Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/3136382e3132312e37382e302f32342d3234203d3e20323635333031.roa
File:                     3136382e3132312e37382e302f32342d3234203d3e20323635333031.roa (raw, json)
Hash identifier:          fVua5Cw3j/Qw1nhKtYCXhVITl/0ZB+5aOs8JwxBqG80=
Subject key identifier:   65:94:7E:43:A6:42:AB:36:95:0B:FA:3F:72:EF:57:CB:48:8E:28:74
Certificate issuer:       /CN=AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2
Certificate serial:       306B76DA7E60B43CA5E467B0028B18E0FC506009
Authority key identifier: AD:80:2A:4B:B5:E6:F8:0C:70:23:71:19:B6:7F:9D:E3:BD:AB:9C:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/3136382e3132312e37382e302f32342d3234203d3e20323635333031.roa
Signing time:             Thu 20 Apr 2023 14:28:41 +0000
ROA not before:           Thu 20 Apr 2023 14:23:41 +0000
ROA not after:            Thu 18 Apr 2024 14:28:41 +0000
asID:                     265301
IP address blocks:        168.121.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6b:76:da:7e:60:b4:3c:a5:e4:67:b0:02:8b:18:e0:fc:50:60:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2
        Validity
            Not Before: Apr 20 14:23:41 2023 GMT
            Not After : Apr 18 14:28:41 2024 GMT
        Subject: CN=65947E43A642AB36950BFA3F72EF57CB488E2874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:7f:9c:e7:c7:dc:7c:e9:a7:6f:fe:77:28:
                    50:34:1d:8b:c6:23:e8:6f:2b:db:9b:2e:d5:5c:35:
                    c6:fb:7c:c9:0a:81:8b:33:18:32:b0:b7:33:4f:c2:
                    da:18:37:da:33:85:e8:1c:3f:5e:d8:26:b4:3f:d4:
                    fc:2b:fb:77:d2:b9:73:35:c9:e8:0e:e2:c6:81:45:
                    6e:6c:52:29:67:1f:0c:b6:e7:68:58:05:cb:a1:c2:
                    51:bc:51:a9:b0:a6:ab:81:5b:07:99:7a:5b:6c:a5:
                    4f:a7:88:01:4c:e4:59:73:24:92:86:e0:00:af:cf:
                    03:e1:c0:d8:d4:00:2b:68:68:52:32:bd:ce:e2:97:
                    17:31:aa:95:59:03:d4:7c:5c:da:3d:d4:e1:4d:ca:
                    aa:ad:01:46:fb:08:d0:81:60:05:f9:91:a3:f0:2c:
                    e4:f6:38:40:f0:24:b9:8b:49:ab:5e:49:2f:f0:6c:
                    ef:70:40:9f:fd:8d:bf:5c:26:e5:4f:60:f2:cd:a1:
                    af:49:78:94:66:c0:1d:98:be:c8:42:f5:25:13:01:
                    7f:81:be:88:4a:31:ae:c2:56:eb:eb:e0:d8:3b:f4:
                    eb:ed:99:1a:b6:3c:ff:04:03:5f:bf:17:51:ce:1e:
                    4d:e4:99:bb:b8:39:11:c5:4e:a8:b0:e7:73:79:08:
                    32:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:94:7E:43:A6:42:AB:36:95:0B:FA:3F:72:EF:57:CB:48:8E:28:74
            X509v3 Authority Key Identifier:
                keyid:AD:80:2A:4B:B5:E6:F8:0C:70:23:71:19:B6:7F:9D:E3:BD:AB:9C:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/3136382e3132312e37382e302f32342d3234203d3e20323635333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:b8:3e:c0:7f:72:58:7f:55:9e:33:a1:9f:d4:be:b6:fa:df:
         6e:14:5b:9c:e5:1f:4e:1e:02:e8:bc:15:a4:c7:ba:ca:c2:52:
         97:fc:d6:7b:de:3d:f2:18:41:c1:21:d3:f4:6d:46:fb:35:cd:
         b7:eb:0c:df:e3:c6:da:93:33:8d:e7:9d:6b:42:71:f0:89:76:
         41:35:64:c8:ed:44:d3:28:6a:63:1f:80:d9:a9:cf:1c:17:76:
         ba:4d:5c:d9:fa:78:6b:58:c9:33:7f:f5:f8:8c:c6:34:a7:20:
         13:be:f3:ee:c8:fd:1e:53:0c:55:ce:25:b1:da:b6:3a:ec:fc:
         17:c1:27:cc:05:30:29:3e:92:5b:34:0b:8f:bd:1c:63:fe:4e:
         02:5f:10:fe:39:ae:57:40:e9:6b:43:1f:11:b4:16:c2:b4:57:
         3a:84:44:2f:8a:5b:fe:4a:fa:65:17:af:00:92:4c:b1:43:9c:
         ae:1c:5b:7d:82:c3:22:44:f2:60:b6:b8:f5:75:4f:69:f5:24:
         61:b9:fc:e0:ec:d4:d4:e9:94:1a:42:7d:00:86:d6:53:ca:ca:
         71:db:8a:46:9d:86:38:48:ff:01:cd:68:1f:dd:0f:51:97:aa:
         03:2e:b6:a0:03:ba:7f:50:8a:a1:41:6d:f6:5e:6c:02:73:f0:
         87:99:e0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org