Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/3136382e3139342e3135322e302f32322d3234203d3e20323635343035.roa
File:                     3136382e3139342e3135322e302f32322d3234203d3e20323635343035.roa (raw, json)
Hash identifier:          I4QAFlUIWCpxjmM3abs4tzKOJLR9Xs3pLIVz1q93TYU=
Subject key identifier:   D2:C5:84:A8:73:82:77:F9:C3:6B:14:42:71:37:24:43:C9:54:99:77
Certificate issuer:       /CN=91BD56ECBC6C49278C61C353E8FF806FED55FD00
Certificate serial:       3B67CD49EACE14579B45F07CEB5384F6EF6D9AE0
Authority key identifier: 91:BD:56:EC:BC:6C:49:27:8C:61:C3:53:E8:FF:80:6F:ED:55:FD:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BD56ECBC6C49278C61C353E8FF806FED55FD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/3136382e3139342e3135322e302f32322d3234203d3e20323635343035.roa
Signing time:             Wed 12 Jul 2023 19:01:10 +0000
ROA not before:           Wed 12 Jul 2023 18:56:10 +0000
ROA not after:            Wed 10 Jul 2024 19:01:10 +0000
asID:                     265405
IP address blocks:        168.194.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:67:cd:49:ea:ce:14:57:9b:45:f0:7c:eb:53:84:f6:ef:6d:9a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BD56ECBC6C49278C61C353E8FF806FED55FD00
        Validity
            Not Before: Jul 12 18:56:10 2023 GMT
            Not After : Jul 10 19:01:10 2024 GMT
        Subject: CN=D2C584A8738277F9C36B144271372443C9549977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b6:35:6b:e4:8f:0c:1e:5f:62:86:e5:d5:98:
                    94:b5:7e:8c:bc:53:05:67:44:e4:9d:3e:68:f9:b9:
                    f4:e7:6c:38:2f:40:04:ba:bf:36:2b:0b:ee:c9:a2:
                    e8:73:0f:c5:dc:fa:ae:19:59:37:f4:6f:7d:15:6c:
                    4b:ee:01:b2:53:ad:3a:04:19:4f:88:7b:a5:e5:b3:
                    c3:48:cb:70:3a:e0:eb:71:13:91:d7:78:43:e2:27:
                    91:b0:04:15:64:6f:81:08:63:43:a9:d7:e9:5e:45:
                    df:8f:f8:ec:d1:c3:84:cc:34:9c:fd:86:a4:8b:6c:
                    3f:1f:77:4c:b1:ad:ea:f0:72:44:10:b6:00:4b:0c:
                    01:4f:3d:4e:c4:c4:07:74:81:47:a1:bf:14:dd:c6:
                    1a:78:4f:df:02:d9:68:6f:ab:78:9d:84:c1:6c:e2:
                    78:4c:c9:34:dc:04:e7:03:7d:af:c6:03:9d:00:e9:
                    33:6f:ac:da:f2:85:5e:62:33:57:1b:bf:3f:df:cb:
                    4c:4b:51:4c:92:60:c9:69:72:f5:25:6d:18:f7:f6:
                    13:6e:49:f5:2a:be:75:9a:9b:80:b6:7b:24:3b:cc:
                    56:1d:94:c9:c1:a3:21:7a:91:42:13:df:24:e0:f4:
                    78:11:e1:17:6d:f3:b9:9f:d4:6e:49:33:da:04:0f:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C5:84:A8:73:82:77:F9:C3:6B:14:42:71:37:24:43:C9:54:99:77
            X509v3 Authority Key Identifier:
                keyid:91:BD:56:EC:BC:6C:49:27:8C:61:C3:53:E8:FF:80:6F:ED:55:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/91BD56ECBC6C49278C61C353E8FF806FED55FD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BD56ECBC6C49278C61C353E8FF806FED55FD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/3136382e3139342e3135322e302f32322d3234203d3e20323635343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:4c:43:71:bf:b3:b9:92:dc:17:89:f9:02:7a:e1:f8:4d:
         57:5f:ab:fc:f8:9d:0d:8d:7f:fc:b5:28:1c:04:7a:53:a5:91:
         88:3b:c3:8d:62:e8:dd:cc:e1:76:9f:b9:0e:32:64:d3:ee:4a:
         89:5d:e9:b1:84:e5:85:0b:c6:60:4f:17:0a:df:25:0a:ab:30:
         ba:bc:57:db:58:22:85:29:e6:b6:80:5d:a8:6d:91:6c:3e:a0:
         c9:a2:bc:7b:28:f6:ce:82:db:ea:5a:3e:23:ce:3a:ff:14:0d:
         08:72:f2:fb:6c:a2:10:03:c7:46:8b:09:24:32:64:e1:2f:bf:
         a1:40:e9:45:49:6c:6d:87:30:f9:ca:01:bc:58:ff:fb:8d:52:
         75:52:74:b6:35:b1:3e:82:79:11:bb:fa:20:02:93:f6:c6:9f:
         10:34:61:37:75:d6:f0:e3:f5:c8:f7:8a:6a:4b:25:5c:11:11:
         d4:0d:42:75:f0:77:f9:d2:f5:7e:b5:17:d7:ea:e8:93:9e:62:
         23:b8:60:9f:b6:f1:56:61:86:3b:1c:0f:f0:6d:8d:b3:b4:a6:
         8c:a1:6d:d2:2e:d8:90:c9:58:f7:8f:52:08:ee:41:55:17:52:
         2f:8e:24:02:19:0e:15:94:bd:f1:15:26:ec:cf:9e:5c:33:43:
         4d:90:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org