Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232382e3132382e302f32322d3232203d3e20323632393932.roa
File:                     3136382e3232382e3132382e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          VkGlZWGnXFdLOT1nybj6qxR6LGHO+0oerIaBse5G2vg=
Subject key identifier:   70:B8:19:34:BC:1C:0C:93:DE:6B:4C:E8:18:E5:78:80:14:44:8A:EB
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       1AD64476ADBE64B894E2E49FDDAAEE81D7C22858
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232382e3132382e302f32322d3232203d3e20323632393932.roa
Signing time:             Mon 11 Dec 2023 03:49:37 +0000
ROA not before:           Mon 11 Dec 2023 03:44:37 +0000
ROA not after:            Mon 09 Dec 2024 03:49:37 +0000
asID:                     262992
IP address blocks:        168.228.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d6:44:76:ad:be:64:b8:94:e2:e4:9f:dd:aa:ee:81:d7:c2:28:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Dec 11 03:44:37 2023 GMT
            Not After : Dec  9 03:49:37 2024 GMT
        Subject: CN=70B81934BC1C0C93DE6B4CE818E5788014448AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7a:05:ab:4b:d2:ad:1e:ee:dd:36:30:97:b5:
                    94:e9:c3:e9:1d:f9:b2:f4:91:07:d0:16:b4:6a:80:
                    1b:6b:0a:3c:1b:e5:a5:58:d6:ed:03:fc:b4:95:0d:
                    73:fe:4c:e4:96:c1:b6:18:aa:33:f8:e2:53:d7:3e:
                    58:fe:69:3b:0b:bc:20:4d:39:84:b8:cd:e4:74:84:
                    01:c6:d1:9b:ae:bf:cb:84:41:ad:fa:da:f1:5c:f8:
                    fd:09:24:e1:c7:40:07:5e:99:9c:11:d3:f9:a4:cb:
                    77:6c:08:9a:b3:29:20:86:3d:47:9c:bf:5a:4c:89:
                    e8:d6:e1:55:0d:01:1c:bb:5f:0f:e8:5e:ca:95:2a:
                    99:e8:61:75:fb:23:e7:1a:0d:4d:9b:7e:a7:8a:12:
                    a1:d5:6d:19:03:31:49:c5:38:32:ff:ae:99:c5:f0:
                    d7:23:83:b1:52:1f:aa:26:c4:bd:77:bc:5f:89:a5:
                    d8:88:8f:61:82:8a:79:a7:da:18:bf:e7:e1:0d:57:
                    4f:02:d9:0e:67:c6:43:61:f4:7f:2d:d1:5f:01:24:
                    43:ea:7f:e2:1b:a3:d4:1d:29:ad:91:77:b0:7d:69:
                    69:21:57:2d:8e:0e:bf:c6:ae:20:c1:64:2a:43:79:
                    b3:73:80:95:c4:7b:78:0f:db:dc:97:e5:30:56:93:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B8:19:34:BC:1C:0C:93:DE:6B:4C:E8:18:E5:78:80:14:44:8A:EB
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232382e3132382e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:d7:73:b3:1d:a6:07:a4:5f:fd:0a:53:65:43:10:03:3c:91:
         f0:a8:6f:5e:ad:47:3c:ca:88:50:52:0e:6a:c7:73:e4:39:8a:
         9a:ec:70:dd:84:10:de:47:2e:5e:93:0f:69:75:ad:43:27:06:
         9e:01:ca:4e:76:35:69:a5:65:c2:3b:54:fb:9f:f6:4a:35:93:
         fe:59:68:21:81:26:e7:08:a1:1e:f2:91:3c:50:df:98:c1:47:
         c4:c5:7e:64:34:f2:f2:e6:f9:b7:4c:52:aa:83:cd:d1:3c:ff:
         fa:c7:dd:15:3d:0b:aa:13:8e:8c:e2:92:f6:9c:04:76:8d:d7:
         0a:42:15:46:d5:65:1d:a4:c7:ee:1c:66:b0:71:68:78:dd:1f:
         83:67:e2:e5:a9:6c:5a:5b:39:93:68:a5:9c:09:98:95:b8:40:
         d4:05:09:b1:4a:43:48:d9:8c:2d:04:ae:c6:51:a3:98:4d:2b:
         56:fe:e8:b4:e9:54:49:ca:f5:a5:8b:59:70:22:a8:cf:d7:d7:
         49:9f:59:24:40:58:53:0d:11:aa:a7:5f:dd:2c:e4:0e:78:e1:
         04:cf:a2:9e:fa:6b:46:d7:ea:be:78:45:85:2d:4d:20:a4:9e:
         09:f6:19:51:56:8e:d0:90:47:77:ec:fd:df:bb:f4:31:71:56:
         e0:84:a3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org