Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/1/3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa
File:                     3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa (raw, json)
Hash identifier:          k2zw5C5DKxfR95viIQ6nhb86BwZaQ50HBlE+rp6PEWY=
Subject key identifier:   88:A3:94:C9:7B:25:40:53:25:5C:79:C6:56:BA:3D:86:9C:9C:87:39
Certificate issuer:       /CN=1CCCFB90143ACEF66D6620662A48C6120E79EF98
Certificate serial:       486F2C8771BE01FE229A68589CBCB4E826989B73
Authority key identifier: 1C:CC:FB:90:14:3A:CE:F6:6D:66:20:66:2A:48:C6:12:0E:79:EF:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CCCFB90143ACEF66D6620662A48C6120E79EF98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/1/3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa
Signing time:             Wed 03 Apr 2024 19:55:50 +0000
ROA not before:           Wed 03 Apr 2024 19:50:50 +0000
ROA not after:            Wed 02 Apr 2025 19:55:50 +0000
asID:                     265447
IP address blocks:        168.196.84.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6f:2c:87:71:be:01:fe:22:9a:68:58:9c:bc:b4:e8:26:98:9b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCCFB90143ACEF66D6620662A48C6120E79EF98
        Validity
            Not Before: Apr  3 19:50:50 2024 GMT
            Not After : Apr  2 19:55:50 2025 GMT
        Subject: CN=88A394C97B254053255C79C656BA3D869C9C8739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:f4:a3:62:ee:ef:86:b7:e3:36:c2:b1:d6:
                    44:e4:2e:21:ce:c1:75:70:a2:6f:8f:85:ca:ee:5d:
                    d1:73:bc:01:2a:d6:08:9a:d2:75:37:f7:5a:7d:c1:
                    99:3a:58:50:6f:68:26:78:13:0c:e3:80:be:27:c6:
                    6a:6c:b6:65:87:18:b9:41:0b:8d:d3:b8:5a:9f:ca:
                    e9:4d:93:27:c1:3d:9f:49:2b:03:33:03:c1:d1:12:
                    cc:8e:78:2c:3b:34:93:6a:ca:92:89:17:4a:84:8f:
                    dc:6d:27:9c:1f:1d:90:3f:fa:a2:74:29:39:db:87:
                    71:24:5a:0a:ca:5a:50:e2:b8:24:ae:76:62:4e:11:
                    7f:95:16:48:10:70:57:06:24:7b:be:ae:10:6d:f7:
                    59:7f:52:e1:62:58:42:f4:c2:37:f9:45:e5:40:5e:
                    82:78:95:df:ef:e1:9e:94:3a:13:16:82:96:53:db:
                    8b:32:25:aa:0a:83:6d:9c:70:97:d8:d9:a8:95:e6:
                    40:54:56:c1:54:8c:f4:e0:77:b9:2c:9c:d9:99:56:
                    36:a1:22:37:89:5a:fb:df:6c:7e:f9:53:75:e0:3d:
                    e1:12:6c:88:e1:3b:03:13:42:e0:07:dd:6f:f8:14:
                    07:ee:9d:e8:e4:34:db:91:3e:d8:dd:ea:07:03:f0:
                    a0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A3:94:C9:7B:25:40:53:25:5C:79:C6:56:BA:3D:86:9C:9C:87:39
            X509v3 Authority Key Identifier:
                keyid:1C:CC:FB:90:14:3A:CE:F6:6D:66:20:66:2A:48:C6:12:0E:79:EF:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/1/1CCCFB90143ACEF66D6620662A48C6120E79EF98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CCCFB90143ACEF66D6620662A48C6120E79EF98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/1/3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:7f:c0:a4:77:c0:f2:71:0c:e2:71:8d:47:ba:80:78:e4:b3:
         af:73:42:e7:99:ea:09:67:c8:92:32:f3:f5:3b:a3:58:a0:76:
         ea:18:c0:59:68:59:a1:75:b3:e3:00:77:24:55:c8:31:a0:a7:
         85:2f:da:9b:61:84:38:59:bf:1a:78:1a:d4:94:8b:43:1c:d9:
         c3:24:4c:78:64:11:45:23:e6:ca:40:b0:f6:76:51:a7:be:76:
         cb:39:fb:d4:10:b5:14:ad:96:1b:cf:83:8b:5d:e0:da:a1:c0:
         a2:06:b9:6d:7f:3f:c5:a4:1c:a3:12:a4:19:9d:9e:ab:5e:6c:
         0d:b3:d3:d5:06:67:7b:16:2c:5e:68:de:64:58:04:20:45:19:
         07:15:fb:8a:a6:e3:65:61:e3:09:bf:74:46:eb:fa:c7:6c:95:
         05:0c:96:0f:6f:f3:0a:d2:35:0f:55:6b:fd:b8:be:84:36:1c:
         1a:c3:d6:28:c8:17:8c:4e:96:57:5e:b0:e3:9b:af:6e:27:43:
         ac:5e:7f:8a:8a:21:35:76:62:b1:d7:03:b2:51:af:51:a2:5d:
         6f:e4:c2:c2:f7:af:c6:90:27:bc:49:f7:49:de:21:f4:bd:63:
         3c:d3:7b:28:a9:8c:2a:ac:2c:e7:1c:26:2a:20:78:bd:36:e1:
         0e:02:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org