Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/3136382e3138312e342e302f32322d3234203d3e203238323133.roa
File:                     3136382e3138312e342e302f32322d3234203d3e203238323133.roa (raw, json)
Hash identifier:          zrAv/nORbPxYV0lRgAuPxs50ZB5qwI4EN2/9qkUzJfc=
Subject key identifier:   70:FF:60:BC:F2:A6:DE:36:EE:1F:1B:55:BC:70:BD:1C:27:97:74:EF
Certificate issuer:       /CN=B4DFF47C5B3118AFC71F35AA50D26565D807E777
Certificate serial:       33F8B27702A770C661BF539408AA40B38786D261
Authority key identifier: B4:DF:F4:7C:5B:31:18:AF:C7:1F:35:AA:50:D2:65:65:D8:07:E7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DFF47C5B3118AFC71F35AA50D26565D807E777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/3136382e3138312e342e302f32322d3234203d3e203238323133.roa
Signing time:             Wed 21 Feb 2024 19:00:01 +0000
ROA not before:           Wed 21 Feb 2024 18:55:01 +0000
ROA not after:            Fri 21 Feb 2025 19:00:01 +0000
asID:                     28213
IP address blocks:        168.181.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f8:b2:77:02:a7:70:c6:61:bf:53:94:08:aa:40:b3:87:86:d2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4DFF47C5B3118AFC71F35AA50D26565D807E777
        Validity
            Not Before: Feb 21 18:55:01 2024 GMT
            Not After : Feb 21 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:23:9b:17:94:7f:af:88:31:b9:bf:0a:9b:
                    18:d9:b1:e6:f2:55:45:9e:29:02:98:44:56:3a:d8:
                    de:f4:c6:16:fc:a5:81:04:08:86:d7:ef:94:e4:b5:
                    8b:02:5a:9b:38:c5:b2:11:0b:88:2e:00:74:2c:56:
                    ca:0e:70:55:24:6c:95:02:b1:c6:1f:20:c3:70:37:
                    97:e3:de:30:89:62:79:98:a6:11:ae:1a:00:08:ad:
                    45:d5:54:77:c1:4f:25:8d:04:ca:a9:e6:bb:94:ee:
                    14:b9:06:94:4e:41:80:0b:36:a8:77:7e:56:89:1c:
                    15:da:50:76:72:19:ea:3b:f5:df:49:dc:85:d1:ca:
                    e1:ca:14:5b:67:89:77:25:e1:79:90:e7:e3:5f:f8:
                    13:06:9d:89:6e:e7:31:f8:3d:f9:97:35:de:c0:41:
                    24:93:66:11:eb:0b:e1:49:3a:4d:01:3d:b7:f9:c2:
                    77:65:bc:82:ca:6f:5b:3a:96:ed:ad:20:f8:85:ee:
                    b0:3f:d4:5b:08:50:7d:ae:53:35:af:2b:f6:e7:e0:
                    97:10:bb:c1:da:12:95:92:79:cb:93:13:92:95:9d:
                    fb:39:32:b2:c5:90:ab:06:2d:09:21:a5:6c:f0:ba:
                    d6:a8:f4:3f:ad:d8:7d:57:99:1c:51:d7:7d:86:58:
                    8a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FF:60:BC:F2:A6:DE:36:EE:1F:1B:55:BC:70:BD:1C:27:97:74:EF
            X509v3 Authority Key Identifier:
                keyid:B4:DF:F4:7C:5B:31:18:AF:C7:1F:35:AA:50:D2:65:65:D8:07:E7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/B4DFF47C5B3118AFC71F35AA50D26565D807E777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DFF47C5B3118AFC71F35AA50D26565D807E777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/3136382e3138312e342e302f32322d3234203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:f1:63:1b:c6:82:90:49:44:4b:5d:06:9b:d3:b8:4a:58:46:
         b9:67:8e:51:9d:20:ff:1d:69:b9:ef:71:1a:38:7f:36:2f:4d:
         72:4a:c2:0d:34:47:dd:4b:12:22:73:03:94:c4:c4:f3:a8:46:
         00:00:64:35:cd:9c:62:b6:12:67:52:aa:90:54:c6:05:12:e2:
         cf:ac:c4:43:2d:f3:83:40:49:da:90:2c:35:c2:15:96:70:15:
         c7:a1:85:f5:da:35:a8:42:cd:5e:1e:ff:db:52:d6:83:7e:b4:
         89:1a:2d:9c:8f:2d:20:23:d7:81:5d:0d:61:0e:f1:69:b0:16:
         bd:3e:af:28:cc:a5:97:e8:5d:1f:a9:32:94:e9:7e:d4:ac:45:
         b3:6f:f8:d4:ec:59:ae:41:2a:b5:78:c4:ba:24:07:52:b2:26:
         1f:f2:50:b0:47:5e:03:f1:fb:42:05:a8:b3:08:f7:92:56:11:
         91:7e:ea:6c:4c:77:98:24:c2:ec:85:20:27:97:a0:78:05:f7:
         7f:e9:80:60:46:e7:f5:6b:b4:1b:27:0d:eb:8b:31:ef:7e:d9:
         67:28:db:17:23:cd:28:3a:38:cb:7a:a8:73:ba:10:85:d7:79:
         b3:16:9c:5a:15:30:20:67:1f:33:47:95:48:5e:f5:5a:dc:3d:
         0c:06:7d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org