Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38362e302f32342d3234203d3e20323635343437.roa
File:                     3136382e3139362e38362e302f32342d3234203d3e20323635343437.roa (raw, json)
Hash identifier:          Ebkaxe3+5c15rdXrGlX/VTD3PeITF+Ns9josy8H13Ow=
Subject key identifier:   61:9E:03:41:9A:87:D9:D6:9A:8B:66:53:47:62:DC:3B:69:A5:36:4C
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       7902C0260AC246DBCB14394F4F15A5C549C84F16
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38362e302f32342d3234203d3e20323635343437.roa
Signing time:             Mon 23 Oct 2023 18:25:22 +0000
ROA not before:           Mon 23 Oct 2023 18:20:22 +0000
ROA not after:            Mon 21 Oct 2024 18:25:22 +0000
asID:                     265447
IP address blocks:        168.196.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:02:c0:26:0a:c2:46:db:cb:14:39:4f:4f:15:a5:c5:49:c8:4f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 23 18:20:22 2023 GMT
            Not After : Oct 21 18:25:22 2024 GMT
        Subject: CN=619E03419A87D9D69A8B66534762DC3B69A5364C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:6f:d6:43:e6:10:ea:f6:b2:e0:b3:0e:2c:
                    f4:66:81:95:19:0e:e6:7d:60:5a:2c:9a:0d:08:3a:
                    f4:58:f8:01:12:ff:1b:74:37:18:13:8a:44:1d:14:
                    bf:bd:13:79:10:0c:a5:bd:64:18:7a:ba:0d:dc:a0:
                    ff:8e:c0:03:d3:38:b4:cc:54:99:88:3b:9b:3a:9a:
                    27:9d:25:2e:f2:0d:72:87:a8:11:79:60:e2:3b:25:
                    6e:f0:d2:1f:55:cf:3f:9e:c4:5d:7a:2c:aa:b8:03:
                    9d:7e:b8:47:f1:c2:ea:e5:ef:52:53:00:c3:09:cd:
                    2a:20:93:46:4c:cf:24:da:54:a1:d1:65:16:0e:51:
                    f0:d0:4d:45:06:7e:de:9d:11:9a:b9:57:11:19:09:
                    44:7d:03:ac:38:88:f8:17:01:49:5f:58:1f:8d:f1:
                    77:f1:65:ff:de:b0:8b:34:cd:a6:a5:a0:cb:5a:d1:
                    2f:21:0e:dd:06:78:1d:10:06:44:73:da:dd:fa:e2:
                    f1:f6:a5:78:05:f5:2d:c7:7b:62:03:42:05:df:d6:
                    bd:4c:37:3e:ed:85:09:e9:e3:9e:37:e3:0e:a6:b7:
                    9d:e3:5c:99:d5:dd:34:1a:fe:4d:bf:a1:21:a5:1e:
                    35:eb:44:e1:e6:40:d9:0f:3f:05:5d:98:78:07:88:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9E:03:41:9A:87:D9:D6:9A:8B:66:53:47:62:DC:3B:69:A5:36:4C
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38362e302f32342d3234203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:88:29:ed:01:53:eb:52:3e:44:d5:f7:09:05:26:fb:67:67:
         9b:4a:81:ff:51:77:0b:9c:72:11:e2:77:f1:a8:04:ee:45:b2:
         bc:f9:8c:d0:f1:30:91:02:8a:5d:cc:77:0c:00:82:da:72:13:
         43:4e:e3:4b:ab:2d:66:94:b6:02:a1:5a:8f:63:a8:24:d2:b5:
         29:d4:1c:53:6d:1c:a3:99:9c:d3:f1:59:c1:5b:ca:e1:4c:a4:
         5a:a2:68:c3:d2:9b:92:23:6e:81:19:6d:78:a7:dd:19:38:1a:
         d2:ae:18:dc:a2:b3:4e:8f:1e:2b:f6:d5:4a:e9:2e:c2:1e:e8:
         62:6b:5e:b5:b2:f8:d4:f9:f4:48:55:93:85:d6:90:3b:c6:0f:
         31:35:89:af:d2:fd:e6:26:31:13:55:68:35:b7:df:16:2e:0b:
         4b:95:82:f4:14:8f:80:2a:01:35:1d:4b:e1:22:88:25:fb:23:
         f2:60:83:0c:d7:f1:65:9d:5d:d7:2e:da:14:f8:72:d9:0b:7e:
         81:1d:e4:41:f5:df:48:85:d1:97:8c:e3:08:1d:86:b2:55:b8:
         f9:67:a9:5c:44:d7:c9:ab:b8:6c:7e:c8:81:cd:ae:51:cf:d1:
         67:83:d9:32:27:c4:ed:66:30:2c:69:65:0b:4e:a2:7d:bc:a3:
         53:b6:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org