Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/3136382e302e3136352e302f32342d3234203d3e20323633343833.roa
File:                     3136382e302e3136352e302f32342d3234203d3e20323633343833.roa (raw, json)
Hash identifier:          66njcAAIC/mh+DpeHczZVgtyFk7+i91a/klbvn4HD4U=
Subject key identifier:   B2:E3:76:8B:A4:42:06:B6:4D:92:D4:41:55:D1:F7:F9:2E:7B:9D:32
Certificate issuer:       /CN=C0C75BB14BE079B232D49F113F3BDAF4EB8FD686
Certificate serial:       2FDB8E528DD26021EFD0026F56629E8463384182
Authority key identifier: C0:C7:5B:B1:4B:E0:79:B2:32:D4:9F:11:3F:3B:DA:F4:EB:8F:D6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/3136382e302e3136352e302f32342d3234203d3e20323633343833.roa
Signing time:             Thu 04 Apr 2024 01:30:28 +0000
ROA not before:           Thu 04 Apr 2024 01:25:28 +0000
ROA not after:            Thu 03 Apr 2025 01:30:28 +0000
asID:                     263483
IP address blocks:        168.0.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:db:8e:52:8d:d2:60:21:ef:d0:02:6f:56:62:9e:84:63:38:41:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0C75BB14BE079B232D49F113F3BDAF4EB8FD686
        Validity
            Not Before: Apr  4 01:25:28 2024 GMT
            Not After : Apr  3 01:30:28 2025 GMT
        Subject: CN=B2E3768BA44206B64D92D44155D1F7F92E7B9D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:b6:3e:2a:ab:3a:7e:1c:ec:7c:d9:e1:14:
                    ae:84:66:29:62:3c:28:a5:5d:4a:ff:92:c2:22:a0:
                    0f:a9:47:1c:82:a9:c6:9e:c4:90:3f:af:54:e7:d0:
                    d1:a4:df:6f:1a:51:6d:00:5f:a7:94:ca:14:8f:0f:
                    c5:4f:f4:8b:05:0e:e7:66:30:0f:03:8f:60:f9:31:
                    4c:6f:63:c0:47:49:30:25:21:27:92:96:ca:a3:cb:
                    47:c2:4d:8d:96:09:3f:ae:a2:af:f8:74:83:49:47:
                    de:23:3e:9a:ba:31:82:88:9d:95:eb:50:34:45:9a:
                    7c:2f:1f:40:7b:83:65:52:cd:08:a3:78:a7:94:00:
                    f7:33:3e:d6:58:17:f3:e1:8a:bc:f8:9a:44:f5:61:
                    76:f5:25:3c:9b:c5:06:82:b7:81:33:2b:a8:20:a8:
                    d0:b8:3f:79:1d:aa:99:be:c4:c0:28:c7:1d:a2:63:
                    6e:ba:c8:8b:c1:01:9d:d3:74:1b:e8:f7:d9:cb:bc:
                    76:a0:92:0d:32:9f:bb:a2:43:87:95:80:cb:f7:fa:
                    83:25:31:ab:ed:ea:45:c3:82:40:31:74:66:4a:b3:
                    00:ea:11:3f:db:0f:b8:a7:35:c6:58:65:3a:c4:09:
                    fd:c8:fd:9d:04:3e:29:39:00:ca:69:b8:5a:78:34:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E3:76:8B:A4:42:06:B6:4D:92:D4:41:55:D1:F7:F9:2E:7B:9D:32
            X509v3 Authority Key Identifier:
                keyid:C0:C7:5B:B1:4B:E0:79:B2:32:D4:9F:11:3F:3B:DA:F4:EB:8F:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/3136382e302e3136352e302f32342d3234203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:7a:50:99:09:3c:27:cd:8b:a4:0b:c5:75:a5:6e:3c:b4:ae:
         98:ce:57:42:86:95:06:00:a0:22:d8:a5:87:3f:83:0f:74:60:
         e6:84:6d:4d:fa:71:8f:dd:4d:c1:97:a4:2b:2a:6d:da:f8:53:
         aa:c3:ee:3b:f0:cb:ab:8b:30:80:99:d5:16:0d:1b:c7:34:ff:
         9b:a9:85:8e:1b:9c:7d:f4:74:3b:e6:98:f4:28:e1:36:28:fa:
         c7:3b:65:c8:f4:b7:f0:31:dd:2b:1f:13:ad:97:c4:7d:8d:e2:
         27:93:7b:3c:e4:e9:a2:22:89:96:6e:1e:c5:29:95:9a:3d:d5:
         28:e5:a4:ed:a7:ee:e2:92:12:54:fe:19:98:0b:d9:2f:b6:ad:
         d4:d3:5a:36:b7:60:1e:c8:28:0e:ef:8e:47:b2:bf:9d:fd:49:
         f2:41:8e:31:85:4b:27:ad:87:9d:10:d5:65:d0:b2:70:e7:d1:
         02:96:e1:97:79:d8:61:00:e5:6a:33:40:ce:40:50:b5:cc:5f:
         bc:30:32:61:27:dc:fd:f2:27:4b:e5:b4:d2:e7:59:46:29:77:
         25:62:b8:36:12:ef:cc:09:2f:bb:75:3e:b1:19:8e:f5:5f:5c:
         93:68:fc:75:8f:11:8e:2f:fe:80:13:ab:49:0f:70:84:92:23:
         38:4e:be:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org