Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/3136382e3232382e33332e302f32342d3234203d3e20323730393833.roa
File:                     3136382e3232382e33332e302f32342d3234203d3e20323730393833.roa (raw, json)
Hash identifier:          yf2a/1tV/JlcCwQBbe4mBsHyGdmldocwJF+OEVajUFY=
Subject key identifier:   88:C9:B4:C3:77:33:97:37:AB:7A:BC:B0:27:C3:A4:93:78:4D:9B:B9
Certificate issuer:       /CN=73A759420E60B79FBFB48037B5A830EF409EA873
Certificate serial:       3A0ECF9208DFB80FD90AB36A0C1D2D06102210D1
Authority key identifier: 73:A7:59:42:0E:60:B7:9F:BF:B4:80:37:B5:A8:30:EF:40:9E:A8:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73A759420E60B79FBFB48037B5A830EF409EA873.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/3136382e3232382e33332e302f32342d3234203d3e20323730393833.roa
Signing time:             Wed 24 Jan 2024 19:20:26 +0000
ROA not before:           Wed 24 Jan 2024 19:15:26 +0000
ROA not after:            Wed 22 Jan 2025 19:20:26 +0000
asID:                     270983
IP address blocks:        168.228.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0e:cf:92:08:df:b8:0f:d9:0a:b3:6a:0c:1d:2d:06:10:22:10:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A759420E60B79FBFB48037B5A830EF409EA873
        Validity
            Not Before: Jan 24 19:15:26 2024 GMT
            Not After : Jan 22 19:20:26 2025 GMT
        Subject: CN=88C9B4C377339737AB7ABCB027C3A493784D9BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:71:3b:26:e8:83:68:8a:d0:4b:48:bb:e7:
                    cb:e1:06:c1:36:22:a3:f2:1d:24:ad:83:e8:13:35:
                    64:45:c5:a6:19:7c:03:2a:a6:9e:9f:22:bf:e6:cf:
                    93:b5:98:6d:f8:9e:b3:88:69:bd:bd:f7:4c:ba:ea:
                    31:f6:d4:25:16:09:8a:f4:27:2a:5c:83:ac:e6:5f:
                    b5:6f:c6:79:a6:26:d8:7d:0e:e8:9d:e7:24:30:d2:
                    a5:2c:fb:cc:cc:f3:0c:86:fa:1c:8b:a8:f3:95:e8:
                    90:4c:33:da:ea:27:46:7a:04:af:44:69:73:2b:cb:
                    a4:d9:30:f0:b8:09:f3:77:42:9d:3a:0d:93:23:34:
                    8f:88:75:0c:b0:c1:51:83:a8:da:de:ea:14:6f:2f:
                    c9:98:65:86:40:38:7d:79:92:ee:70:25:71:84:86:
                    de:12:04:e8:9b:98:22:9b:d1:4b:63:5f:9c:7c:21:
                    b6:c5:34:79:f8:8b:20:f7:27:fb:84:2a:f9:c8:a5:
                    ca:5d:af:c7:8d:09:9a:4c:c6:36:49:60:30:65:7a:
                    ac:6d:07:3e:fc:e2:c9:ed:23:6a:79:53:4b:2b:c2:
                    2b:b5:62:08:fb:4f:70:0d:3c:63:cc:03:57:fe:15:
                    9c:5d:45:fb:da:16:d7:05:73:c5:7f:f4:40:fb:3a:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C9:B4:C3:77:33:97:37:AB:7A:BC:B0:27:C3:A4:93:78:4D:9B:B9
            X509v3 Authority Key Identifier:
                keyid:73:A7:59:42:0E:60:B7:9F:BF:B4:80:37:B5:A8:30:EF:40:9E:A8:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/73A759420E60B79FBFB48037B5A830EF409EA873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73A759420E60B79FBFB48037B5A830EF409EA873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/3136382e3232382e33332e302f32342d3234203d3e20323730393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:95:d5:50:80:db:dd:94:c7:92:06:44:f4:57:1c:23:54:c0:
         f3:27:67:7a:7c:86:2f:9e:76:6c:18:21:28:d4:32:f0:1d:18:
         cb:e1:6e:17:80:fb:e8:22:ef:f3:1f:1d:9f:87:76:f0:a8:07:
         f1:49:97:c1:c6:5a:77:57:0d:7c:85:58:0a:7e:fb:b8:e9:e1:
         00:ff:13:97:49:9a:eb:16:33:e9:76:95:b7:51:68:e0:86:7f:
         53:2c:e4:b1:d2:56:2b:be:49:81:c7:f5:8c:a8:66:49:45:ee:
         c8:53:8d:9b:c1:6e:16:ce:6d:02:1b:aa:22:48:83:14:d4:8e:
         05:0f:84:28:39:a3:e6:33:95:91:8e:12:92:42:14:a9:c8:4b:
         be:12:cb:86:68:29:00:f3:80:1b:fc:b1:b2:bd:08:d6:7e:3e:
         92:b1:19:37:84:85:5c:a0:ac:c6:1f:8b:70:61:37:3a:b4:56:
         a6:85:03:32:53:b7:24:54:80:d5:80:e7:40:d0:b2:bb:33:84:
         10:df:40:d5:a7:d8:e6:44:a2:ea:ab:75:c2:1e:a5:06:1b:11:
         e0:c9:c9:7f:7a:f0:9c:7c:d0:7f:42:2d:23:39:74:9b:34:79:
         6b:33:a7:f9:99:60:f8:18:a4:61:6d:28:4d:b5:e5:6c:47:ab:
         2e:63:1b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org