Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e302e302f32332d3233203d3e20323634383934.roa
File:                     3136382e3232382e302e302f32332d3233203d3e20323634383934.roa (raw, json)
Hash identifier:          qIOLNNiMwdI3IgUZQMQMwrHq0lcn01xgyS50XoyaIJs=
Subject key identifier:   29:C2:CD:F5:85:23:DA:F8:13:B6:41:84:67:53:0D:4D:DF:13:C2:58
Certificate issuer:       /CN=256738B27EE60E87B5745BCBFA1CCFA02F9033B5
Certificate serial:       331EF55DDAE668EA9274B8DEC28964263C79878F
Authority key identifier: 25:67:38:B2:7E:E6:0E:87:B5:74:5B:CB:FA:1C:CF:A0:2F:90:33:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e302e302f32332d3233203d3e20323634383934.roa
Signing time:             Tue 25 Jul 2023 22:21:51 +0000
ROA not before:           Tue 25 Jul 2023 22:16:51 +0000
ROA not after:            Tue 23 Jul 2024 22:21:51 +0000
asID:                     264894
IP address blocks:        168.228.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1e:f5:5d:da:e6:68:ea:92:74:b8:de:c2:89:64:26:3c:79:87:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256738B27EE60E87B5745BCBFA1CCFA02F9033B5
        Validity
            Not Before: Jul 25 22:16:51 2023 GMT
            Not After : Jul 23 22:21:51 2024 GMT
        Subject: CN=29C2CDF58523DAF813B6418467530D4DDF13C258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:a3:0a:9f:d9:c7:25:4b:69:e2:15:fd:0a:
                    83:1e:61:68:7e:12:08:4d:e1:9d:0d:3e:19:f3:89:
                    a6:87:a5:85:c5:26:57:1d:51:b3:d0:11:84:9b:49:
                    14:ce:b1:95:a2:7d:20:33:e1:3d:cb:36:d7:f5:6b:
                    7b:1f:df:aa:db:e9:1c:25:c8:bf:6b:a3:c6:96:31:
                    74:d8:b2:e1:93:59:1b:41:d3:9b:d4:36:a5:fa:de:
                    ab:45:82:55:02:70:f6:65:1c:c2:73:2a:f1:50:15:
                    08:60:19:7b:be:2e:4b:b8:e5:94:d3:26:cd:88:03:
                    d1:bf:eb:44:cc:ee:5d:93:b0:d7:0b:4d:c8:a2:ad:
                    fe:f2:04:c1:4d:56:97:e2:cb:12:ac:e5:48:10:2c:
                    78:1d:d6:3b:cc:64:ef:de:bf:e2:16:56:41:27:11:
                    0a:91:11:54:a5:f0:25:f5:1e:8c:d4:b5:52:0e:6c:
                    09:68:a3:58:ca:4a:2f:f6:2b:97:79:72:b6:e7:d8:
                    c1:b2:a5:83:90:7c:8d:82:8a:7b:1d:20:5a:5f:b2:
                    1b:af:3f:d6:a6:dd:af:18:36:0f:26:a1:be:c2:82:
                    a3:14:cd:84:fc:a2:28:41:1b:c5:b9:f7:07:79:50:
                    dd:af:b6:1a:6b:6b:9c:45:2a:4b:11:8b:e1:8e:1c:
                    d1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C2:CD:F5:85:23:DA:F8:13:B6:41:84:67:53:0D:4D:DF:13:C2:58
            X509v3 Authority Key Identifier:
                keyid:25:67:38:B2:7E:E6:0E:87:B5:74:5B:CB:FA:1C:CF:A0:2F:90:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e302e302f32332d3233203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:e8:d5:54:e5:bc:e2:c1:43:15:f0:e4:90:a3:df:d2:fe:cc:
         d6:b5:12:89:5c:c0:b3:36:81:63:6c:b4:da:7c:76:6c:fd:a8:
         05:92:d2:3e:14:c2:53:cd:75:4b:91:fb:65:e1:82:df:f6:86:
         1d:9c:dc:7b:13:6b:25:60:2a:b1:8a:8b:f4:37:66:09:e0:24:
         40:67:4b:6f:e7:41:5b:3d:57:16:92:bc:aa:25:15:09:0d:85:
         85:c9:14:9b:06:0f:77:77:a3:dd:00:a9:b4:df:ca:a1:cc:69:
         b0:72:8b:de:07:53:4d:3b:4d:e6:b9:43:dd:37:1f:a0:35:f2:
         10:6e:8b:31:52:d6:fa:e1:4b:f4:70:11:bf:23:6e:0c:b8:34:
         f1:7e:56:83:28:b8:c1:be:0a:b3:a1:96:0b:59:66:2d:df:bb:
         57:f6:c6:f2:2a:be:a0:8f:77:69:d3:21:2e:e8:6d:47:5e:2e:
         19:84:e8:25:a4:66:51:61:f9:ff:5b:48:67:b6:4f:2c:e7:20:
         a4:88:01:4e:2b:3b:4c:0e:cd:95:be:ea:8b:d7:63:6d:d4:03:
         9c:3f:27:c3:5f:f5:f6:59:c2:00:ff:af:df:19:46:94:97:fd:
         5b:ea:af:8d:67:51:10:06:49:2d:0f:70:87:ff:d7:e0:31:17:
         5f:1e:46:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org