Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e332e302f32342d3234203d3e20323634383934.roa
File:                     3136382e3232382e332e302f32342d3234203d3e20323634383934.roa (raw, json)
Hash identifier:          kKW1BGUnv369q4mfC7mn0OO2t/1fB1Rf+ySCbGW2gBY=
Subject key identifier:   F7:56:6B:95:85:BA:FE:18:E7:C4:F7:DD:C9:BF:08:58:46:83:EC:CF
Certificate issuer:       /CN=256738B27EE60E87B5745BCBFA1CCFA02F9033B5
Certificate serial:       2D137392FD7D4E08919BACD0176B56D45E4BA7FC
Authority key identifier: 25:67:38:B2:7E:E6:0E:87:B5:74:5B:CB:FA:1C:CF:A0:2F:90:33:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e332e302f32342d3234203d3e20323634383934.roa
Signing time:             Tue 25 Jul 2023 22:21:49 +0000
ROA not before:           Tue 25 Jul 2023 22:16:49 +0000
ROA not after:            Tue 23 Jul 2024 22:21:49 +0000
asID:                     264894
IP address blocks:        168.228.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:13:73:92:fd:7d:4e:08:91:9b:ac:d0:17:6b:56:d4:5e:4b:a7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256738B27EE60E87B5745BCBFA1CCFA02F9033B5
        Validity
            Not Before: Jul 25 22:16:49 2023 GMT
            Not After : Jul 23 22:21:49 2024 GMT
        Subject: CN=F7566B9585BAFE18E7C4F7DDC9BF08584683ECCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:59:32:72:35:58:11:a5:a7:00:20:31:8c:
                    12:50:f3:a2:f5:55:84:89:77:6c:08:29:74:a1:2f:
                    2c:1b:59:4e:bb:7c:70:96:93:c9:3e:be:ea:74:66:
                    4c:8a:ae:25:7e:30:e4:41:6c:04:8c:58:a9:29:0e:
                    03:1b:df:16:89:ce:41:e7:8b:6d:74:ad:99:18:5c:
                    d6:a3:23:a7:62:af:27:4c:31:11:dd:c1:17:01:0c:
                    4e:13:c8:43:17:12:a1:41:52:7d:ba:36:ae:2b:08:
                    e0:2b:55:77:a2:dd:83:54:51:6c:5c:0f:16:4d:2c:
                    be:73:19:1c:ee:d7:b8:de:d3:e4:88:05:af:d0:fb:
                    c7:81:7b:d9:79:d4:36:65:84:02:28:1d:80:8b:92:
                    f8:46:b8:04:13:8d:74:c1:ae:81:f2:a1:36:47:48:
                    c2:f8:2a:dd:ca:ce:4f:66:31:96:62:6d:6c:07:7c:
                    2c:2e:a9:37:0e:33:63:a4:41:e9:bb:e0:43:1b:d5:
                    72:e1:84:59:0b:9a:f7:eb:ac:f1:44:df:cf:92:68:
                    8e:b2:4a:02:f1:f9:7c:13:18:fa:f5:83:93:0c:25:
                    20:c5:b8:93:be:3c:c5:e4:af:17:7b:52:18:2e:87:
                    bc:65:76:5b:8c:61:b1:d3:3a:3c:7a:8a:5c:6b:c5:
                    0d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:56:6B:95:85:BA:FE:18:E7:C4:F7:DD:C9:BF:08:58:46:83:EC:CF
            X509v3 Authority Key Identifier:
                keyid:25:67:38:B2:7E:E6:0E:87:B5:74:5B:CB:FA:1C:CF:A0:2F:90:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e332e302f32342d3234203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:1d:82:13:e7:10:68:77:1d:57:31:4c:68:5d:fa:3f:6f:ec:
         a7:1a:17:e5:50:80:2d:dd:e0:64:1f:5a:4a:d4:00:f9:a5:d2:
         d9:a5:06:60:dd:63:db:05:05:06:9e:3e:2e:37:40:a2:41:bf:
         59:62:d1:24:14:9c:88:bb:37:43:14:4a:79:ef:9e:52:74:d7:
         93:a0:e7:ef:d4:fc:cd:80:dd:03:fa:71:4f:e5:d8:d2:19:8a:
         8d:ba:03:00:fd:8a:b4:ee:2d:0f:00:df:27:95:fd:28:00:d8:
         29:77:0a:3e:8f:65:34:81:c9:71:26:52:b0:bf:21:dc:40:7c:
         d0:ed:e8:17:ef:6e:ff:4c:d2:50:8a:1e:41:31:27:4b:7b:04:
         26:9d:3f:55:fc:49:44:70:74:f4:b3:03:2c:2c:69:4e:dc:c3:
         96:27:7e:7c:5d:8d:3a:c0:15:76:c4:67:b9:19:c0:a1:45:da:
         2b:08:0f:2d:31:aa:a8:14:93:e1:79:ca:bb:e8:95:9d:a4:e8:
         86:21:48:d9:89:41:f5:61:5f:87:55:d0:4d:cb:12:07:a8:56:
         b0:61:d8:f9:b6:94:17:7e:fa:6e:27:8c:b6:7e:b5:dd:a6:74:
         96:6e:b4:0b:80:7f:f6:35:1c:dd:7e:df:fc:17:ec:c7:53:be:
         8e:6a:f2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org