:71:f6:54:dd:46:51:72:28:6d:6a:
                    93:86:e0:e6:3a:95:86:45:97:ac:49:68:4b:a7:bf:
                    9d:14:6d:2b:e8:24:58:72:7d:d9:0e:2e:4a:c6:be:
                    e2:8b:1e:52:c1:ff:8d:d4:73:ba:d7:10:e3:da:54:
                    34:5f:44:ca:99:f1:c0:c0:83:c0:46:4e:51:8a:d5:
                    87:af:4c:4c:63:5c:08:1d:56:b4:e2:9a:aa:15:a5:
                    0c:0a:96:9b:1f:73:05:1b:7b:62:a5:a9:82:aa:ba:
                    b0:71:e7:f1:a6:5f:3d:7e:96:7b:c0:86:01:05:58:
                    1d:fc:e9:9c:ea:27:d1:7b:bc:cd:d6:f5:0d:93:11:
                    e4:03:56:18:1f:68:40:21:48:b7:0d:68:d9:f8:74:
                    87:a8:2d:34:6a:68:6f:aa:44:4c:8a:03:1f:02:20:
                    97:7d:4c:64:cb:dc:27:4a:32:29:8e:99:f3:6e:16:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F0:15:ED:F1:D2:B9:9A:F5:1D:8E:17:13:44:DA:29:DE:0D:C3:6E
            X509v3 Authority Key Identifier:
                keyid:56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39382e302f32332d3233203d3e20323635343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:b0:36:9e:5e:fc:ba:7b:2e:fe:a9:32:51:ea:fa:4b:4e:0a:
         1e:9b:69:93:49:ec:be:4b:ef:0d:d3:2a:d8:3b:60:c3:d3:be:
         45:ce:79:c1:b7:50:07:0c:0e:d7:ec:db:19:a4:be:35:b8:1e:
         0c:34:f9:c0:bc:93:ca:6a:b9:80:d0:e1:03:52:78:46:ed:8a:
         e8:04:b0:9b:36:89:4c:96:21:17:8b:27:15:38:cd:04:a1:b1:
         e0:44:58:89:f5:a8:57:04:93:0c:58:e1:a3:34:7d:44:5b:6b:
         6e:4b:94:53:dc:c8:7b:11:1b:d3:87:5e:24:88:69:01:56:9f:
         67:c0:95:1b:da:06:d0:a8:63:2a:00:00:00:8b:55:77:a7:20:
         45:31:de:45:d1:ab:3a:f1:00:55:c1:23:60:55:bf:a5:fd:29:
         0d:42:03:53:cd:02:ed:e1:63:ba:f6:86:ef:66:0a:41:ec:a9:
         ca:e8:67:de:04:20:32:3f:66:b7:1d:11:a7:15:f7:ed:88:57:
         57:50:2d:76:df:de:35:62:0c:a1:52:c9:b2:db:18:f5:76:7f:
         a0:e0:4a:19:5b:5e:c1:6c:81:37:7b:26:6e:04:d4:a1:d2:56:
         94:d7:34:45:7a:f4:dd:e3:4e:73:47:d9:0b:e0:e6:79:3e:cb:
         d2:91:9d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org