Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31322e302f32332d3233203d3e20323635333737.roa
File:                     3136382e3139342e31322e302f32332d3233203d3e20323635333737.roa (raw, json)
Hash identifier:          Nt0dLa4t2HgOFUANXR+X5d7bY2xn0p7QhRv5pa8oXI8=
Subject key identifier:   C3:94:E5:C5:70:38:BA:AF:19:2C:6D:84:6A:43:8E:2A:69:44:9B:48
Certificate issuer:       /CN=25CF17C687A6082A587E8672CFDF29DABE487548
Certificate serial:       0760680ED61543328C30F8C2CD521778910C3BAC
Authority key identifier: 25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31322e302f32332d3233203d3e20323635333737.roa
Signing time:             Thu 14 Mar 2024 20:44:46 +0000
ROA not before:           Thu 14 Mar 2024 20:39:46 +0000
ROA not after:            Thu 13 Mar 2025 20:44:46 +0000
asID:                     265377
IP address blocks:        168.194.12.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:60:68:0e:d6:15:43:32:8c:30:f8:c2:cd:52:17:78:91:0c:3b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CF17C687A6082A587E8672CFDF29DABE487548
        Validity
            Not Before: Mar 14 20:39:46 2024 GMT
            Not After : Mar 13 20:44:46 2025 GMT
        Subject: CN=C394E5C57038BAAF192C6D846A438E2A69449B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:b7:87:32:0f:35:b2:19:62:13:af:cd:c5:
                    6f:e7:bc:4e:df:5d:09:7d:19:ba:41:1e:ab:f2:02:
                    b6:0a:9d:5e:fa:d3:14:35:8f:87:3e:13:40:43:58:
                    87:a2:dc:c9:cf:ac:61:7e:cb:52:cc:2a:d8:3d:4f:
                    f4:32:5e:08:f5:7f:96:db:59:75:28:95:1d:42:f9:
                    de:7c:48:2b:ae:82:2b:95:5c:a8:a5:25:fd:48:7a:
                    21:46:99:b7:b5:07:f7:3f:bb:06:49:96:a4:eb:03:
                    0c:ae:70:57:22:df:0b:8a:5c:c7:68:09:cb:5d:0f:
                    6b:0a:da:a8:d7:f5:61:8b:ce:a2:bc:41:9b:6b:14:
                    db:63:9f:47:07:95:2b:b5:59:7e:9f:0e:8f:21:2e:
                    c7:b7:c0:64:bf:35:1a:98:1c:ca:f3:e3:b0:b3:fd:
                    50:49:73:91:35:77:6d:5b:dd:6b:01:3a:ed:c1:29:
                    d1:57:66:c7:46:c3:c5:e7:38:91:84:2a:61:b4:10:
                    74:43:52:e4:b1:9f:ab:70:1c:20:0b:16:2a:05:c0:
                    18:77:be:52:bc:24:10:35:9b:bb:2f:a9:d3:c2:f6:
                    d8:0d:c3:6f:a4:e9:82:f4:ea:4c:39:c8:a7:c2:16:
                    7c:ec:9d:04:fa:a4:38:9d:1c:1c:19:2f:ee:e9:56:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:94:E5:C5:70:38:BA:AF:19:2C:6D:84:6A:43:8E:2A:69:44:9B:48
            X509v3 Authority Key Identifier:
                keyid:25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/25CF17C687A6082A587E8672CFDF29DABE487548.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31322e302f32332d3233203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:12:e6:80:c2:dd:0d:14:85:2d:a1:d0:48:6e:a5:45:ab:77:
         c3:3c:33:0c:18:00:8b:49:44:96:7e:45:a4:36:f5:44:be:de:
         86:f2:14:ed:0c:e0:d4:5a:63:fe:51:20:28:b4:9d:aa:55:2f:
         02:5d:ff:0b:20:7d:b5:01:f6:06:0e:28:fa:60:aa:fc:04:0d:
         eb:cb:88:b9:f4:c6:54:26:64:a6:39:ea:3e:37:1c:78:51:d9:
         5c:07:1f:38:26:3d:e5:57:76:4e:8b:80:8c:3d:7a:43:8d:86:
         e8:8b:f3:76:d3:e2:f9:bf:93:9a:b4:fe:df:6a:68:18:9e:1b:
         31:ff:5c:b2:c5:08:db:9c:4d:4d:28:b3:70:f0:bd:59:ce:89:
         cf:0e:62:01:ea:8c:7f:37:3f:66:5f:c3:12:b9:82:39:1a:55:
         b9:d7:af:1f:57:19:2f:37:82:0a:53:fe:ea:1e:72:f0:d2:0d:
         c8:b5:a4:52:0e:e9:12:92:be:7e:bd:02:6b:64:1e:27:dd:56:
         9e:70:ce:65:6c:ac:c9:73:0d:b4:8d:8b:e4:c9:cd:ae:42:fa:
         a5:7e:b3:39:37:cf:66:5a:84:59:3b:72:66:3a:3a:07:d7:20:
         c5:6a:d0:c2:00:1c:c5:39:c2:09:20:fb:0c:97:7d:02:2e:e0:
         25:32:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org