Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39382e302f32342d3234203d3e20323635343137.roa
File:                     3136382e3139352e39382e302f32342d3234203d3e20323635343137.roa (raw, json)
Hash identifier:          JNHudWK8W3Lrd7vM5WIMq/izuuiPeyETDxMypX3qBcA=
Subject key identifier:   66:38:A8:CC:E2:9E:FE:94:B8:34:50:61:DB:81:1A:B9:1D:80:D5:5E
Certificate issuer:       /CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
Certificate serial:       47DAA9C95CCC709866087D73E989C29DACC609FE
Authority key identifier: 56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39382e302f32342d3234203d3e20323635343137.roa
Signing time:             Thu 29 Jun 2023 20:00:02 +0000
ROA not before:           Thu 29 Jun 2023 19:55:02 +0000
ROA not after:            Thu 27 Jun 2024 20:00:02 +0000
asID:                     265417
IP address blocks:        168.195.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:da:a9:c9:5c:cc:70:98:66:08:7d:73:e9:89:c2:9d:ac:c6:09:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
        Validity
            Not Before: Jun 29 19:55:02 2023 GMT
            Not After : Jun 27 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:38:4f:56:d8:4f:10:61:23:18:b9:ac:06:
                    c6:1b:dc:f1:69:ec:f9:86:8a:3e:4f:24:65:bb:3a:
                    c4:ca:40:20:01:6d:1d:e9:bd:a1:1d:11:e4:9a:d2:
                    49:96:d2:15:c0:b7:ec:bd:ea:bc:ff:a0:15:8e:b3:
                    97:e8:51:98:1c:22:7b:0a:92:28:b7:12:6f:b4:0a:
                    42:1f:55:83:45:d1:bd:ea:f2:7d:71:e8:fb:33:8c:
                    2c:c2:49:e7:0e:64:b8:32:06:c8:25:26:75:61:12:
                    d8:dc:17:d2:a4:45:09:90:ee:99:79:d6:74:14:10:
                    f1:5d:72:56:3c:75:fe:7d:40:b4:40:11:9f:4a:ae:
                    33:ea:e0:9d:64:11:ea:a5:c0:c4:42:2d:fc:e0:41:
                    de:9c:22:e0:92:91:04:ce:e3:ef:a1:79:d6:f3:93:
                    0a:4f:c3:e9:0a:f0:25:ce:f1:19:f5:0e:bc:a7:0e:
                    c5:aa:0d:2f:9d:85:33:8a:0b:95:d1:e4:37:d8:97:
                    ba:01:14:e6:7d:db:6b:c5:96:8f:d7:63:4b:92:bb:
                    a9:da:9e:ae:96:1a:d9:83:ef:0f:0b:b5:61:8d:ef:
                    32:d5:e5:20:ce:fd:2d:56:51:4b:be:43:1d:ec:41:
                    40:0d:8f:b9:5a:f4:51:2d:fa:11:aa:00:bc:a2:2e:
                    ef:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:38:A8:CC:E2:9E:FE:94:B8:34:50:61:DB:81:1A:B9:1D:80:D5:5E
            X509v3 Authority Key Identifier:
                keyid:56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39382e302f32342d3234203d3e20323635343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:2a:0b:9a:72:6f:a8:39:1c:b6:05:94:8f:d8:4a:a0:85:cd:
         f2:7d:fc:eb:a3:8c:88:2a:f0:ad:2f:e6:11:d4:6f:18:3a:af:
         c9:18:f6:4f:69:c6:37:c4:53:6f:95:ab:bd:36:63:7f:1a:97:
         fa:00:a4:b8:1e:6d:62:78:ec:25:f0:98:44:15:a9:12:6a:b4:
         e1:80:17:1f:ea:17:c3:b6:eb:78:be:d8:78:43:bc:b5:83:7b:
         e1:da:dd:0e:52:fa:34:fc:41:b8:50:d5:bb:ec:61:ca:6c:c9:
         c6:0c:94:27:e0:38:b9:bc:28:83:66:7c:a9:23:f1:1b:23:dd:
         65:d3:5c:25:42:46:f6:98:26:c8:b4:80:d0:1f:da:bb:df:c9:
         0a:ad:77:bf:ab:02:f7:7a:c5:13:20:f0:2a:a5:8d:c8:59:6d:
         a0:0f:84:42:80:92:09:46:ca:7b:d5:01:81:d8:d5:b0:90:90:
         c5:2f:dc:b5:36:26:3d:04:49:73:4e:fe:46:a7:b5:d0:4e:52:
         6b:8b:62:52:ea:c2:22:7d:b8:0f:c1:ed:cc:18:f1:88:77:66:
         89:de:a7:bd:29:b6:41:02:92:b3:d5:e5:08:13:4f:06:95:e1:
         7a:cf:99:c5:88:5d:eb:bb:cb:ed:2d:d6:f0:96:3b:d7:5c:68:
         71:be:2f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org