Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36332e302f32342d3234203d3e20323633363431.roa
File:                     3136382e3230352e36332e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          NzQchm7VpsndahW99RaRm6n11Ns6kFDy15+s54fqBO0=
Subject key identifier:   B8:EF:83:BE:05:F7:AF:BC:D3:C2:50:FA:4B:30:1F:6E:3F:4F:A6:A6
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       7C419955E391CC7C66439FCCA0E4BCFC5E04966B
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36332e302f32342d3234203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:35 +0000
ROA not before:           Tue 05 Dec 2023 15:39:35 +0000
ROA not after:            Tue 03 Dec 2024 15:44:35 +0000
asID:                     263641
IP address blocks:        168.205.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:41:99:55:e3:91:cc:7c:66:43:9f:cc:a0:e4:bc:fc:5e:04:96:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:35 2023 GMT
            Not After : Dec  3 15:44:35 2024 GMT
        Subject: CN=B8EF83BE05F7AFBCD3C250FA4B301F6E3F4FA6A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:1c:ec:12:5c:79:72:19:a2:b9:eb:96:8c:
                    45:76:e6:22:7b:5f:16:fa:9c:d6:4e:0e:7e:a8:08:
                    15:7f:62:c2:7a:f2:f3:df:1b:da:4a:ad:c8:24:08:
                    ea:b5:07:7b:ca:47:44:ff:c6:e4:8f:74:da:62:b4:
                    7c:03:cf:c1:20:c8:dd:b2:1f:25:c1:56:a3:e7:a4:
                    74:33:d2:8b:b9:cc:6d:cf:ba:8e:76:a0:53:b7:bf:
                    c3:12:29:fe:57:1e:85:6a:c5:33:e2:e8:26:aa:93:
                    fe:d1:51:31:d2:02:36:a5:cc:71:56:3b:6d:24:55:
                    bd:a1:c6:3b:c9:09:1f:a6:bb:62:80:26:36:f2:31:
                    83:9c:53:e1:25:ec:65:2a:ab:76:29:7e:07:45:35:
                    8e:73:dd:35:c5:89:a6:84:ea:4f:6d:3c:b6:6b:cf:
                    6b:af:cf:6b:a7:d6:f8:ef:eb:18:9d:03:7a:62:ce:
                    8e:95:89:6e:cf:b1:66:cb:6e:4b:d3:f1:96:7c:48:
                    1a:58:34:e8:07:82:ac:b8:79:55:11:2f:ad:9c:92:
                    e4:ea:42:52:45:29:a8:52:1f:0d:1e:03:e2:82:26:
                    89:03:28:2b:95:bc:58:1e:79:49:cb:91:5e:0e:76:
                    37:de:81:05:a5:fb:17:86:8b:28:e1:34:08:6f:d5:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EF:83:BE:05:F7:AF:BC:D3:C2:50:FA:4B:30:1F:6E:3F:4F:A6:A6
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36332e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:34:4e:ba:ea:79:da:0a:07:bf:c7:ef:5e:27:59:c4:a8:c2:
         55:1d:be:19:72:28:4a:ba:ea:51:5f:ef:84:70:0d:5d:0a:0b:
         dd:4c:3d:4d:7b:dd:a0:1a:c9:f1:87:6a:bb:b4:ae:e5:74:2d:
         60:77:6e:30:7b:df:ef:d8:03:d1:33:ca:47:62:4f:97:22:f9:
         71:35:c2:8a:9c:1b:fe:fb:ba:b8:ea:ee:0e:98:c5:e7:50:1b:
         3f:89:64:38:5f:0a:b3:99:f6:9b:eb:ed:c3:35:09:16:63:61:
         03:f3:b4:e5:47:bb:97:f1:f9:29:76:4d:2c:a3:de:f3:c8:7b:
         59:30:e9:74:97:6c:22:58:03:8b:e3:14:b9:74:5c:00:25:be:
         ba:3f:44:bc:e5:17:41:cd:e6:d4:84:cd:de:a8:3b:65:16:8b:
         df:fe:b8:b1:39:76:ec:98:bf:ad:83:db:0a:a8:32:52:d5:9d:
         df:3b:52:92:ec:cd:72:c4:9c:bc:58:a3:e0:e9:ee:0d:9b:0a:
         01:86:35:56:09:82:98:2c:d5:09:ec:bd:e2:ff:a0:d4:fe:a1:
         d0:a1:51:9c:57:c8:8b:21:12:20:b3:bd:f0:8d:06:1c:95:6c:
         1f:21:00:ea:f2:ae:69:5c:ef:ba:cd:e7:15:a2:c1:2a:92:de:
         7e:84:8f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org