Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa
File:                     3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa (raw, json)
Hash identifier:          ObOfenY7PuecIj9VVjA0wihZEqQeiXY9HluDyKkBjlI=
Subject key identifier:   67:7D:7F:F5:23:90:C0:BE:88:8F:61:24:2D:35:FD:BF:63:41:80:52
Certificate issuer:       /CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
Certificate serial:       6403A77E3C229CB26C33A6954F0A5F927FE732B2
Authority key identifier: 2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa
Signing time:             Mon 04 Mar 2024 14:19:58 +0000
ROA not before:           Mon 04 Mar 2024 14:14:58 +0000
ROA not after:            Mon 03 Mar 2025 14:19:58 +0000
asID:                     52968
IP address blocks:        168.194.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:03:a7:7e:3c:22:9c:b2:6c:33:a6:95:4f:0a:5f:92:7f:e7:32:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
        Validity
            Not Before: Mar  4 14:14:58 2024 GMT
            Not After : Mar  3 14:19:58 2025 GMT
        Subject: CN=677D7FF52390C0BE888F61242D35FDBF63418052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:49:16:a2:74:8c:31:13:6e:af:fb:c0:2d:
                    14:0c:f8:65:c3:0d:fc:49:ae:61:70:86:03:a9:15:
                    9c:29:93:37:3a:b0:33:dd:47:1b:57:73:ad:89:58:
                    ee:26:2c:b6:03:89:d7:ac:43:1a:1f:c1:95:db:4a:
                    f8:6d:52:d0:2c:0e:5b:9b:95:ee:9b:46:1d:a1:27:
                    3d:96:fe:bf:d8:8a:56:ab:9d:dc:fe:08:0f:89:5f:
                    66:73:71:58:f6:e3:6f:86:dc:51:96:63:c0:dc:82:
                    59:3a:5e:eb:e0:04:8a:b8:db:d7:49:18:dd:81:c3:
                    cd:51:e4:e3:cb:a9:58:ad:c0:da:be:64:e1:8b:46:
                    02:8e:3b:db:37:b7:a5:bb:41:aa:13:91:85:20:12:
                    8f:6c:02:42:75:58:58:31:36:de:33:ac:7f:e1:c0:
                    05:f9:32:e5:69:aa:f9:3a:e3:a0:52:76:3f:85:e9:
                    cb:47:a1:8a:de:07:6d:f7:87:1a:5b:7c:90:ef:36:
                    20:d5:e0:0e:52:08:ec:26:5c:87:e9:a3:05:5c:54:
                    91:13:d3:dc:ca:74:c7:bd:dc:5f:56:14:34:7f:b6:
                    ec:d6:00:15:c6:2e:51:8d:85:b6:5b:c3:0f:15:74:
                    60:7a:71:75:2b:a8:5d:9d:8a:8c:62:60:b0:fe:0c:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7D:7F:F5:23:90:C0:BE:88:8F:61:24:2D:35:FD:BF:63:41:80:52
            X509v3 Authority Key Identifier:
                keyid:2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:5f:1f:55:ae:95:11:83:8a:12:55:07:1e:6f:6e:90:7e:6f:
         83:2c:af:ff:8f:4d:92:1b:e9:79:bb:c4:7a:94:17:29:6a:0c:
         f1:d8:c0:2f:0c:61:1b:d0:3c:61:16:77:7b:a4:2b:4c:b5:1e:
         57:f7:08:a1:2d:86:90:2a:86:c9:75:60:9c:5c:12:d7:e7:a6:
         b0:06:66:d4:17:9b:74:a0:4e:a5:22:da:d7:e7:3f:32:6a:70:
         ad:6e:a2:8f:c2:a8:86:14:2c:91:73:d0:bf:e0:4f:bf:21:f5:
         6b:9a:65:67:d9:74:19:af:99:51:6f:8a:06:d5:22:47:db:68:
         79:4d:76:6b:82:41:ec:e9:f8:89:9a:15:80:e6:bb:e1:0a:93:
         d3:b9:a2:45:d9:f6:ac:d6:25:17:c2:0b:dd:ef:5b:99:5a:c0:
         c3:09:4b:7b:66:54:af:0f:de:bc:bd:bd:11:b1:c6:29:ce:7c:
         aa:46:db:77:9c:55:df:e9:24:72:5d:69:f8:9f:67:b5:a6:aa:
         93:6c:9e:f0:21:86:e9:15:2e:50:26:07:d6:fb:83:e3:f6:90:
         fa:3f:fa:02:e8:37:ce:77:f7:46:e7:3d:71:79:27:8e:6e:13:
         00:60:40:09:2e:1e:f5:1e:fd:ac:4e:43:59:38:e4:b0:f7:c4:
         8f:5f:46:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org