Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa
File:                     3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa (raw, json)
Hash identifier:          hhBS6+u6djcxfMvZqi76WsAlziZPoaJz7hNCR2L0cDs=
Subject key identifier:   00:27:07:A4:C8:55:43:10:B9:88:04:18:5F:DC:75:AF:A5:A5:7C:B9
Certificate issuer:       /CN=08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD
Certificate serial:       742FC2AA4D9D84069D7C00C9B5393DE72870D4BE
Authority key identifier: 08:C1:AA:05:5C:47:7D:F9:A2:16:4D:FC:71:4B:69:AE:9F:AD:4A:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa
Signing time:             Fri 23 Feb 2024 02:32:35 +0000
ROA not before:           Fri 23 Feb 2024 02:27:35 +0000
ROA not after:            Fri 21 Feb 2025 02:32:35 +0000
asID:                     265397
IP address blocks:        168.194.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2f:c2:aa:4d:9d:84:06:9d:7c:00:c9:b5:39:3d:e7:28:70:d4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD
        Validity
            Not Before: Feb 23 02:27:35 2024 GMT
            Not After : Feb 21 02:32:35 2025 GMT
        Subject: CN=002707A4C8554310B98804185FDC75AFA5A57CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6c:2f:20:a5:74:71:63:9e:12:4b:e1:59:a0:
                    ee:c3:b3:05:93:76:de:79:27:ee:58:2f:ac:af:c7:
                    f7:9d:fe:8b:ff:b0:dc:c8:41:3a:50:1c:12:f8:6f:
                    fe:81:f1:f4:f6:f3:30:b8:96:08:da:f3:bb:02:ef:
                    d5:1b:ff:0c:62:c2:90:1d:2c:38:f8:7c:25:b8:82:
                    91:fa:ed:d4:38:5c:e6:79:15:2d:b8:10:ca:f2:45:
                    2e:66:68:f1:f4:e8:1c:53:b2:b9:f0:ff:0d:88:87:
                    10:2a:e3:bc:22:e3:5c:e3:fe:19:61:a7:91:c5:54:
                    d5:b0:48:9b:99:af:c3:16:27:0a:d4:99:d0:56:f4:
                    3a:72:bc:31:e1:9b:0a:d1:fd:86:26:a2:05:65:91:
                    17:cb:bc:5e:79:91:f2:48:a3:7e:5d:7d:3a:0b:97:
                    29:7f:5a:64:53:a2:09:b1:27:cc:b4:52:ba:77:10:
                    7a:79:7d:2c:47:5f:10:b4:0f:0a:be:fa:58:6d:6f:
                    10:d2:ac:56:7f:42:38:f5:57:f1:0b:ee:83:81:90:
                    fe:0b:01:b7:36:f3:a2:87:1c:44:a7:69:66:2b:9f:
                    89:37:a4:8b:e8:63:aa:b7:f8:31:01:f2:f9:e4:c4:
                    51:18:77:13:1f:7b:8c:8e:d1:e3:c9:fc:4e:01:ae:
                    d7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:27:07:A4:C8:55:43:10:B9:88:04:18:5F:DC:75:AF:A5:A5:7C:B9
            X509v3 Authority Key Identifier:
                keyid:08:C1:AA:05:5C:47:7D:F9:A2:16:4D:FC:71:4B:69:AE:9F:AD:4A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:28:c2:55:3f:f5:49:43:75:49:8a:14:87:a3:98:99:cb:b8:
         0d:71:23:64:63:32:a9:00:6b:71:0d:5e:a3:9e:d5:4a:95:8b:
         02:ac:97:3d:11:e5:4f:3b:b4:3e:ec:48:98:a6:02:4f:6e:ec:
         54:8d:59:65:9b:c5:87:b4:79:1c:0f:5b:41:7f:3d:af:5f:a0:
         2e:b9:24:af:f7:1c:25:a3:fa:ba:9d:0d:e6:59:d7:01:23:89:
         28:0d:4e:49:a6:6c:92:7d:73:02:c9:66:2d:50:a8:06:aa:1a:
         48:01:71:f9:d0:1b:70:81:21:6b:74:eb:4c:98:14:75:ad:22:
         be:67:3b:c4:98:e2:64:d5:3c:a3:b6:74:d4:4f:4b:27:c1:11:
         9e:a4:53:d9:97:e1:fe:92:27:26:84:c5:f8:6d:81:ff:4d:8a:
         6c:a9:81:c9:1b:22:9b:b2:e9:00:10:86:52:9c:33:bd:17:6f:
         bc:fa:eb:04:d4:5c:e6:40:a2:cf:bc:ea:2f:9d:1d:04:35:a1:
         72:7a:8b:bb:ae:b4:0f:0b:fd:0e:5d:2b:e0:b4:ee:2e:68:c5:
         85:6c:a3:91:ad:07:46:91:0e:ef:4a:f5:a3:5b:b7:00:77:88:
         ba:1d:4c:3f:fb:6c:b3:1b:26:41:b8:64:d7:45:b0:fe:2e:72:
         7c:f3:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org