Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/3136382e3139372e35322e302f32322d3332203d3e20323632383830.roa
File:                     3136382e3139372e35322e302f32322d3332203d3e20323632383830.roa (raw, json)
Hash identifier:          lQE/KUhRqOjJApnFJjkO2sm1nemzMSYQbxyqFsMRj98=
Subject key identifier:   80:CE:5D:9F:2D:45:74:EF:90:6A:1B:1A:07:0C:7C:E4:1F:B0:D7:5D
Certificate issuer:       /CN=4331C75604BDCB26E64B954974D729F616D10D84
Certificate serial:       50F57556A3EF650E5F891A62F12C40A03BECF8B3
Authority key identifier: 43:31:C7:56:04:BD:CB:26:E6:4B:95:49:74:D7:29:F6:16:D1:0D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4331C75604BDCB26E64B954974D729F616D10D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/3136382e3139372e35322e302f32322d3332203d3e20323632383830.roa
Signing time:             Mon 29 Jan 2024 19:36:29 +0000
ROA not before:           Mon 29 Jan 2024 19:31:29 +0000
ROA not after:            Mon 27 Jan 2025 19:36:29 +0000
asID:                     262880
IP address blocks:        168.197.52.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f5:75:56:a3:ef:65:0e:5f:89:1a:62:f1:2c:40:a0:3b:ec:f8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4331C75604BDCB26E64B954974D729F616D10D84
        Validity
            Not Before: Jan 29 19:31:29 2024 GMT
            Not After : Jan 27 19:36:29 2025 GMT
        Subject: CN=80CE5D9F2D4574EF906A1B1A070C7CE41FB0D75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:ce:e8:62:f9:dc:ee:5b:fe:c2:50:bc:ff:
                    37:cc:3c:4d:5a:94:55:e6:ef:54:1c:23:c1:09:d8:
                    c4:0a:41:15:e8:67:f2:fb:9e:a0:2a:64:87:d6:9f:
                    3f:d6:9c:0c:4c:ba:69:c9:4a:7f:dc:b0:fa:04:c3:
                    19:a9:0e:c4:92:5d:d3:1c:36:56:f4:5e:e8:2c:e2:
                    2e:c0:73:cb:6b:d6:47:e8:88:2c:20:f9:74:8b:51:
                    da:d2:71:ba:60:94:6b:69:28:01:58:3d:e2:55:88:
                    3d:5e:b9:37:3c:53:0b:e9:b4:18:7a:93:08:0a:c4:
                    b8:55:19:2f:4c:4a:36:9c:4e:ae:18:3b:42:a8:ca:
                    b7:7e:4a:db:d2:ed:7f:a7:7f:46:11:94:8e:67:20:
                    f3:52:52:ca:b4:43:7f:07:74:cf:b7:bd:fa:9c:03:
                    e3:85:f0:62:88:c1:13:4f:a6:d2:bc:6f:b1:0a:a4:
                    56:bf:24:57:32:51:86:05:de:89:57:9b:1d:7d:a9:
                    97:f7:dc:ed:36:48:a4:17:13:2b:e8:fe:1f:30:76:
                    f2:6d:fb:41:76:26:49:74:25:f0:51:69:2a:34:06:
                    e5:f9:00:e5:e2:92:54:20:13:6a:71:4b:31:6e:ef:
                    8b:de:38:fd:9d:1a:ff:68:d1:41:49:8c:1c:87:84:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CE:5D:9F:2D:45:74:EF:90:6A:1B:1A:07:0C:7C:E4:1F:B0:D7:5D
            X509v3 Authority Key Identifier:
                keyid:43:31:C7:56:04:BD:CB:26:E6:4B:95:49:74:D7:29:F6:16:D1:0D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/4331C75604BDCB26E64B954974D729F616D10D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4331C75604BDCB26E64B954974D729F616D10D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/3136382e3139372e35322e302f32322d3332203d3e20323632383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:88:b1:cc:00:18:56:3d:d4:51:8c:d0:f6:6b:f4:85:af:
         e9:98:b3:aa:c1:cb:ef:d7:59:0e:26:6c:fd:25:82:a9:c8:c7:
         86:c2:4b:66:e8:69:f5:c0:e9:81:43:f2:8e:51:19:0a:6f:87:
         25:de:80:d0:6b:e3:4c:25:72:01:d1:e8:04:1f:28:9d:08:09:
         66:59:48:4d:b2:9b:40:54:02:38:3e:0b:45:b2:87:52:21:bd:
         1e:b1:6c:f7:58:bb:4d:ef:3d:4e:58:a3:72:10:b0:77:39:d2:
         48:d8:6e:f0:c4:b1:3f:a4:b4:39:db:b6:a5:05:63:ef:d8:db:
         73:f5:0a:f7:47:a1:33:c8:98:44:6f:37:dd:4b:30:8d:17:7a:
         c6:82:f8:da:a6:81:6c:9a:80:fd:37:05:bd:b3:20:6c:54:7f:
         04:f9:e8:44:f0:65:21:ff:9f:c8:53:33:e4:b3:4a:d8:f6:14:
         fb:5c:55:05:21:d4:88:93:22:38:7f:c8:e9:70:a1:a2:ae:d1:
         a8:16:78:2e:21:7c:9e:02:52:e2:4a:c7:0f:ab:b1:64:a4:3a:
         0e:76:f3:6f:98:10:13:04:66:36:82:c3:b4:bf:b6:17:74:8e:
         61:e1:9f:e5:54:a7:41:b1:5f:a2:12:ed:d3:67:d5:55:2c:64:
         14:4e:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org