Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3136382e3230352e3137322e302f32322d3234203d3e20323633393832.roa
File:                     3136382e3230352e3137322e302f32322d3234203d3e20323633393832.roa (raw, json)
Hash identifier:          c2toOG2v71YZJTEia84cRd5872/JxI8ER+GESnGakRI=
Subject key identifier:   56:3E:1F:DA:76:35:51:E0:CE:4D:45:F0:DC:EF:3B:4F:74:09:47:9D
Certificate issuer:       /CN=010DADE301A8E5F8BF09DE2295BF9D0645BF819A
Certificate serial:       4EF4E3AD762C60736A517FE8A9ED2ACBB96B706D
Authority key identifier: 01:0D:AD:E3:01:A8:E5:F8:BF:09:DE:22:95:BF:9D:06:45:BF:81:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/010DADE301A8E5F8BF09DE2295BF9D0645BF819A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3136382e3230352e3137322e302f32322d3234203d3e20323633393832.roa
Signing time:             Mon 26 Jun 2023 14:00:00 +0000
ROA not before:           Mon 26 Jun 2023 13:55:00 +0000
ROA not after:            Mon 24 Jun 2024 14:00:00 +0000
asID:                     263982
IP address blocks:        168.205.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f4:e3:ad:76:2c:60:73:6a:51:7f:e8:a9:ed:2a:cb:b9:6b:70:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=010DADE301A8E5F8BF09DE2295BF9D0645BF819A
        Validity
            Not Before: Jun 26 13:55:00 2023 GMT
            Not After : Jun 24 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:02:4b:b7:4e:53:da:26:97:a4:3a:b2:26:
                    81:e0:0c:19:c5:39:56:9b:fd:81:f0:3c:e0:d2:b5:
                    e2:3c:bb:36:c9:9b:91:bc:92:12:13:a2:c8:21:51:
                    f7:14:aa:7d:48:c8:d1:fd:3c:fe:df:47:3c:63:b2:
                    da:a5:06:c7:3a:3b:f7:3b:79:80:4f:e4:7e:72:aa:
                    6c:0f:2a:ff:5c:a3:5e:bf:9f:e7:c4:9f:f8:b2:23:
                    99:d9:d9:c5:2c:94:d9:71:4c:cb:ec:65:9d:32:24:
                    cb:86:a5:af:b1:c2:ed:54:bd:fa:76:7d:0c:94:5c:
                    ab:08:8e:6e:a7:c4:19:2c:ff:3d:19:48:c6:20:21:
                    53:f5:e1:25:fe:7b:4a:bf:b7:d3:de:8e:79:a7:ff:
                    67:0f:11:32:96:0c:ab:2c:80:07:d1:6e:a4:a0:85:
                    58:87:c8:fc:f3:70:a6:aa:c3:d1:f6:98:be:48:af:
                    5b:56:3a:04:e2:8f:58:53:f5:44:f3:da:72:bd:86:
                    71:72:c2:67:8e:f4:54:3d:e2:27:dd:07:8b:d5:2b:
                    ab:e5:e9:00:9a:ef:bc:2a:3a:34:84:16:ef:e3:09:
                    b6:7f:93:0b:29:e3:cc:3a:f4:88:a7:62:00:80:3d:
                    ee:6c:d3:80:a8:e4:31:35:08:7c:f0:71:d8:33:00:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3E:1F:DA:76:35:51:E0:CE:4D:45:F0:DC:EF:3B:4F:74:09:47:9D
            X509v3 Authority Key Identifier:
                keyid:01:0D:AD:E3:01:A8:E5:F8:BF:09:DE:22:95:BF:9D:06:45:BF:81:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/010DADE301A8E5F8BF09DE2295BF9D0645BF819A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/010DADE301A8E5F8BF09DE2295BF9D0645BF819A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3136382e3230352e3137322e302f32322d3234203d3e20323633393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:8f:20:70:30:3c:cb:b3:06:a5:e8:bf:20:ec:98:a9:9d:33:
         c3:df:e4:be:20:cc:32:13:e2:a8:97:9d:48:3b:f5:9f:6b:ea:
         52:c2:18:e7:88:f9:ed:b2:0b:30:98:6a:45:47:b5:df:fd:e0:
         33:19:91:0b:04:c3:bb:1d:e0:d2:2c:8b:a6:89:af:a9:cc:fa:
         55:a3:ec:4a:f2:b4:21:eb:20:95:4d:59:bb:8e:03:ad:34:3d:
         33:75:fb:79:90:e0:52:7b:0e:df:34:90:09:2e:c8:49:4b:77:
         70:e6:0f:af:a9:89:86:ef:65:06:bf:e5:ef:a7:53:5e:64:4e:
         a0:58:97:c4:85:ca:2c:db:57:69:31:fe:ea:f1:42:e3:1b:00:
         fe:08:7a:8f:4e:08:7c:82:cf:ae:4a:c9:c3:b6:b4:8b:88:84:
         0b:02:16:4b:40:97:d1:d5:d8:9e:38:fa:bd:97:ac:ea:92:f5:
         10:e6:64:23:21:97:c2:f2:25:e4:50:65:cd:62:6c:6d:7b:f8:
         c5:33:cc:45:7a:51:58:3e:92:ff:fc:2c:6f:fe:fe:79:5d:5e:
         e6:49:d5:a0:41:65:b1:16:60:ae:c9:19:e2:21:4b:d8:bf:21:
         17:9a:33:0d:af:d7:cb:bc:ac:ee:f7:c7:a5:2e:4b:52:a2:e0:
         e2:08:b4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org