Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
File:                     3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          tIguxDOsXMw7aTS3ub9NtvihYa5VUIx5fDpKEtlGUa4=
Subject key identifier:   A0:04:B6:7A:E1:86:3F:A2:A0:AC:FE:8C:EF:76:33:C4:01:56:68:AE
Certificate issuer:       /CN=6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E
Certificate serial:       3B86842C0DE000D3AE67328319FAB44676493E80
Authority key identifier: 69:40:B8:D2:97:29:F5:A3:FB:C8:C0:D0:7D:1E:A5:82:89:4E:3D:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
Signing time:             Wed 07 Feb 2024 14:11:07 +0000
ROA not before:           Wed 07 Feb 2024 14:06:07 +0000
ROA not after:            Wed 05 Feb 2025 14:11:07 +0000
asID:                     262391
IP address blocks:        168.181.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:86:84:2c:0d:e0:00:d3:ae:67:32:83:19:fa:b4:46:76:49:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E
        Validity
            Not Before: Feb  7 14:06:07 2024 GMT
            Not After : Feb  5 14:11:07 2025 GMT
        Subject: CN=A004B67AE1863FA2A0ACFE8CEF7633C4015668AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2b:fb:67:62:78:af:c1:3f:e2:a9:db:56:c1:
                    7b:e8:41:96:07:28:9f:91:13:30:c1:53:be:9e:a6:
                    64:11:f3:70:3e:64:39:42:c3:d4:af:4f:8d:5c:3c:
                    3c:a4:52:d3:96:13:24:e5:96:82:7f:50:1a:0a:ac:
                    cc:eb:89:e1:53:68:07:72:95:98:7b:5f:74:55:ca:
                    27:7d:78:6b:78:7d:e4:e3:7e:25:b3:44:7e:a9:ea:
                    6b:3e:94:12:23:47:a7:81:ba:03:d7:3e:8e:75:4f:
                    e4:6c:1d:64:15:92:87:3c:c0:4d:6a:81:75:14:a2:
                    ff:d0:dc:51:88:33:bf:39:45:a8:93:91:84:75:7d:
                    5c:c7:92:ed:ee:64:6b:e5:65:81:fe:8a:42:09:93:
                    6c:d4:c9:80:55:3b:31:7d:93:31:f4:55:17:34:fb:
                    e6:4c:82:49:0d:3f:59:85:48:a7:28:8d:46:64:fb:
                    46:3c:ed:af:32:8e:af:e2:9c:0e:d8:25:90:bb:d3:
                    03:52:9c:51:16:d4:c9:27:80:c9:a2:f1:50:e9:15:
                    12:88:3f:fb:6f:ec:c4:55:c1:47:f6:1f:ae:7f:88:
                    0c:7d:97:f9:82:d2:99:f2:cd:a0:1a:09:7b:dd:e6:
                    17:b0:6d:01:dc:c5:d8:7e:4e:89:9b:b5:84:05:6f:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:04:B6:7A:E1:86:3F:A2:A0:AC:FE:8C:EF:76:33:C4:01:56:68:AE
            X509v3 Authority Key Identifier:
                keyid:69:40:B8:D2:97:29:F5:A3:FB:C8:C0:D0:7D:1E:A5:82:89:4E:3D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:61:f2:f2:13:39:6e:da:1c:52:30:40:50:d6:fc:99:84:96:
         62:2c:45:3e:7b:9d:b3:aa:e7:a3:ca:82:1a:7b:7a:bd:b4:13:
         1f:55:5f:fd:31:e9:5d:b3:a9:a6:f7:01:05:fc:6d:4b:07:28:
         e0:3e:58:ed:3a:3d:e4:70:72:ce:7d:8d:aa:36:fa:26:80:cc:
         7b:49:41:3a:b3:e5:74:db:6b:63:da:15:39:be:84:a8:52:6a:
         a5:e2:4d:9d:74:c5:af:17:38:10:15:71:2d:79:25:3d:fe:35:
         c9:3d:42:4b:95:71:1f:3e:a5:62:9f:52:f4:6a:2e:04:ca:cc:
         c9:8d:6c:c9:c9:15:06:3c:9e:b6:65:b7:fb:d7:ea:60:67:ff:
         cb:95:74:ef:43:62:48:b3:34:a2:c3:82:16:88:ca:3c:91:37:
         59:7b:dd:17:4f:ba:f5:67:de:d0:f0:0b:73:8a:22:56:d0:05:
         67:57:55:79:3b:6c:64:5a:3c:36:c4:1d:b3:27:45:a5:0c:9e:
         ec:8d:b6:50:96:a4:f2:2c:58:f0:4f:c2:77:ab:7e:62:d2:7e:
         ef:85:4c:76:8d:e5:fd:dc:b7:62:c7:dc:85:83:82:4d:ed:b4:
         57:85:ee:17:c9:ce:59:72:20:9f:b3:a3:c0:1f:5f:60:57:46:
         58:18:86:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org