Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133302e302f32342d3234203d3e20323633303639.roa
File:                     3136382e302e3133302e302f32342d3234203d3e20323633303639.roa (raw, json)
Hash identifier:          p34dAJwV6FXGBEFDBBg0JghUp0lYGCJScjDw3x8K4Dw=
Subject key identifier:   0D:6D:0A:36:29:70:44:E1:F0:91:82:CE:7B:04:8C:1F:EF:19:3B:88
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       35281E91359602F39CC309A04D4223033F4CFC1B
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133302e302f32342d3234203d3e20323633303639.roa
Signing time:             Fri 11 Aug 2023 15:12:15 +0000
ROA not before:           Fri 11 Aug 2023 15:07:15 +0000
ROA not after:            Fri 09 Aug 2024 15:12:15 +0000
asID:                     263069
IP address blocks:        168.0.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:28:1e:91:35:96:02:f3:9c:c3:09:a0:4d:42:23:03:3f:4c:fc:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Aug 11 15:07:15 2023 GMT
            Not After : Aug  9 15:12:15 2024 GMT
        Subject: CN=0D6D0A36297044E1F09182CE7B048C1FEF193B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:5e:71:50:31:c8:a8:b2:30:eb:56:44:9c:
                    8c:fe:da:ba:02:2d:eb:d0:4a:d3:9f:5a:5a:49:19:
                    3b:80:99:0d:3f:dd:ec:d0:f5:fb:43:dd:c1:44:8c:
                    e6:f2:d5:a9:1e:c2:d5:13:7a:c8:f9:0b:eb:da:b8:
                    2e:e4:b9:2d:72:41:3b:f5:89:f8:44:6c:e5:4e:65:
                    37:e3:3a:55:be:41:01:3c:af:fa:72:c1:35:a0:4a:
                    b5:8b:51:84:bd:7e:c9:ef:92:6a:bf:b9:12:81:fd:
                    a9:14:3e:cd:13:00:ba:94:b9:9e:ea:f6:54:2b:b3:
                    6f:9e:dc:25:eb:f9:57:f1:79:b2:b6:a9:08:39:74:
                    81:55:63:44:30:4a:5c:83:50:40:c2:03:05:7e:ba:
                    44:ea:af:31:c2:d3:a3:1f:78:d5:71:c3:61:77:2b:
                    d8:fb:7d:8a:c3:56:6b:85:e1:da:63:56:07:da:41:
                    42:d7:fc:7c:c0:34:0b:10:58:f8:76:a0:db:56:a2:
                    c7:6a:51:74:75:15:c4:d6:ad:78:eb:d5:9d:af:b7:
                    a2:f8:b3:29:97:31:04:60:f6:c9:39:16:e7:29:57:
                    33:23:44:42:fa:24:4f:1c:cc:e0:c2:fc:59:14:ac:
                    cc:a2:ff:b4:d6:3b:8e:b0:d9:ff:40:07:7b:5b:80:
                    77:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6D:0A:36:29:70:44:E1:F0:91:82:CE:7B:04:8C:1F:EF:19:3B:88
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133302e302f32342d3234203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:c7:b6:15:ab:3f:82:e6:ae:4c:88:b7:70:b5:9e:c0:6a:b2:
         9e:1f:25:ab:b6:51:82:47:08:44:c3:e8:e7:e1:de:ce:59:5b:
         9e:ab:cf:ee:2e:d7:a6:58:75:15:cc:83:db:a8:3c:a7:da:50:
         3e:b2:00:34:4a:69:92:1e:c0:95:33:7f:c2:cc:02:ad:8d:11:
         23:a6:bf:a8:fa:01:18:d9:da:95:48:29:fb:8e:4f:9f:29:4c:
         c4:44:5b:c9:19:64:4f:37:66:db:80:44:ed:0f:65:b1:e0:26:
         67:80:d8:14:81:3d:38:b1:63:30:a1:45:c7:20:9b:5c:36:83:
         9a:a0:2b:9f:c8:c9:02:18:1c:44:3b:9e:89:07:c5:47:07:59:
         c0:40:b8:9d:6c:cb:71:4e:b3:34:76:b3:4b:7a:17:0a:e1:82:
         2d:3e:2a:90:73:a9:4d:ed:14:5e:4a:43:6a:5a:71:12:c7:b2:
         67:f8:3a:44:fb:d7:5d:05:4c:ec:25:48:4b:b9:81:43:06:f6:
         ee:a3:5c:65:15:8c:7c:cc:f7:ba:83:7f:aa:0e:b4:99:aa:21:
         e8:af:48:e0:42:40:68:47:fb:f3:e5:27:42:c7:da:a3:c7:82:
         f8:8d:7b:79:20:12:57:ba:1e:77:e6:e9:c2:af:a2:fe:61:6a:
         20:16:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org