Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e322e302f32342d3234203d3e20323634383934.roa
File:                     3136382e3232382e322e302f32342d3234203d3e20323634383934.roa (raw, json)
Hash identifier:          AfiXrvmHtN7F4k7W40FlVokkV7hxlgIe+fr2T0d/W1Y=
Subject key identifier:   56:06:5D:DF:17:A4:93:B3:D6:3D:28:A1:2B:8B:13:1F:EB:D8:29:4C
Certificate issuer:       /CN=256738B27EE60E87B5745BCBFA1CCFA02F9033B5
Certificate serial:       2CD8F2DC46DABBD0A7AB13214C1597124C57FC75
Authority key identifier: 25:67:38:B2:7E:E6:0E:87:B5:74:5B:CB:FA:1C:CF:A0:2F:90:33:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e322e302f32342d3234203d3e20323634383934.roa
Signing time:             Tue 25 Jul 2023 22:21:50 +0000
ROA not before:           Tue 25 Jul 2023 22:16:50 +0000
ROA not after:            Tue 23 Jul 2024 22:21:50 +0000
asID:                     264894
IP address blocks:        168.228.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d8:f2:dc:46:da:bb:d0:a7:ab:13:21:4c:15:97:12:4c:57:fc:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256738B27EE60E87B5745BCBFA1CCFA02F9033B5
        Validity
            Not Before: Jul 25 22:16:50 2023 GMT
            Not After : Jul 23 22:21:50 2024 GMT
        Subject: CN=56065DDF17A493B3D63D28A12B8B131FEBD8294C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:47:7c:9b:e1:1b:ba:7a:1e:d2:ec:30:2b:
                    0c:fd:bd:f1:11:37:c6:ae:f0:eb:ed:e1:b1:b0:72:
                    1c:2a:22:03:89:5e:8f:33:0f:17:b1:d7:41:57:e8:
                    22:9f:59:da:08:6e:cf:ac:5d:9c:75:b4:47:f2:94:
                    6e:51:1f:b9:68:40:6d:ee:03:23:43:9d:ce:79:5c:
                    2b:79:22:65:ec:8f:53:f0:5a:a7:97:2c:81:be:84:
                    86:40:c8:5b:fd:3c:04:91:2c:f6:9b:36:e5:d7:6b:
                    f4:5f:ed:67:84:02:3a:85:d1:2d:5c:56:63:cb:b3:
                    84:92:a3:44:ba:18:37:5c:a5:e9:58:fd:5c:5f:e0:
                    34:0b:87:c5:f7:bf:18:19:1d:93:eb:a1:77:d3:cb:
                    20:59:8f:e2:91:fe:58:cb:18:17:27:9f:fa:30:b5:
                    27:b4:5b:60:11:c1:43:e5:8d:fc:cf:d9:b6:cd:77:
                    4a:a5:e3:6e:22:cd:fb:a6:fb:e1:f5:55:03:50:31:
                    d4:7e:80:70:b7:77:c0:d0:51:07:95:54:9b:75:14:
                    5b:88:99:b9:cd:cf:cb:d1:56:2e:b6:7f:2b:24:3c:
                    43:fd:99:6d:43:84:86:5b:c8:d3:0f:7a:66:f0:77:
                    2f:ac:90:43:fd:de:10:6d:ec:25:10:bd:f6:bb:f0:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:06:5D:DF:17:A4:93:B3:D6:3D:28:A1:2B:8B:13:1F:EB:D8:29:4C
            X509v3 Authority Key Identifier:
                keyid:25:67:38:B2:7E:E6:0E:87:B5:74:5B:CB:FA:1C:CF:A0:2F:90:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e322e302f32342d3234203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:41:1c:50:21:71:2c:5c:cc:67:d8:96:05:8d:44:33:01:
         ee:8e:82:81:a6:03:cf:b9:34:73:54:16:9d:c4:99:b3:72:f3:
         44:4f:fa:00:0e:34:a8:5f:d9:92:87:3b:46:a8:09:5f:2b:d7:
         15:7b:64:de:ff:a2:9c:8a:17:cb:a1:14:58:cb:33:c1:ce:b1:
         4d:ee:94:d2:67:83:e2:c5:17:79:33:2b:e7:3e:e0:89:4f:5a:
         b3:2f:bf:47:85:46:2d:12:f6:5b:dc:52:32:83:d4:73:5a:39:
         60:4e:5d:42:71:a6:66:6e:fb:e1:57:e7:8a:f2:b9:a7:dc:db:
         f3:51:be:0b:b2:94:74:dc:e9:62:6e:35:2b:e5:d7:86:13:69:
         10:a6:c3:83:58:40:c9:ea:e5:12:5d:b3:00:08:78:3b:1c:75:
         98:7d:b2:d2:7a:cb:5f:0f:4d:f2:7c:04:04:08:f5:fa:c5:cd:
         4b:19:98:a7:a1:1e:3c:44:c4:ca:5f:3a:c8:69:c9:e7:f1:ca:
         1b:69:61:0e:b2:db:28:0c:70:f4:43:fe:ce:36:82:77:f2:d8:
         97:26:ba:ee:e9:8f:b5:97:6e:9c:7b:6e:a0:64:2c:57:2f:c7:
         11:e8:47:59:c6:e7:50:5c:ea:08:b7:a5:53:84:d4:73:05:1e:
         d5:40:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org