Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3234203d3e20323633353138.roa
File:                     3136382e3139372e38342e302f32322d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          tb4GGIlmPyBoX7sfaUxrlaZP5eWtnEwuJjpohfjDeGM=
Subject key identifier:   35:A4:42:41:29:86:FB:9E:5A:89:64:5C:18:6A:15:D9:BF:5F:FC:5C
Certificate issuer:       /CN=E9917121BF342B81190BA3B4C00DF0BA27B48C13
Certificate serial:       5B3F4F83D6EC3C208F52A693D4635652DE895D39
Authority key identifier: E9:91:71:21:BF:34:2B:81:19:0B:A3:B4:C0:0D:F0:BA:27:B4:8C:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9917121BF342B81190BA3B4C00DF0BA27B48C13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3234203d3e20323633353138.roa
Signing time:             Mon 22 Apr 2024 14:52:23 +0000
ROA not before:           Mon 22 Apr 2024 14:47:23 +0000
ROA not after:            Mon 21 Apr 2025 14:52:23 +0000
asID:                     263518
IP address blocks:        168.197.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3f:4f:83:d6:ec:3c:20:8f:52:a6:93:d4:63:56:52:de:89:5d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9917121BF342B81190BA3B4C00DF0BA27B48C13
        Validity
            Not Before: Apr 22 14:47:23 2024 GMT
            Not After : Apr 21 14:52:23 2025 GMT
        Subject: CN=35A442412986FB9E5A89645C186A15D9BF5FFC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:71:46:e9:01:79:ff:18:e8:e7:72:88:db:
                    a0:06:3b:29:8b:e4:b0:47:60:92:89:04:19:54:50:
                    d4:7d:ef:84:ab:eb:86:52:28:8b:be:50:a4:22:38:
                    7c:f9:16:6a:e9:97:f7:bf:8a:aa:00:0a:1d:1b:e9:
                    ad:cc:df:90:39:5b:3a:3e:b3:12:64:8b:d4:01:85:
                    2d:81:b0:4b:be:1c:ad:0c:87:c4:75:84:c8:6a:50:
                    ee:a2:37:0d:a0:28:49:22:26:a7:d0:7d:83:b7:dc:
                    9c:9a:71:1d:1b:f7:3f:09:f4:12:3a:96:33:43:0d:
                    88:2b:6a:50:b1:37:42:e9:8f:f0:91:75:e2:2e:db:
                    17:f2:1d:09:15:fe:34:7a:b5:28:07:37:44:e0:ab:
                    63:44:b9:9d:55:54:b1:24:28:33:79:0e:ca:c4:cf:
                    f0:75:a5:9e:86:b5:f4:e7:32:68:75:42:03:5d:34:
                    c4:c2:bc:9b:50:88:d0:12:94:ff:7d:a7:24:93:7f:
                    04:58:62:17:97:12:ae:82:a9:e1:70:b6:e4:02:fc:
                    9a:8b:cd:7f:ea:87:bc:84:b4:a4:09:52:b5:7d:80:
                    42:09:fe:ca:d4:fc:36:e8:7d:f9:96:8b:7f:9c:93:
                    f9:53:1a:ca:60:3f:42:f9:0f:38:ea:a6:61:34:f1:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A4:42:41:29:86:FB:9E:5A:89:64:5C:18:6A:15:D9:BF:5F:FC:5C
            X509v3 Authority Key Identifier:
                keyid:E9:91:71:21:BF:34:2B:81:19:0B:A3:B4:C0:0D:F0:BA:27:B4:8C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/E9917121BF342B81190BA3B4C00DF0BA27B48C13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9917121BF342B81190BA3B4C00DF0BA27B48C13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:b9:7e:b9:7f:b4:11:a4:80:49:f0:bf:85:c2:e5:70:d4:84:
         40:d4:58:78:0b:cc:70:ba:cf:5d:ce:ed:14:95:25:f8:d3:f7:
         f5:f4:ec:92:ad:5e:92:0b:63:64:e2:33:1c:cf:4f:88:f4:d9:
         2b:21:2c:a5:3c:64:d9:5c:4a:0f:ac:ea:1e:72:0d:cd:3a:4e:
         d1:e8:dd:64:3c:3f:7f:1a:4d:15:c7:ba:04:ad:d5:57:37:74:
         b6:dd:a4:a9:fe:f6:ba:10:0d:83:1e:29:b5:c0:07:a1:9b:bc:
         68:84:54:be:46:e9:94:96:7c:42:1b:18:80:7b:d9:a0:ce:c4:
         da:3f:f3:d1:4f:f6:bd:4b:7b:c4:9b:e7:cb:75:db:5d:16:92:
         86:0e:46:9c:bb:7e:eb:b4:e2:52:97:dd:23:82:be:3a:23:71:
         e7:6a:72:de:ab:fa:88:a0:65:70:2a:a9:5a:c1:61:14:6e:d1:
         30:13:d7:0b:f3:d3:4c:d2:aa:7d:ad:e4:82:78:a7:08:e8:ab:
         43:37:13:7d:63:dd:eb:dc:32:99:81:22:37:63:bb:64:18:20:
         f7:b0:c9:aa:6a:44:f2:8f:7d:b2:9b:a8:d8:4c:e7:32:be:78:
         f6:45:98:18:6f:8e:17:16:c0:f1:68:f9:29:6e:f6:c7:30:7d:
         26:92:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org