Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa
File:                     3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa (raw, json)
Hash identifier:          rn/zGaqiaOU7uNIEiAYjVpdoBM03RpibKdqcAh6YPsc=
Subject key identifier:   9D:D5:9C:CC:A3:CE:74:CF:CC:4E:10:A7:33:3E:55:88:CA:A6:73:AB
Certificate issuer:       /CN=AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6
Certificate serial:       284AD3F4CAB8EBEE075C6F2C0C3CC1DFE12690D5
Authority key identifier: AF:20:C1:AF:59:F1:38:6B:00:F7:C8:24:78:2C:C2:E1:3B:0E:BA:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa
Signing time:             Thu 15 Feb 2024 19:05:32 +0000
ROA not before:           Thu 15 Feb 2024 19:00:32 +0000
ROA not after:            Thu 13 Feb 2025 19:05:32 +0000
asID:                     271267
IP address blocks:        168.197.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4a:d3:f4:ca:b8:eb:ee:07:5c:6f:2c:0c:3c:c1:df:e1:26:90:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6
        Validity
            Not Before: Feb 15 19:00:32 2024 GMT
            Not After : Feb 13 19:05:32 2025 GMT
        Subject: CN=9DD59CCCA3CE74CFCC4E10A7333E5588CAA673AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:9c:45:a0:90:fb:d7:d6:6b:1a:2e:ba:05:
                    36:bb:74:ba:fd:8d:d8:bb:9e:d7:39:c0:ab:d2:1e:
                    2c:ab:86:fd:a0:c0:31:8e:10:44:1d:64:8c:4c:d0:
                    91:36:ac:69:bd:1f:1b:9c:6e:77:40:ea:c7:c5:9c:
                    04:a3:c7:52:4b:b1:12:cf:39:51:78:a4:de:57:1f:
                    c9:22:0e:7e:95:d4:62:9b:67:80:77:e4:32:ab:2e:
                    39:71:8c:46:b7:27:ee:77:2d:36:03:1f:99:5f:04:
                    92:02:f6:57:5d:b5:6b:76:e8:db:51:07:d5:92:7d:
                    36:67:43:72:2f:62:61:8d:60:a9:1d:25:27:ed:69:
                    37:5d:e0:b0:ba:09:d4:4c:8f:a7:4d:f2:3f:6a:b0:
                    8e:5f:8a:7f:a3:b4:fc:54:9f:d7:aa:7a:17:f3:f5:
                    02:93:b4:8e:95:74:e1:a0:16:df:ce:61:05:0e:bf:
                    16:d1:11:18:03:76:f7:b4:2e:87:d4:86:2d:4e:b5:
                    25:fa:97:f8:a7:bf:9f:e0:15:88:c8:16:70:c7:03:
                    82:e1:60:76:84:4f:3d:dd:3d:c9:ce:c3:26:83:9d:
                    db:9a:56:b0:88:81:e3:c7:a9:17:43:83:d0:43:65:
                    65:9d:2b:ea:11:75:14:c1:c3:7a:0d:5d:21:59:e8:
                    32:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D5:9C:CC:A3:CE:74:CF:CC:4E:10:A7:33:3E:55:88:CA:A6:73:AB
            X509v3 Authority Key Identifier:
                keyid:AF:20:C1:AF:59:F1:38:6B:00:F7:C8:24:78:2C:C2:E1:3B:0E:BA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:71:8e:6d:44:8b:20:be:08:f3:e9:cc:2c:f9:c8:e6:3f:7f:
         75:59:d2:af:a6:f8:11:b5:7f:bd:33:1b:54:80:a6:43:02:0c:
         f2:4e:c2:f0:e1:b5:b2:0a:f7:60:97:16:30:8f:97:de:30:0b:
         19:b8:bd:7e:4d:de:85:21:9f:e0:56:85:36:93:84:b3:43:38:
         18:02:fa:63:f3:01:d0:d4:e2:14:0f:3e:6b:a6:b9:cb:22:99:
         c4:55:47:0b:31:d7:72:63:1d:72:bf:91:dd:0d:bf:c1:f3:7c:
         d0:88:b5:cc:b4:5c:a7:8c:56:a5:9a:eb:b0:87:cd:b3:66:ae:
         40:fb:f5:d2:52:23:6d:63:eb:8b:0f:dd:a3:ad:69:66:34:0d:
         63:f8:d7:e6:1c:01:c3:59:9e:8d:85:55:32:f6:2d:83:d0:17:
         e9:c8:de:a7:c5:14:6a:6a:fd:1c:7f:43:49:41:3d:ba:23:99:
         f0:75:e9:22:e6:e7:1a:c6:df:1d:c0:6e:ef:7f:1f:33:50:1c:
         64:a0:51:eb:3b:34:3a:2c:17:39:92:97:74:97:8a:3f:7f:b7:
         89:a4:80:ff:0a:71:7e:e8:d3:01:da:3f:18:47:ab:57:2c:7c:
         d7:6c:29:ad:2e:38:19:8a:c9:c7:51:e5:19:a8:b9:e3:cb:33:
         5c:ab:00:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org