Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36312e302f32342d3234203d3e20323633363431.roa
File:                     3136382e3230352e36312e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          2VCJ+LjLsrEtX/cIc4D+qWvzFtl7or3WRpxQZLAohCQ=
Subject key identifier:   6A:60:44:AB:0A:15:2F:ED:D1:D0:27:22:23:48:BE:F1:66:B3:C9:F8
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       3FDE7B864F05937992089777451CB1939C527BBC
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36312e302f32342d3234203d3e20323633363431.roa
Signing time:             Mon 15 Jan 2024 12:10:10 +0000
ROA not before:           Mon 15 Jan 2024 12:05:10 +0000
ROA not after:            Mon 13 Jan 2025 12:10:10 +0000
asID:                     263641
IP address blocks:        168.205.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:de:7b:86:4f:05:93:79:92:08:97:77:45:1c:b1:93:9c:52:7b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Jan 15 12:05:10 2024 GMT
            Not After : Jan 13 12:10:10 2025 GMT
        Subject: CN=6A6044AB0A152FEDD1D027222348BEF166B3C9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:35:ff:54:64:b5:f9:00:c1:e6:bb:ee:b4:ae:
                    f9:6f:39:c3:6b:8a:98:21:d4:ad:b9:d7:39:84:74:
                    75:87:a0:e4:56:2f:ca:e0:4c:d9:80:f1:87:63:04:
                    6b:02:55:a8:a2:3a:5e:e0:db:07:a8:d7:29:05:e4:
                    aa:f5:69:9a:68:1e:23:15:5e:8a:7b:ba:76:5d:e2:
                    0b:c6:4b:a5:86:5e:bd:b1:7e:c3:06:c5:86:0d:d2:
                    ca:33:a1:47:ab:61:c7:97:73:1c:59:6a:9f:92:62:
                    37:0c:0c:4e:88:fa:7f:e9:a4:49:35:89:5a:9c:9f:
                    96:71:49:8f:b7:9e:85:6d:a2:69:7e:d9:ce:d7:02:
                    12:0e:01:96:3b:0d:64:c5:30:31:b6:68:31:55:b2:
                    96:91:26:5a:9f:52:07:93:41:76:6e:62:c2:b3:61:
                    38:30:d9:48:64:b5:51:da:6f:17:9b:6f:f6:cd:b8:
                    55:76:5e:02:b8:96:32:bb:d3:0b:dc:f2:ab:a5:e8:
                    0b:4b:e9:23:bd:33:92:21:27:e0:84:aa:d8:40:5e:
                    e5:0e:f9:42:ee:d5:95:0f:ec:94:a5:ea:8c:67:eb:
                    2f:1c:43:4d:55:46:f8:cb:a4:92:0b:29:62:5c:f7:
                    67:2d:7c:47:b7:be:ef:e4:96:37:02:5c:3d:a0:ab:
                    e6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:60:44:AB:0A:15:2F:ED:D1:D0:27:22:23:48:BE:F1:66:B3:C9:F8
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36312e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:78:4a:57:1a:2b:b3:8a:29:a9:eb:4f:ae:d7:e2:ca:a7:2a:
         3f:97:34:a4:d1:a5:f2:ce:8a:32:c2:d1:92:fb:0f:40:22:fb:
         89:bb:6f:5d:31:0a:08:d8:40:6c:8c:a1:d4:da:42:ec:8b:fd:
         b8:c5:be:66:f7:af:21:2d:e1:7a:bb:e6:8e:25:9a:85:3e:7d:
         5d:63:5a:16:8b:3e:80:ed:19:20:5c:71:48:61:58:f5:78:ce:
         30:11:2e:07:66:28:84:36:b4:a2:87:c1:66:a7:24:e9:25:80:
         24:63:d2:ce:bd:48:a1:d1:26:0e:85:ca:64:e1:32:5d:c1:3d:
         c2:d8:6d:6d:82:e2:42:ad:c7:62:f2:57:d5:8d:08:d5:38:be:
         39:53:ae:98:08:e6:be:6e:5e:5f:96:71:da:68:46:5d:f4:df:
         12:9a:d5:90:c2:4c:53:9f:f8:4d:75:b8:e8:65:97:9a:f5:df:
         9e:09:7d:31:c9:d9:7f:4f:ce:1d:5a:5c:b9:93:df:f4:11:ac:
         45:ab:75:5a:af:7f:b9:7b:71:83:2f:b0:58:d9:12:57:33:dd:
         eb:1f:2f:87:77:a1:35:53:18:1f:f6:20:a0:33:73:35:78:ec:
         96:82:f6:9f:9d:a0:f7:ef:04:20:3c:cc:ad:86:d1:21:97:0a:
         6d:35:2e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org