Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/3136382e302e3136382e302f32322d3234203d3e20323635323537.roa
File:                     3136382e302e3136382e302f32322d3234203d3e20323635323537.roa (raw, json)
Hash identifier:          cA7vbpeF5v22Y+yHety5aPGge/a/Sq01iwYEah5GPVA=
Subject key identifier:   66:17:A5:60:E7:F0:28:BA:12:56:7E:7A:1A:2D:5D:D9:93:1B:05:D8
Certificate issuer:       /CN=4CEBA16D103ABE5671D91473DCA22069846E1ADA
Certificate serial:       39E2746F45AA748DC84A4CA82673A472F3829B23
Authority key identifier: 4C:EB:A1:6D:10:3A:BE:56:71:D9:14:73:DC:A2:20:69:84:6E:1A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CEBA16D103ABE5671D91473DCA22069846E1ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/3136382e302e3136382e302f32322d3234203d3e20323635323537.roa
Signing time:             Fri 17 Nov 2023 20:15:06 +0000
ROA not before:           Fri 17 Nov 2023 20:10:06 +0000
ROA not after:            Fri 15 Nov 2024 20:15:06 +0000
asID:                     265257
IP address blocks:        168.0.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e2:74:6f:45:aa:74:8d:c8:4a:4c:a8:26:73:a4:72:f3:82:9b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CEBA16D103ABE5671D91473DCA22069846E1ADA
        Validity
            Not Before: Nov 17 20:10:06 2023 GMT
            Not After : Nov 15 20:15:06 2024 GMT
        Subject: CN=6617A560E7F028BA12567E7A1A2D5DD9931B05D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:01:7f:83:05:af:6c:ae:a0:aa:43:64:ff:
                    bd:a2:e3:ce:bd:e2:ff:3f:ea:c1:20:87:07:31:ee:
                    c2:9f:79:ef:65:53:1e:be:3c:10:0d:3c:e6:61:6d:
                    6a:5f:d6:28:a5:42:8e:6e:5c:67:90:02:f0:a9:12:
                    3d:a0:dc:70:4b:29:7c:36:c1:0c:b2:3b:bf:bb:55:
                    62:19:fe:5e:21:bb:2e:6e:4a:90:3d:72:10:c7:06:
                    fb:41:a3:2c:f4:15:c2:6e:c7:c9:55:f5:99:e6:a8:
                    aa:cd:88:0b:df:c1:6e:78:44:98:df:bb:f6:d7:eb:
                    72:58:2c:b7:c5:b1:ba:56:f0:99:92:15:6c:06:a1:
                    70:57:72:f1:5c:58:78:40:4d:9d:e4:04:7a:e3:c8:
                    ba:0e:02:af:d9:5d:5d:91:d2:79:b4:8b:1e:5b:ce:
                    94:6d:63:e8:4e:66:b5:37:45:ed:63:b4:9b:96:f2:
                    68:63:22:58:60:05:04:fa:50:2c:74:8b:96:f0:c4:
                    df:75:7c:ee:48:74:e1:a8:8f:82:59:ef:1a:34:73:
                    f7:f5:a5:48:3d:5f:97:52:3a:09:34:09:12:34:a1:
                    47:83:42:fc:60:2a:89:c2:a9:f8:ea:78:b4:36:1c:
                    23:ca:1b:de:af:07:de:76:19:0e:3c:3c:43:ea:71:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:17:A5:60:E7:F0:28:BA:12:56:7E:7A:1A:2D:5D:D9:93:1B:05:D8
            X509v3 Authority Key Identifier:
                keyid:4C:EB:A1:6D:10:3A:BE:56:71:D9:14:73:DC:A2:20:69:84:6E:1A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/4CEBA16D103ABE5671D91473DCA22069846E1ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CEBA16D103ABE5671D91473DCA22069846E1ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/3136382e302e3136382e302f32322d3234203d3e20323635323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:69:b5:7b:eb:05:0d:cf:6c:3d:a4:a6:8d:e3:fc:5a:61:2c:
         db:54:56:2b:ea:67:d2:0a:18:be:6a:a0:4e:b2:98:84:d7:81:
         7f:a7:fc:66:53:3b:b7:c8:dc:09:f9:5d:5a:ea:5a:0c:18:5b:
         2b:42:67:9d:18:4a:4b:3b:9b:07:da:a3:34:d1:36:9c:be:50:
         e6:82:cc:86:77:48:17:2b:a5:df:7c:cc:51:3a:05:9b:83:06:
         4a:ad:c7:66:66:a9:11:c8:01:ad:94:65:01:e0:17:bb:e1:19:
         ec:8f:a6:46:bc:43:00:af:dc:90:a2:5d:be:5b:ba:7e:09:47:
         71:b1:66:ff:b5:19:f2:ab:48:3b:04:f3:b8:19:5e:4f:5a:43:
         e0:0d:3d:34:e3:38:b1:55:a7:1b:8c:15:7b:64:89:2c:f5:5c:
         3c:1f:b3:d9:2e:f9:a1:07:8f:f4:d2:9e:f6:0a:50:56:55:a9:
         45:82:9f:0e:2a:7b:1c:47:ad:05:b5:53:51:1b:52:e0:f3:e2:
         2d:ea:b3:00:f0:f7:41:d3:b6:ad:b0:51:02:4b:bf:da:6a:d0:
         56:92:78:c6:3a:6f:8e:07:35:3d:b1:9b:9a:7e:84:7b:a9:53:
         ff:a4:56:45:9a:a6:39:51:b3:58:f6:d3:bf:fb:d2:30:bf:d4:
         4c:60:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org