Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31342e302f32342d3234203d3e20323635333737.roa
File:                     3136382e3139342e31342e302f32342d3234203d3e20323635333737.roa (raw, json)
Hash identifier:          cwpIMopA8pCil/s/BEjvWr1eZteNVfrqKMV+kLKgE9g=
Subject key identifier:   5E:BA:C9:A1:EE:62:DC:BC:2B:4F:02:6F:3E:3F:3D:74:D7:5C:BE:E7
Certificate issuer:       /CN=25CF17C687A6082A587E8672CFDF29DABE487548
Certificate serial:       7F23E0B2E0447AD12C437D78D49F017285F2A668
Authority key identifier: 25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31342e302f32342d3234203d3e20323635333737.roa
Signing time:             Sat 12 Aug 2023 03:21:02 +0000
ROA not before:           Sat 12 Aug 2023 03:16:02 +0000
ROA not after:            Sat 10 Aug 2024 03:21:02 +0000
asID:                     265377
IP address blocks:        168.194.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:23:e0:b2:e0:44:7a:d1:2c:43:7d:78:d4:9f:01:72:85:f2:a6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CF17C687A6082A587E8672CFDF29DABE487548
        Validity
            Not Before: Aug 12 03:16:02 2023 GMT
            Not After : Aug 10 03:21:02 2024 GMT
        Subject: CN=5EBAC9A1EE62DCBC2B4F026F3E3F3D74D75CBEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:7c:a2:f0:2c:95:f3:cd:8d:06:24:5b:6e:
                    7b:b3:2d:3a:48:d4:bf:bb:e8:7e:9f:6b:68:39:13:
                    79:86:bc:21:b2:31:77:08:9e:3f:7b:59:a6:f7:14:
                    5e:22:d9:7f:d8:a2:2d:a9:07:08:7a:a3:94:4d:65:
                    ae:0e:b2:62:38:1d:28:af:7d:2c:bb:8c:cc:b6:be:
                    68:6e:42:8f:ba:f0:1c:8d:d6:45:53:96:f2:7a:8f:
                    eb:7e:af:4a:da:ff:a8:f4:db:ac:06:0a:20:f0:88:
                    91:47:96:7f:76:29:56:5b:a6:e0:95:0a:80:50:03:
                    b4:0a:e5:ad:0a:ce:36:69:90:81:c4:6e:80:47:73:
                    8c:eb:72:08:0a:f1:71:3d:80:a4:98:51:40:01:08:
                    47:2e:b1:ee:9a:9e:62:92:59:62:96:03:5c:65:f8:
                    3e:50:1c:56:ad:77:37:82:c4:26:aa:85:ee:98:81:
                    01:13:fb:4a:5d:fd:f3:08:37:96:3c:05:c7:08:a6:
                    df:07:66:c6:9c:0a:ed:3c:8f:99:f9:b6:2d:5d:e0:
                    07:ab:d2:bc:81:bb:53:f1:81:1d:56:ad:fa:a1:29:
                    de:a7:e0:f4:c5:37:70:1d:25:b2:92:b9:b4:b4:20:
                    b4:3f:aa:d2:aa:f7:0a:7f:4b:51:4e:95:34:e6:cc:
                    94:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BA:C9:A1:EE:62:DC:BC:2B:4F:02:6F:3E:3F:3D:74:D7:5C:BE:E7
            X509v3 Authority Key Identifier:
                keyid:25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/25CF17C687A6082A587E8672CFDF29DABE487548.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31342e302f32342d3234203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:d8:48:55:b2:12:19:6f:5a:b7:6e:c8:a8:96:8f:3a:c3:01:
         1f:ec:b7:a2:e1:5c:d5:43:2e:aa:5e:ea:0d:3a:89:66:f4:f8:
         b7:f0:65:4f:89:ed:d6:f8:ae:40:9e:ed:99:04:44:2d:93:81:
         97:3e:26:0e:7f:8f:fb:d2:3c:be:9d:4e:19:45:a6:21:da:58:
         5d:35:51:9e:5d:b4:be:4b:c9:5c:e7:54:2f:9c:e0:dc:9e:74:
         6a:c3:ba:e7:cc:d3:22:bb:d0:20:e1:2e:98:c0:f7:41:7c:61:
         11:df:f2:8c:b7:29:ab:aa:ae:89:13:17:28:dd:a6:dd:66:77:
         7b:28:6f:d5:79:5d:29:db:8f:60:a5:be:ee:17:e4:8b:a8:27:
         fa:06:2d:ef:15:eb:2e:7f:76:a8:1b:9d:9b:ad:6d:af:22:d1:
         2a:b2:96:ad:c1:af:9e:90:fe:af:b5:42:ed:78:d2:98:fc:70:
         dc:3b:08:3c:5f:9f:fe:16:10:05:86:7d:ad:ae:db:52:38:9d:
         11:91:c5:38:5b:b5:62:82:2c:16:0a:24:ba:d3:0f:c5:63:90:
         63:f7:82:d4:0d:7a:18:08:23:5b:01:5b:ed:e3:09:7e:42:9c:
         30:25:b6:39:c7:18:69:d5:e0:f3:31:1a:e7:9d:5e:94:4f:cb:
         56:46:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org