Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/2/3136382e302e3136382e302f32342d3234203d3e20323635323537.roa
File:                     3136382e302e3136382e302f32342d3234203d3e20323635323537.roa (raw, json)
Hash identifier:          poS16ZIIqBgsyEySOb2XgZML3OAMxqZTF6Cvfe3CM/k=
Subject key identifier:   4D:41:11:D3:5A:FF:C4:0D:F1:D6:6B:A4:F9:B9:3B:9A:56:4D:4C:C9
Certificate issuer:       /CN=E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574
Certificate serial:       1D75576F3C18606F13939959DBBF007E3112BDA2
Authority key identifier: E1:B1:E1:BF:89:7F:A6:B6:DA:01:41:C8:19:A1:70:CA:5D:CF:45:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/2/3136382e302e3136382e302f32342d3234203d3e20323635323537.roa
Signing time:             Thu 04 Apr 2024 22:31:22 +0000
ROA not before:           Thu 04 Apr 2024 22:26:22 +0000
ROA not after:            Thu 03 Apr 2025 22:31:22 +0000
asID:                     265257
IP address blocks:        168.0.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:75:57:6f:3c:18:60:6f:13:93:99:59:db:bf:00:7e:31:12:bd:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574
        Validity
            Not Before: Apr  4 22:26:22 2024 GMT
            Not After : Apr  3 22:31:22 2025 GMT
        Subject: CN=4D4111D35AFFC40DF1D66BA4F9B93B9A564D4CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:71:95:77:43:9a:92:fb:a6:b7:c7:11:d7:
                    14:6c:08:91:11:18:fa:67:46:2d:7e:b0:2a:00:e8:
                    1b:95:e7:a8:a8:db:fe:d2:8f:20:36:bb:b2:b1:3e:
                    63:34:4c:88:27:79:d4:23:ff:a2:49:58:3e:0c:db:
                    b4:ac:1e:9d:2e:20:74:5a:10:5c:2b:14:24:24:ed:
                    6d:d3:b7:b7:26:da:54:35:df:93:26:27:3c:dc:89:
                    3b:f7:82:e6:21:39:df:01:9f:db:bc:a7:0f:f1:86:
                    c0:bc:13:fa:b1:0e:43:04:21:f1:d3:df:62:75:3f:
                    65:77:8e:37:2a:53:ab:f8:1f:dd:57:be:b5:f9:12:
                    b6:89:d8:af:0a:c2:19:d1:34:b6:22:76:b7:72:20:
                    a8:27:8f:8c:7b:c2:dd:3d:73:43:77:a8:cb:1a:00:
                    7a:ed:95:0e:24:bd:d9:89:78:bf:2c:99:e4:66:f9:
                    25:d9:c2:5e:99:7d:13:ad:39:30:a4:b7:7e:f6:b1:
                    63:2c:9b:5a:19:cf:94:a5:c6:09:e9:e7:f1:a4:06:
                    72:cb:60:22:50:6a:2a:bc:a5:66:7c:e3:d9:56:97:
                    cd:3a:a8:21:20:3a:ad:0a:5b:60:b9:8d:9b:1c:06:
                    e2:be:70:36:85:d0:c0:7b:a8:71:79:bc:f4:9a:a5:
                    81:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:41:11:D3:5A:FF:C4:0D:F1:D6:6B:A4:F9:B9:3B:9A:56:4D:4C:C9
            X509v3 Authority Key Identifier:
                keyid:E1:B1:E1:BF:89:7F:A6:B6:DA:01:41:C8:19:A1:70:CA:5D:CF:45:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/2/E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/2/3136382e302e3136382e302f32342d3234203d3e20323635323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:8c:c3:96:2c:88:7b:82:fa:ff:81:22:b0:cf:b5:ba:87:76:
         84:a3:22:ad:7c:3f:7c:37:03:23:b4:e7:61:f3:d9:10:f6:d6:
         61:de:21:3b:7d:1f:bb:84:6c:79:05:66:b9:85:8a:50:68:4b:
         6d:7c:2e:ba:25:fa:3a:74:be:2e:40:b1:c5:45:67:fb:a8:41:
         c4:91:53:e8:d4:e2:f9:84:3c:27:d8:8a:f5:24:a7:be:b4:fd:
         89:91:b7:22:81:36:bd:36:9c:ef:7e:e8:e5:41:db:fc:72:c4:
         43:f6:71:d6:c5:ee:ce:e4:5b:81:d8:cf:b2:4e:d6:14:db:35:
         6a:fe:ba:a0:18:89:45:2d:1d:c2:67:fd:00:f9:14:82:32:91:
         4f:73:75:f7:50:18:ae:5d:1d:59:df:0e:0f:1f:49:29:b5:9d:
         da:64:ee:3c:da:d1:53:5e:2b:27:ca:bc:74:7f:6b:4e:29:51:
         e6:d9:5f:49:59:3d:ad:9b:c4:2a:5a:85:a7:01:aa:44:36:e6:
         af:c5:94:24:63:b4:41:37:fe:b4:e0:85:b3:99:8a:75:ac:0d:
         67:e6:b8:0d:0e:89:d0:40:77:a9:12:17:e7:24:0f:f6:93:49:
         b2:d2:f1:3c:ed:76:7a:99:54:c5:e8:1e:57:20:33:68:5a:85:
         ef:3e:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:32 2024 by rpki-client on console-ams.rpki-client.org