Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138332e302f32342d3234203d3e20323731323637.roa
File:                     3136382e3139372e3138332e302f32342d3234203d3e20323731323637.roa (raw, json)
Hash identifier:          9wnLe/X3UCry/oIY3PC36w2njqd5dPsbyaE9HI64Uf8=
Subject key identifier:   CD:3A:08:B3:99:84:D2:78:7C:97:BF:DA:4A:86:9C:EA:98:65:05:BF
Certificate issuer:       /CN=AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6
Certificate serial:       321026EC08AF09A937F5EF1F7DD85D3D2232E669
Authority key identifier: AF:20:C1:AF:59:F1:38:6B:00:F7:C8:24:78:2C:C2:E1:3B:0E:BA:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138332e302f32342d3234203d3e20323731323637.roa
Signing time:             Thu 15 Feb 2024 19:05:32 +0000
ROA not before:           Thu 15 Feb 2024 19:00:32 +0000
ROA not after:            Thu 13 Feb 2025 19:05:32 +0000
asID:                     271267
IP address blocks:        168.197.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:10:26:ec:08:af:09:a9:37:f5:ef:1f:7d:d8:5d:3d:22:32:e6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6
        Validity
            Not Before: Feb 15 19:00:32 2024 GMT
            Not After : Feb 13 19:05:32 2025 GMT
        Subject: CN=CD3A08B39984D2787C97BFDA4A869CEA986505BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:8a:0d:41:2e:c3:80:4c:28:e9:d8:32:9a:
                    2e:cf:e7:c9:a5:ea:04:08:ea:5e:a6:ec:ca:19:bc:
                    5f:ed:d9:6d:f8:ce:17:1d:ae:0b:61:55:c3:06:39:
                    37:5d:cc:15:30:5b:77:2b:5f:92:c7:24:5b:e2:9b:
                    0c:73:c2:0e:c9:0c:f9:a2:f3:00:7f:48:cc:c0:14:
                    f6:5e:86:a4:8c:c4:dc:aa:03:71:da:07:c1:2d:47:
                    e7:53:10:49:6b:2e:5f:48:f4:3b:cf:ea:d2:7b:74:
                    9d:93:07:79:e4:92:82:34:29:64:ba:f4:4d:5b:ef:
                    3e:50:33:ba:52:33:22:70:da:ca:a9:10:0f:00:0d:
                    6f:41:97:de:46:cf:ff:c7:40:63:a5:29:53:62:8e:
                    b0:75:62:85:b7:07:5d:f2:4c:2b:73:81:55:ba:7c:
                    60:cc:09:4c:13:0b:e6:03:64:30:df:d2:90:c5:07:
                    64:74:be:80:5d:37:22:32:9e:58:ab:8a:e6:81:23:
                    5d:3d:0c:76:ee:5a:38:d7:03:0d:37:b0:cf:65:ce:
                    02:b4:e7:ee:ff:12:ed:30:45:45:fb:c7:42:a7:f3:
                    b3:51:71:10:8a:5b:ce:01:4e:b9:40:11:f4:be:5b:
                    bf:77:a2:4d:cd:20:20:9e:a3:0f:cf:00:c8:d7:10:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3A:08:B3:99:84:D2:78:7C:97:BF:DA:4A:86:9C:EA:98:65:05:BF
            X509v3 Authority Key Identifier:
                keyid:AF:20:C1:AF:59:F1:38:6B:00:F7:C8:24:78:2C:C2:E1:3B:0E:BA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138332e302f32342d3234203d3e20323731323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:be:e1:e9:ab:a7:1c:f7:73:40:f0:ee:30:58:be:1c:63:d2:
         7d:11:45:89:d8:d4:84:8d:f4:10:7e:74:c2:9c:05:8a:5a:62:
         37:c6:dd:a6:9a:95:6e:07:36:24:09:8d:75:72:08:e6:4c:f7:
         81:47:43:f6:4e:02:80:69:3d:0f:24:74:58:af:a7:2c:53:4e:
         69:a3:a6:40:41:0a:0b:cb:03:3c:b6:8c:ef:39:e8:c3:9a:6c:
         12:40:a7:d5:7a:b9:42:10:fa:e3:f1:f6:a2:e0:df:31:25:9c:
         e1:77:7d:d1:0d:9d:24:e6:85:d6:1e:37:14:a4:5d:49:46:e9:
         39:6a:28:f6:c6:98:85:27:35:6b:6e:7e:e1:82:c9:24:2b:3f:
         89:5b:b3:3c:a2:12:57:d2:7f:b2:68:d3:0a:99:44:d7:f6:72:
         1d:df:86:97:7c:28:f4:e3:bf:53:7d:72:47:d0:59:60:de:99:
         69:86:93:ae:18:a3:c5:fb:de:fe:94:8b:a3:38:c1:dd:5d:f5:
         72:22:f6:7a:75:ad:b1:f2:85:89:cc:94:8c:69:aa:59:19:a4:
         50:18:e1:27:98:d2:64:3c:77:fa:b1:48:9f:d2:b3:7d:ae:99:
         f1:d4:32:e9:ed:24:34:a8:45:07:35:1e:87:68:b4:b2:03:4f:
         ae:87:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org