Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/3136382e302e3136372e302f32342d3234203d3e203238353837.roa
File:                     3136382e302e3136372e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          IBvbTBGvgSIATEC8Cq5sqiC8+H6JuG25Lqw9Pe9fvJ0=
Subject key identifier:   84:EC:A8:B0:01:F0:CF:66:FE:8C:D8:AB:1D:13:FF:C2:48:5A:0B:35
Certificate issuer:       /CN=C0C75BB14BE079B232D49F113F3BDAF4EB8FD686
Certificate serial:       54F25D21A2767050EEF693EE39998C69A29BCB39
Authority key identifier: C0:C7:5B:B1:4B:E0:79:B2:32:D4:9F:11:3F:3B:DA:F4:EB:8F:D6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/3136382e302e3136372e302f32342d3234203d3e203238353837.roa
Signing time:             Thu 04 Apr 2024 01:30:28 +0000
ROA not before:           Thu 04 Apr 2024 01:25:28 +0000
ROA not after:            Thu 03 Apr 2025 01:30:28 +0000
asID:                     28587
IP address blocks:        168.0.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f2:5d:21:a2:76:70:50:ee:f6:93:ee:39:99:8c:69:a2:9b:cb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0C75BB14BE079B232D49F113F3BDAF4EB8FD686
        Validity
            Not Before: Apr  4 01:25:28 2024 GMT
            Not After : Apr  3 01:30:28 2025 GMT
        Subject: CN=84ECA8B001F0CF66FE8CD8AB1D13FFC2485A0B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:16:2c:b7:df:17:5f:68:54:63:5e:a5:9f:
                    2f:ee:8b:f3:a1:50:85:60:d7:6a:41:89:2b:55:48:
                    6b:90:0b:2d:b6:4f:45:73:03:92:68:3d:e8:4d:1c:
                    4d:6c:2a:08:63:e8:2e:3c:8b:bc:ef:27:1c:2c:65:
                    d9:1e:37:2f:34:5d:b2:0a:41:32:cd:61:b0:c9:b0:
                    e6:b7:b2:78:34:13:b6:5d:30:64:de:99:d5:b0:cb:
                    1c:fd:f8:49:b7:81:08:20:11:ae:8f:45:64:d7:c4:
                    73:db:b3:f8:56:87:95:cd:b0:03:6f:9c:65:d0:7d:
                    4c:99:d5:82:b5:5a:1a:5f:36:7a:a9:cb:6f:51:9c:
                    01:9d:0e:19:95:b7:fb:71:42:33:cd:fc:b9:3e:5f:
                    a7:4a:9e:b6:74:43:b6:4d:7e:1a:be:dd:06:6d:15:
                    0b:46:8c:9a:90:1a:8c:2d:34:f1:88:60:4e:23:3f:
                    a1:c8:44:41:7c:ac:9b:a6:97:d6:e6:ec:59:7e:f2:
                    f0:36:b2:24:56:2b:3e:97:10:41:2c:41:04:6c:bf:
                    de:40:fb:ff:87:49:c7:be:4d:5b:41:4c:04:b0:37:
                    34:ab:70:da:c6:48:18:54:e9:10:1f:b0:41:d3:07:
                    86:04:98:7e:6f:71:cd:8e:45:29:a1:ef:5e:d2:65:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EC:A8:B0:01:F0:CF:66:FE:8C:D8:AB:1D:13:FF:C2:48:5A:0B:35
            X509v3 Authority Key Identifier:
                keyid:C0:C7:5B:B1:4B:E0:79:B2:32:D4:9F:11:3F:3B:DA:F4:EB:8F:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0C75BB14BE079B232D49F113F3BDAF4EB8FD686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/1/3136382e302e3136372e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:99:6f:74:9d:36:6a:54:95:ce:d0:a9:17:f1:b1:e4:be:75:
         06:4b:fa:1d:db:68:73:f5:62:f6:af:25:70:57:78:d7:e8:b0:
         7a:f1:c7:ab:11:88:cc:96:7d:e3:20:19:e7:b8:59:b9:58:c6:
         10:38:59:7a:04:6a:d5:43:76:7f:54:94:9e:e1:d5:b0:1b:4c:
         9f:9a:7b:a8:9e:9b:52:b0:f7:b8:40:66:82:84:85:57:e6:4c:
         61:69:df:13:00:43:7f:17:80:0a:b8:96:02:0e:9d:75:9e:f1:
         8c:1c:04:af:77:bf:e1:6f:71:6c:6d:b8:a1:e5:03:61:90:84:
         79:1a:bb:d4:19:4a:a1:8d:52:9c:54:9c:d8:5b:44:06:0f:f0:
         1c:76:cb:a6:ba:f7:85:9c:d7:04:38:3b:fb:18:3c:09:f4:68:
         b6:fd:e1:10:1d:e6:e1:f8:0a:27:96:28:ce:43:bf:9d:2b:9f:
         d9:de:a7:e5:cd:0c:73:05:1e:92:3a:12:5d:06:a3:b9:eb:dc:
         28:de:9c:e1:fe:c3:3e:9a:99:92:58:41:45:c2:4a:3a:7a:72:
         c7:3a:fb:c3:f3:b5:2d:40:8a:00:30:9f:3a:60:24:b1:5c:66:
         a6:9f:f7:a4:0a:3f:e0:3f:7b:2f:9e:d6:5b:e2:b4:8c:41:d0:
         0c:d4:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org