Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3134382e302f32332d3233203d3e20323632343933.roa
File:                     3136382e3132312e3134382e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          gDlPPzCi+jT1fM6XuMLVg8uKrOFikrbbM8Lx4bqQVeo=
Subject key identifier:   C2:91:FF:2A:B7:AF:F5:2C:32:CC:61:A5:DB:F4:80:34:3B:D5:D3:A5
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       03EF6D80FC4DC3B04CE2C2CAB9D1C104F2402108
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3134382e302f32332d3233203d3e20323632343933.roa
Signing time:             Mon 08 Apr 2024 20:10:42 +0000
ROA not before:           Mon 08 Apr 2024 20:05:42 +0000
ROA not after:            Mon 07 Apr 2025 20:10:42 +0000
asID:                     262493
IP address blocks:        168.121.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ef:6d:80:fc:4d:c3:b0:4c:e2:c2:ca:b9:d1:c1:04:f2:40:21:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr  8 20:05:42 2024 GMT
            Not After : Apr  7 20:10:42 2025 GMT
        Subject: CN=C291FF2AB7AFF52C32CC61A5DBF480343BD5D3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:af:5b:ba:44:6c:e8:93:41:ba:88:de:09:
                    8b:2c:21:10:2e:c9:35:76:da:4e:ae:d4:5b:ee:54:
                    1c:c4:4f:5c:3d:c7:e1:85:a2:94:8c:d7:c8:8a:5e:
                    37:00:38:30:95:55:c3:52:aa:64:b7:00:ab:ee:db:
                    d5:4f:01:4b:fc:f9:3d:ea:32:bd:07:e9:92:71:43:
                    63:90:0c:af:e7:ab:d1:58:5a:1b:40:b3:58:a4:4f:
                    24:81:95:0b:7e:10:95:15:8d:b6:01:17:fd:67:bf:
                    24:cd:c0:67:7b:1f:0b:47:96:4e:4e:5b:46:df:b1:
                    16:d9:62:70:78:7b:fc:00:87:0b:5a:3b:d5:55:dc:
                    4f:de:05:95:64:1e:9e:74:5a:55:c1:02:11:c7:5f:
                    4f:e2:e9:51:8b:4e:74:55:f7:a8:08:36:49:00:c3:
                    3e:63:30:c3:9d:43:62:38:3c:a2:3b:b7:55:1b:d7:
                    79:0b:f6:87:80:03:16:3f:be:ab:0e:fb:36:1c:32:
                    af:5c:be:ba:21:0f:e4:92:e7:e7:a6:b2:0c:ec:98:
                    96:a3:e5:78:21:ad:01:be:c1:bf:57:8e:a9:78:ee:
                    0d:26:7c:c0:48:45:ac:9e:32:4f:e6:89:8e:86:67:
                    2d:01:3b:18:f3:cd:a6:3e:a3:5d:c5:73:51:cc:bf:
                    0b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:91:FF:2A:B7:AF:F5:2C:32:CC:61:A5:DB:F4:80:34:3B:D5:D3:A5
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3134382e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:82:bd:20:d7:01:d9:6e:ce:6a:aa:e5:8c:71:26:1c:46:40:
         c5:f6:5e:ed:d4:0d:bf:34:99:15:b6:4a:44:ee:a9:37:24:63:
         7d:fd:83:bf:09:de:08:11:39:62:80:eb:5f:d0:f6:a5:ce:1e:
         df:2f:6a:c5:59:1f:b5:f3:d2:f6:f9:13:4c:41:0b:c1:d5:3e:
         e5:a9:46:9c:a8:ac:74:7a:4b:44:e1:d8:7b:40:9f:0d:f3:88:
         78:cb:61:12:d5:70:d7:74:3d:f2:18:95:ee:71:52:75:fb:16:
         f1:3e:4c:3c:f4:d8:79:f5:c3:5e:42:ae:0c:cf:f8:cf:eb:ae:
         41:b9:e7:45:0c:c4:c2:ea:de:dd:93:8f:d2:44:ea:85:36:05:
         36:04:bc:a4:db:31:c7:76:21:a9:c4:e9:79:7b:d7:5a:44:5a:
         07:53:be:3e:16:0d:54:10:9f:b5:7d:4a:e0:16:91:79:a2:f6:
         0e:54:6e:32:69:2c:f1:14:43:b3:6f:9f:80:81:ee:18:98:45:
         ad:8f:06:66:48:d4:34:4c:c4:0c:a8:00:bc:5c:68:3f:35:fd:
         96:59:73:58:dc:ac:05:8a:4b:c3:51:86:eb:eb:82:6c:54:10:
         eb:94:e1:75:67:f6:9b:d7:53:b0:8e:e9:5d:5f:97:f8:a7:cd:
         bb:9a:68:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org