Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/0/3136382e3138312e3234312e302f32342d3234203d3e20323635333538.roa
File:                     3136382e3138312e3234312e302f32342d3234203d3e20323635333538.roa (raw, json)
Hash identifier:          ej+o6upu5/E3n+Sa5/XyWRg9wojn2D6iXGfofUBaxmU=
Subject key identifier:   3E:BD:53:41:97:37:FF:14:35:9D:B2:48:08:32:C4:43:FF:F3:E5:68
Certificate issuer:       /CN=3D017F8EE6C2E955FAEE4098A99B535F4616DE0F
Certificate serial:       68A7C75494BBF7CDB83994BD8B8B6B3208FAD529
Authority key identifier: 3D:01:7F:8E:E6:C2:E9:55:FA:EE:40:98:A9:9B:53:5F:46:16:DE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D017F8EE6C2E955FAEE4098A99B535F4616DE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/0/3136382e3138312e3234312e302f32342d3234203d3e20323635333538.roa
Signing time:             Tue 09 Jan 2024 11:48:53 +0000
ROA not before:           Tue 09 Jan 2024 11:43:53 +0000
ROA not after:            Tue 07 Jan 2025 11:48:53 +0000
asID:                     265358
IP address blocks:        168.181.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a7:c7:54:94:bb:f7:cd:b8:39:94:bd:8b:8b:6b:32:08:fa:d5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D017F8EE6C2E955FAEE4098A99B535F4616DE0F
        Validity
            Not Before: Jan  9 11:43:53 2024 GMT
            Not After : Jan  7 11:48:53 2025 GMT
        Subject: CN=3EBD53419737FF14359DB2480832C443FFF3E568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:79:82:18:f8:9a:84:4f:87:b3:a3:ad:7d:
                    3a:19:d8:16:67:25:3d:25:ca:02:47:16:8d:ec:9a:
                    3b:c2:0c:2e:83:94:55:e8:ca:7c:a2:f9:33:e2:6e:
                    6c:dd:9d:7e:36:a2:31:0c:54:64:79:1e:d6:41:9f:
                    0e:cd:38:3a:a0:8b:dc:b0:72:73:fd:e3:eb:e7:73:
                    39:28:38:99:15:7d:ae:4f:cb:b6:52:cf:2f:f3:a7:
                    b9:5e:40:c8:a0:c8:2e:46:6a:31:cf:d3:13:8e:6d:
                    15:1e:f2:22:89:8f:55:06:e1:e2:8b:d3:b7:d5:cc:
                    8e:af:2a:0d:88:32:ce:7d:55:0b:57:b2:98:d6:47:
                    1d:ae:e5:13:9d:26:95:f3:c3:2b:9a:0c:66:26:e8:
                    ed:05:d9:99:e1:80:28:01:9c:c0:6f:7e:89:a8:57:
                    60:33:e0:54:db:94:7d:85:b9:d5:87:22:35:09:f7:
                    d5:b3:ca:6b:26:43:20:d0:c2:71:27:e1:14:42:ad:
                    29:93:f9:9b:ee:5a:37:ec:ab:9b:a4:97:7e:35:6a:
                    a6:73:ac:96:57:07:76:74:b7:83:ae:9c:91:d4:86:
                    76:27:bb:ea:b0:e8:cb:bd:27:9c:f6:e1:b6:1f:70:
                    84:36:e5:cd:d4:b9:8b:be:75:c1:fe:dc:e6:c6:00:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BD:53:41:97:37:FF:14:35:9D:B2:48:08:32:C4:43:FF:F3:E5:68
            X509v3 Authority Key Identifier:
                keyid:3D:01:7F:8E:E6:C2:E9:55:FA:EE:40:98:A9:9B:53:5F:46:16:DE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/0/3D017F8EE6C2E955FAEE4098A99B535F4616DE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D017F8EE6C2E955FAEE4098A99B535F4616DE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/0/3136382e3138312e3234312e302f32342d3234203d3e20323635333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:24:99:4a:72:e5:65:19:e7:4f:55:94:9f:ad:45:bf:20:57:
         db:5d:b1:f2:bf:63:2b:83:8f:b3:6e:ef:75:c7:f7:18:fb:98:
         ad:0a:56:4e:36:40:6c:c3:2d:ee:3d:43:8b:7b:c8:42:e9:16:
         a9:3b:72:e1:d0:30:9e:8e:e7:f3:c9:14:72:56:82:54:e9:49:
         83:7e:3a:0d:c4:b4:dd:50:75:18:8f:66:a3:81:c0:d4:54:35:
         2e:4b:1b:fc:6c:3d:11:32:c1:0d:cd:c3:a1:e6:1f:c4:23:6b:
         ed:d8:6f:e1:59:5b:69:41:27:48:04:bf:a2:58:79:8f:06:40:
         44:5e:5b:90:d8:56:b1:d7:69:31:4e:de:27:92:e3:99:9a:24:
         8f:98:77:05:6b:7e:d5:de:f7:16:5a:b1:b2:84:a6:6c:db:49:
         e7:5f:6c:bd:40:79:43:5c:0c:c6:c2:0e:18:c2:b4:ef:91:f2:
         1d:69:cb:a3:d5:14:bb:41:16:e5:17:c8:2d:93:c4:77:ad:d1:
         02:a4:8c:e3:2a:4b:ad:0a:bf:38:5c:6d:ca:8a:9b:38:29:5d:
         ec:f1:2e:d0:46:df:b6:3f:3e:fe:34:c6:d5:48:65:8a:d6:c1:
         2d:d1:40:8a:24:b9:04:55:0d:99:e3:1b:ef:a6:f8:1d:71:53:
         36:25:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org