Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/3136382e302e3136342e302f32342d3234203d3e20323633343833.roa
File:                     3136382e302e3136342e302f32342d3234203d3e20323633343833.roa (raw, json)
Hash identifier:          dN+I4yNEl/TX24bwiJFOlW4cHnabg29C1lGtGZjZQ4g=
Subject key identifier:   C2:54:06:E1:B3:8F:85:C9:93:D3:2D:34:68:25:49:AC:44:A0:53:51
Certificate issuer:       /CN=C0C75BB14BE079B232D49F113F3BDAF4EB8FD686
Certificate serial:       443F8C2B7F5AC4666B9B0518B5C199AE87652D41
Authority key identifier: C0:C7:5B:B1:4B:E0:79:B2:32:D4:9F:11:3F:3B:DA:F4:EB:8F:D6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/3136382e302e3136342e302f32342d3234203d3e20323633343833.roa
Signing time:             Thu 04 Apr 2024 01:30:28 +0000
ROA not before:           Thu 04 Apr 2024 01:25:28 +0000
ROA not after:            Thu 03 Apr 2025 01:30:28 +0000
asID:                     263483
IP address blocks:        168.0.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3f:8c:2b:7f:5a:c4:66:6b:9b:05:18:b5:c1:99:ae:87:65:2d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0C75BB14BE079B232D49F113F3BDAF4EB8FD686
        Validity
            Not Before: Apr  4 01:25:28 2024 GMT
            Not After : Apr  3 01:30:28 2025 GMT
        Subject: CN=C25406E1B38F85C993D32D34682549AC44A05351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:05:74:77:91:56:69:5c:b5:b6:bb:13:e3:
                    43:13:f3:1c:ca:75:68:ed:1f:1b:0a:36:16:f0:64:
                    75:d2:07:92:dd:5e:5a:98:c2:a0:fe:9c:30:45:e7:
                    08:b4:9d:a7:31:09:3a:4f:69:fc:d0:0a:46:40:f0:
                    73:f9:09:6c:a8:58:c0:03:1a:61:b7:54:d7:1c:2c:
                    3e:a5:51:bc:93:b8:6d:b7:26:69:5d:0d:85:df:58:
                    a7:2c:10:3c:d2:0b:b3:53:d0:5a:74:03:1e:ec:c3:
                    54:e4:51:f8:f7:4a:48:cb:3f:76:45:ad:1b:91:e9:
                    9e:3e:56:a1:37:26:95:76:18:a5:b7:3c:f8:3a:75:
                    34:13:c9:67:b5:40:66:9f:c4:57:40:3b:47:50:f1:
                    86:04:56:fa:a2:dd:4b:09:3b:ee:e6:66:bf:77:19:
                    c3:dc:37:75:ca:34:02:d1:cc:1c:3f:6c:ac:77:8e:
                    94:6a:0e:30:3b:8d:6b:c7:75:d0:93:3f:65:54:ea:
                    da:88:9a:57:a2:ef:80:bb:b5:d7:a6:50:dc:76:95:
                    6a:e0:af:f5:15:a1:83:65:03:25:72:94:f1:63:31:
                    08:7a:39:8b:07:8e:d5:f8:fb:e9:3a:f9:04:41:1b:
                    63:29:db:93:19:1b:56:73:1f:2f:e4:b5:28:af:38:
                    58:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:54:06:E1:B3:8F:85:C9:93:D3:2D:34:68:25:49:AC:44:A0:53:51
            X509v3 Authority Key Identifier:
                keyid:C0:C7:5B:B1:4B:E0:79:B2:32:D4:9F:11:3F:3B:DA:F4:EB:8F:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/3136382e302e3136342e302f32342d3234203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c9:a5:50:12:43:58:bd:36:78:d8:fb:67:11:d0:4b:a7:92:
         df:f3:1e:3f:46:31:44:5c:80:91:d7:9b:14:7e:64:f0:51:cb:
         7d:9f:b7:a8:6d:10:52:ea:d7:b2:ca:f8:7c:4e:f1:d6:13:bf:
         8b:7f:91:97:62:c4:f6:f0:68:a7:eb:52:21:d7:03:0d:70:c1:
         b1:8c:8a:73:33:97:93:8c:6f:8b:80:b3:4c:37:06:fb:a3:71:
         0a:1e:1c:f4:45:3e:56:e1:1d:0d:61:62:cd:5f:8c:4b:19:a8:
         0a:68:70:57:44:93:db:6f:01:00:03:44:df:e2:9a:47:d4:d4:
         27:39:73:bf:80:df:f3:64:64:0a:4d:7d:f4:6e:4c:d7:a7:b0:
         6f:be:8a:0a:e7:65:ba:db:9f:4d:76:b6:32:f0:c5:0c:b7:af:
         7d:54:bd:e3:4c:df:8e:53:23:bc:e4:68:b8:ea:1b:8a:73:e9:
         d8:3e:fe:a7:00:93:a4:c9:52:87:95:4a:f0:1c:32:a3:ef:39:
         81:3c:3f:a7:47:c4:cf:cd:cd:73:f3:b1:07:68:80:86:ee:11:
         62:c0:b4:86:16:4c:35:76:7a:f6:ca:33:b9:00:6a:7f:58:19:
         76:74:8c:2f:6a:a1:88:c7:b5:d6:de:c1:cc:39:ea:3a:f3:59:
         86:00:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org