Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135322e302f32322d3234203d3e20323635343834.roa
File:                     3136382e3139372e3135322e302f32322d3234203d3e20323635343834.roa (raw, json)
Hash identifier:          Ds53MwKoBAG5IIZQSa/Yy+sY3BMb758WNSI2V7wnu4g=
Subject key identifier:   F0:9D:D7:16:BE:3D:0F:02:82:E6:A8:CD:57:2A:CD:18:43:E3:81:96
Certificate issuer:       /CN=B946ED6AECE04BD2BAF997938347912BF5AB3432
Certificate serial:       529739ADA5E56C123F2BCF0E4DE68AF018E28202
Authority key identifier: B9:46:ED:6A:EC:E0:4B:D2:BA:F9:97:93:83:47:91:2B:F5:AB:34:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B946ED6AECE04BD2BAF997938347912BF5AB3432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135322e302f32322d3234203d3e20323635343834.roa
Signing time:             Fri 09 Jun 2023 17:55:05 +0000
ROA not before:           Fri 09 Jun 2023 17:50:05 +0000
ROA not after:            Fri 07 Jun 2024 17:55:05 +0000
asID:                     265484
IP address blocks:        168.197.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:97:39:ad:a5:e5:6c:12:3f:2b:cf:0e:4d:e6:8a:f0:18:e2:82:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B946ED6AECE04BD2BAF997938347912BF5AB3432
        Validity
            Not Before: Jun  9 17:50:05 2023 GMT
            Not After : Jun  7 17:55:05 2024 GMT
        Subject: CN=F09DD716BE3D0F0282E6A8CD572ACD1843E38196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:45:51:c6:c1:14:70:f2:94:39:cf:25:ac:24:
                    8e:a7:fb:eb:3a:33:9f:a9:c0:6a:94:c4:c2:2a:0e:
                    31:5a:94:9c:cc:22:7a:d2:e2:14:56:6a:5e:15:c0:
                    e4:bb:76:d3:bb:e1:37:12:d2:3b:d7:0e:21:f8:48:
                    90:d9:2c:de:9e:b5:92:ae:a7:ae:6b:71:ec:b0:25:
                    87:62:3b:54:53:21:17:b5:f4:16:ec:ef:12:ad:74:
                    5c:fc:dd:ec:78:65:43:c7:2c:eb:db:7b:84:55:3d:
                    2e:e0:77:ac:06:57:cc:4f:4d:96:ca:e2:88:ac:d3:
                    f9:64:a8:36:a6:66:9e:c0:36:c3:68:36:3a:6b:f5:
                    66:0c:ca:4f:e7:4d:e8:43:35:e4:2d:b2:ad:2a:08:
                    a6:1f:11:fc:7b:bf:c7:ca:22:67:00:ba:91:84:e7:
                    d6:98:d3:0d:11:eb:32:74:82:18:6f:dc:77:13:d7:
                    0d:e6:db:bd:f6:c6:32:ab:e0:2a:00:c1:14:44:91:
                    bc:4d:fc:29:03:bd:4a:b0:97:f1:ff:94:d4:0e:22:
                    07:2f:eb:64:37:f0:d9:6e:57:50:b5:44:2d:18:6b:
                    31:49:51:d1:23:7c:d6:39:19:e0:ed:97:ae:5a:4b:
                    43:14:85:8c:aa:66:12:4e:5e:6d:0c:54:f8:10:4e:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9D:D7:16:BE:3D:0F:02:82:E6:A8:CD:57:2A:CD:18:43:E3:81:96
            X509v3 Authority Key Identifier:
                keyid:B9:46:ED:6A:EC:E0:4B:D2:BA:F9:97:93:83:47:91:2B:F5:AB:34:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/B946ED6AECE04BD2BAF997938347912BF5AB3432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B946ED6AECE04BD2BAF997938347912BF5AB3432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135322e302f32322d3234203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:1f:3b:fa:76:41:7b:60:f0:50:93:e9:dc:e5:a2:6d:23:52:
         0a:8a:ef:4b:28:1f:47:d2:32:44:d5:be:43:f9:b0:8a:ec:df:
         fa:34:5c:84:1f:11:c6:93:58:3b:68:54:c8:31:e1:a3:1e:a8:
         0a:06:59:8c:7d:f1:ff:40:10:a8:35:12:67:44:8b:fc:33:7f:
         37:b7:df:d5:bb:19:27:f9:95:dc:40:62:05:b3:01:7e:7c:73:
         ce:a1:eb:64:e6:6d:5f:19:03:39:a4:ca:96:b1:11:c2:25:53:
         c4:ce:d8:36:d7:88:e2:d3:04:8a:fa:61:34:85:ce:23:89:dd:
         71:24:20:fa:9b:23:b6:66:de:b8:db:2c:18:61:ba:ba:17:29:
         50:68:3a:2b:db:41:8f:52:8b:e7:b5:fe:cf:f2:f8:e9:39:f8:
         53:05:d9:d2:89:63:e8:45:4a:3f:33:9e:e3:4f:53:e5:a7:73:
         f9:21:18:71:32:44:f8:15:d1:e1:42:55:08:94:f4:a5:d5:c9:
         0d:f8:8c:94:de:0d:64:2e:db:09:1f:b3:3b:2d:48:2d:cf:ba:
         74:39:e8:ba:6c:f6:6f:be:4b:5c:30:b8:ab:6a:fc:46:8e:db:
         42:b1:d2:88:5b:bb:9b:71:93:cf:34:5e:64:b5:41:d1:bd:9a:
         0f:74:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org