Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31352e302f32342d3234203d3e20323635333737.roa
File:                     3136382e3139342e31352e302f32342d3234203d3e20323635333737.roa (raw, json)
Hash identifier:          yeNdj0+LiInlK3qtmsQpbnTQ7uajZ9LDZCMX+A+62A8=
Subject key identifier:   C4:98:D9:2A:4C:A3:FC:C9:3E:34:56:ED:52:1A:90:54:AA:FB:CF:A8
Certificate issuer:       /CN=25CF17C687A6082A587E8672CFDF29DABE487548
Certificate serial:       3E4AAF8C1BEC42A4F805A35714C17C08D73F6DE3
Authority key identifier: 25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31352e302f32342d3234203d3e20323635333737.roa
Signing time:             Sat 12 Aug 2023 03:21:19 +0000
ROA not before:           Sat 12 Aug 2023 03:16:19 +0000
ROA not after:            Sat 10 Aug 2024 03:21:19 +0000
asID:                     265377
IP address blocks:        168.194.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4a:af:8c:1b:ec:42:a4:f8:05:a3:57:14:c1:7c:08:d7:3f:6d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CF17C687A6082A587E8672CFDF29DABE487548
        Validity
            Not Before: Aug 12 03:16:19 2023 GMT
            Not After : Aug 10 03:21:19 2024 GMT
        Subject: CN=C498D92A4CA3FCC93E3456ED521A9054AAFBCFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:db:33:e1:90:70:12:68:71:45:eb:6b:82:
                    7b:1e:6d:64:7e:0f:a6:07:54:34:b0:3f:34:33:1a:
                    79:4a:bf:b1:5a:2d:46:54:28:f3:97:a4:a6:fb:ed:
                    3b:27:29:b4:bd:0b:36:5c:ef:03:d7:37:e0:e9:e3:
                    78:8e:71:a1:f0:84:58:7c:e0:48:97:5d:c7:09:01:
                    24:2f:22:6f:2c:5c:59:3d:af:4e:34:a9:51:9f:51:
                    0f:d9:a9:67:13:11:b5:56:33:0d:35:a4:b0:b8:a3:
                    f3:59:c5:70:e9:71:88:f9:0d:e6:3f:a1:93:91:cb:
                    06:b3:ec:dd:d5:6d:78:c4:19:75:94:dd:d3:fa:81:
                    5f:e1:65:d7:da:f4:05:31:f3:9c:4a:8f:42:0e:37:
                    85:8b:e8:91:a9:fd:56:11:1a:a2:b0:b2:87:d2:32:
                    cb:0c:55:de:e8:df:84:50:70:63:67:79:1b:a8:39:
                    c2:54:69:fe:d5:bb:6b:9b:48:b8:2a:90:e4:fc:91:
                    2c:62:38:ac:cd:24:c7:0a:ad:1c:f9:a6:b3:99:e3:
                    59:77:52:00:19:1a:32:a1:f3:4e:9b:12:dd:50:4e:
                    fa:e6:80:75:76:f6:d5:b6:31:a3:3f:db:16:d1:c5:
                    55:9f:5f:c5:e6:e0:fc:4b:0b:57:8f:9f:eb:e9:46:
                    d9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:98:D9:2A:4C:A3:FC:C9:3E:34:56:ED:52:1A:90:54:AA:FB:CF:A8
            X509v3 Authority Key Identifier:
                keyid:25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/25CF17C687A6082A587E8672CFDF29DABE487548.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/3136382e3139342e31352e302f32342d3234203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:5f:82:0f:b0:b6:ef:d6:d3:95:7c:89:3b:9c:d6:4d:09:5e:
         88:2a:2a:1d:67:0c:ec:9f:36:93:b7:09:fa:49:2b:6e:ba:2f:
         c9:d6:00:fc:85:77:79:21:e0:47:2d:87:a8:62:6d:05:33:25:
         2b:62:c2:d5:7e:1a:cb:72:23:0d:3f:e4:b1:33:04:8a:04:81:
         58:c4:5d:a1:9e:76:12:fa:81:d8:cb:d7:bd:91:41:e1:f7:f3:
         3b:6c:a1:80:c9:61:06:50:94:09:54:5f:5c:83:90:23:97:db:
         a8:94:50:54:9a:9d:fc:32:d2:b7:38:f6:ae:fe:d9:ee:42:f8:
         97:37:11:16:52:21:5a:d9:34:95:46:38:e6:9c:fc:19:fb:99:
         aa:ed:19:51:1a:e5:55:51:ec:01:c4:9d:36:26:f3:81:8b:65:
         2e:4b:9c:c3:7b:01:39:4c:56:3b:72:f5:b4:fe:0c:6d:fd:18:
         e5:0d:ba:77:8e:88:fd:37:8e:81:5d:0b:df:aa:85:f5:bf:0d:
         b2:9c:f6:92:73:b1:c7:02:cd:11:40:29:ee:2f:99:ea:91:df:
         7c:8d:66:9b:ff:c5:e8:c0:b2:97:60:21:2d:d3:6a:58:56:0b:
         c2:33:4d:db:9c:b8:32:3f:f0:21:0b:0f:0e:c4:e7:26:b6:83:
         cb:bd:b8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org