Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/0/3136382e3138312e3234302e302f32332d3233203d3e20323635333538.roa
File:                     3136382e3138312e3234302e302f32332d3233203d3e20323635333538.roa (raw, json)
Hash identifier:          Ng9duulWdwj44QnU+FA52AKz9k4XbnbEwdIBQDp+qFk=
Subject key identifier:   05:DA:0B:6A:A2:20:B0:FB:F2:22:6E:B3:71:72:65:A9:51:77:88:8D
Certificate issuer:       /CN=3D017F8EE6C2E955FAEE4098A99B535F4616DE0F
Certificate serial:       498D8FF77B649077CF1F5978D712F75AC5A51CEB
Authority key identifier: 3D:01:7F:8E:E6:C2:E9:55:FA:EE:40:98:A9:9B:53:5F:46:16:DE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D017F8EE6C2E955FAEE4098A99B535F4616DE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/0/3136382e3138312e3234302e302f32332d3233203d3e20323635333538.roa
Signing time:             Tue 09 Jan 2024 11:48:53 +0000
ROA not before:           Tue 09 Jan 2024 11:43:53 +0000
ROA not after:            Tue 07 Jan 2025 11:48:53 +0000
asID:                     265358
IP address blocks:        168.181.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8d:8f:f7:7b:64:90:77:cf:1f:59:78:d7:12:f7:5a:c5:a5:1c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D017F8EE6C2E955FAEE4098A99B535F4616DE0F
        Validity
            Not Before: Jan  9 11:43:53 2024 GMT
            Not After : Jan  7 11:48:53 2025 GMT
        Subject: CN=05DA0B6AA220B0FBF2226EB3717265A95177888D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:78:a1:38:66:9f:21:de:59:3b:95:b7:93:
                    1a:58:15:b0:e9:48:d2:4c:cf:da:75:91:5d:71:9a:
                    e8:70:17:13:4a:f3:e3:ba:8c:cf:81:a2:54:ee:e2:
                    f4:2b:60:e2:73:7b:8e:aa:8d:c0:a2:68:52:20:7e:
                    95:4c:06:ee:72:42:12:cf:78:0a:8b:5e:f9:85:d2:
                    16:11:98:3f:fb:b1:54:07:83:ea:93:3b:7d:92:71:
                    c2:8f:6e:50:0c:d8:e3:9d:4f:8b:7b:68:9b:64:a9:
                    1a:5c:8a:08:b2:78:2c:2d:a0:ae:25:ef:72:fa:e9:
                    81:f5:3e:35:84:e1:ac:6e:a1:da:5a:80:e9:42:e2:
                    be:23:20:db:e0:06:4b:a3:cf:20:8e:25:93:6a:29:
                    91:78:b7:9f:24:68:1b:91:a9:9e:5c:32:04:5b:5e:
                    7a:b0:69:b5:7c:55:87:67:2e:5b:2b:96:32:de:6f:
                    84:ed:5d:d5:18:cb:59:cc:3a:cc:56:18:da:c5:a6:
                    84:6e:83:58:f9:02:8f:f4:f8:bf:1b:64:4a:9b:ab:
                    78:84:ec:ef:5e:a9:21:7b:62:81:74:40:16:65:79:
                    bb:76:57:00:ad:15:12:d4:b9:0f:8a:4c:8b:83:59:
                    a5:c6:d3:30:89:75:15:dc:5e:42:d9:f6:23:0f:e2:
                    01:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DA:0B:6A:A2:20:B0:FB:F2:22:6E:B3:71:72:65:A9:51:77:88:8D
            X509v3 Authority Key Identifier:
                keyid:3D:01:7F:8E:E6:C2:E9:55:FA:EE:40:98:A9:9B:53:5F:46:16:DE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/0/3D017F8EE6C2E955FAEE4098A99B535F4616DE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D017F8EE6C2E955FAEE4098A99B535F4616DE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/0/3136382e3138312e3234302e302f32332d3233203d3e20323635333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:35:5c:1c:3c:4e:4e:f6:2e:67:a4:2f:ea:e3:48:f8:2a:ad:
         da:1a:48:0b:c8:41:86:09:84:bb:fa:ad:f6:e3:29:b9:d8:cc:
         7a:c4:a1:6e:f9:b8:d4:d6:24:ff:34:37:a4:37:b3:1c:91:53:
         a3:a3:76:c7:5b:1a:ba:82:f0:45:6d:a9:95:cb:f8:3b:67:0a:
         2f:0f:36:2d:2b:2c:7d:2a:59:c1:79:1e:05:80:ea:e8:12:71:
         83:1d:fc:c1:bc:9c:47:e6:03:61:95:99:14:4f:60:f9:5a:46:
         d1:f5:38:f2:23:5b:11:40:18:25:dd:ee:c1:18:38:ea:1a:78:
         06:b3:54:bc:b8:9d:27:6b:03:d1:80:89:2d:26:64:a5:33:08:
         c6:49:9f:09:a6:f2:6a:63:cb:0f:2b:99:0e:93:65:ca:0d:d0:
         09:cc:99:bd:d9:5b:a3:4e:70:bd:92:51:e7:6b:d4:b8:a0:78:
         f1:2e:97:88:b6:19:60:20:9f:65:c1:9e:36:35:cf:6e:f2:02:
         13:dd:e5:af:6c:12:65:54:d1:ce:cc:b9:f7:c2:0d:c2:84:23:
         37:58:30:ea:11:02:56:79:cf:6b:09:e8:e4:78:6d:52:5d:58:
         51:d9:67:d3:6a:8a:c4:a2:f2:f1:5f:48:d7:bf:a2:52:8f:1a:
         a9:62:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org