Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/3136382e302e3136392e302f32342d3234203d3e20323635323537.roa
File:                     3136382e302e3136392e302f32342d3234203d3e20323635323537.roa (raw, json)
Hash identifier:          05FHHnfkwJXQBIB2I6v9G9PV6JQJEKT0eDerzNFtIqY=
Subject key identifier:   CD:97:0F:35:10:04:F7:35:58:5F:AD:B5:9B:BC:12:77:B3:B5:76:84
Certificate issuer:       /CN=4CEBA16D103ABE5671D91473DCA22069846E1ADA
Certificate serial:       5DD3F7B7E62459C4EE7F9FA0F8B4CB778B33B2B0
Authority key identifier: 4C:EB:A1:6D:10:3A:BE:56:71:D9:14:73:DC:A2:20:69:84:6E:1A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CEBA16D103ABE5671D91473DCA22069846E1ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/3136382e302e3136392e302f32342d3234203d3e20323635323537.roa
Signing time:             Fri 26 Jan 2024 12:43:05 +0000
ROA not before:           Fri 26 Jan 2024 12:38:05 +0000
ROA not after:            Fri 24 Jan 2025 12:43:05 +0000
asID:                     265257
IP address blocks:        168.0.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d3:f7:b7:e6:24:59:c4:ee:7f:9f:a0:f8:b4:cb:77:8b:33:b2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CEBA16D103ABE5671D91473DCA22069846E1ADA
        Validity
            Not Before: Jan 26 12:38:05 2024 GMT
            Not After : Jan 24 12:43:05 2025 GMT
        Subject: CN=CD970F351004F735585FADB59BBC1277B3B57684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:40:80:d4:2d:33:6b:07:c3:83:36:60:7d:
                    d8:9b:f2:db:9a:90:2a:f1:52:e8:57:ae:38:5f:b5:
                    3f:80:64:5b:28:01:64:ac:3d:7e:54:e8:78:86:9f:
                    a6:44:ec:30:26:78:bb:9f:c6:e8:31:85:1c:7f:ed:
                    4a:4a:93:b7:20:90:de:8e:d3:d0:ac:31:77:41:e8:
                    34:1b:7d:eb:98:ca:ec:42:62:87:fd:11:3f:88:c6:
                    75:96:13:22:9d:ae:48:ea:cb:ba:d0:ba:96:77:5c:
                    dc:84:dd:91:52:a8:92:b3:c5:42:48:ac:5e:85:2a:
                    d7:b3:45:98:7e:c1:08:c7:4b:cb:6f:4e:b1:ed:8c:
                    36:0c:c5:aa:df:a5:8c:a3:bc:c4:89:6f:f8:06:33:
                    69:4e:84:35:2a:1d:f1:a6:9f:bc:c4:09:23:6c:05:
                    15:61:9e:29:2a:32:7c:eb:a4:c9:6b:d7:1a:8b:2d:
                    1a:a3:03:b9:ef:8a:a8:13:43:6b:2f:5b:7c:bb:3a:
                    0c:13:a3:01:f3:80:f5:f4:c0:67:5b:84:22:3b:45:
                    ad:4d:d6:c3:3f:4d:d4:e1:3a:37:60:ff:43:84:a3:
                    a3:3a:82:21:fa:86:65:ee:38:9d:7a:8b:0c:43:6a:
                    af:df:13:1e:85:fe:ab:34:72:2d:7f:35:6b:45:11:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:97:0F:35:10:04:F7:35:58:5F:AD:B5:9B:BC:12:77:B3:B5:76:84
            X509v3 Authority Key Identifier:
                keyid:4C:EB:A1:6D:10:3A:BE:56:71:D9:14:73:DC:A2:20:69:84:6E:1A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/4CEBA16D103ABE5671D91473DCA22069846E1ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CEBA16D103ABE5671D91473DCA22069846E1ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/3136382e302e3136392e302f32342d3234203d3e20323635323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:dc:c3:20:63:9d:5c:c3:0f:7f:14:8b:27:c3:09:1d:6d:66:
         b1:c1:b4:1c:bd:db:25:a6:17:cd:36:2a:b0:c6:b7:4c:3b:71:
         4f:1d:c3:ae:a1:2e:f1:95:9c:db:b8:9e:c9:cd:51:85:bc:ce:
         e8:5f:47:74:f6:68:f9:c0:76:96:9b:59:a4:b9:fc:50:25:e6:
         fc:f8:a2:3f:aa:87:c7:e4:52:cf:19:97:0f:7c:be:80:2b:85:
         39:05:96:54:0c:71:a6:cd:0c:e0:8d:c4:be:84:8b:e5:68:00:
         af:6c:c3:7e:20:72:47:86:3b:54:4f:11:79:e7:d5:c4:2d:92:
         c6:6b:76:75:53:ed:4b:93:03:dd:8f:0f:de:bd:ab:7b:63:75:
         89:ee:5e:c9:3e:7b:86:d2:44:f1:fe:d1:7b:4b:97:46:c9:33:
         69:82:da:3f:27:92:1b:38:3f:d0:cd:2f:98:55:58:bb:fe:ca:
         9e:b9:45:bb:a7:71:83:fd:af:11:ee:2a:da:c3:52:9c:0b:0a:
         2d:0c:5c:7d:ea:52:be:16:ec:18:36:b8:63:dc:8e:23:1e:ff:
         94:ad:d0:fb:55:32:52:0a:7a:05:28:3b:22:ca:c4:49:65:84:
         50:0c:9e:3c:06:84:94:6c:4f:ce:41:89:b6:e2:ef:28:4f:bc:
         09:b5:73:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org