Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232382e3132382e302f32322d3234203d3e20323632393932.roa
File:                     3136382e3232382e3132382e302f32322d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          IOkw+nkh4yLMTnT4VWJnfiUXIxdLLLFgWT0x+bWNF8A=
Subject key identifier:   2A:D0:0D:9F:DB:43:B9:6F:46:15:F0:2F:63:AB:9F:9C:73:56:5A:B9
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       26E89142C15821D8BB21B731C6BB823B2CC70657
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232382e3132382e302f32322d3234203d3e20323632393932.roa
Signing time:             Wed 01 Mar 2023 13:40:30 +0000
ROA not before:           Wed 01 Mar 2023 13:35:30 +0000
ROA not after:            Wed 28 Feb 2024 13:40:30 +0000
asID:                     262992
IP address blocks:        168.228.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e8:91:42:c1:58:21:d8:bb:21:b7:31:c6:bb:82:3b:2c:c7:06:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Mar  1 13:35:30 2023 GMT
            Not After : Feb 28 13:40:30 2024 GMT
        Subject: CN=2AD00D9FDB43B96F4615F02F63AB9F9C73565AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:80:fd:c7:14:79:02:84:32:16:c9:13:39:29:
                    91:00:d2:8f:44:53:ad:50:75:d2:f3:cc:66:4b:88:
                    c9:38:b8:75:20:f9:a5:72:fa:c3:02:11:e0:0d:51:
                    c2:34:f2:bb:b6:8c:ba:03:10:8d:27:bd:74:b0:f2:
                    db:02:28:be:3f:68:16:b1:c7:0d:a1:84:b1:f7:18:
                    08:5b:bd:02:7a:a3:b6:78:07:93:f5:21:1f:99:8f:
                    17:17:03:82:4e:10:0b:2c:f8:fb:04:59:bb:97:3d:
                    36:84:f2:42:87:95:68:e2:78:4f:25:94:67:a5:d6:
                    69:cb:6b:8f:f4:52:1a:11:35:e1:8e:d7:6e:71:fa:
                    1a:a1:61:51:15:1b:d4:62:6c:5f:58:9c:16:a2:75:
                    21:01:2a:10:68:d0:22:85:31:47:cb:af:41:28:a6:
                    4c:31:5d:72:63:d6:ad:c9:c2:09:9f:a6:95:3a:5b:
                    6e:21:5c:15:a2:4d:f5:0f:6e:4d:ad:af:eb:8e:c8:
                    2b:d7:56:47:fb:3a:95:a4:7f:25:24:b7:5f:4f:bc:
                    80:d8:38:85:2c:10:6b:57:9a:7d:88:28:3d:f4:17:
                    3f:96:e9:9c:24:ae:f0:b3:bc:42:c7:af:2c:c6:9b:
                    65:4f:e2:94:29:69:b7:6a:ce:91:8e:2e:04:ed:b4:
                    07:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D0:0D:9F:DB:43:B9:6F:46:15:F0:2F:63:AB:9F:9C:73:56:5A:B9
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232382e3132382e302f32322d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:4c:48:a3:1c:46:9e:87:5f:eb:ed:07:14:8f:4d:c1:62:2e:
         ca:00:01:3b:bc:0d:b1:b0:f7:39:f4:4c:31:a3:16:27:89:a9:
         be:ff:c0:28:91:4c:96:44:69:3f:2e:3a:92:7f:0a:26:23:cd:
         80:b3:fb:15:ca:37:35:db:bc:31:fc:22:3c:bb:ec:96:52:bd:
         52:dc:42:67:4e:bd:c5:4a:4c:24:9b:83:61:91:ae:76:e9:64:
         44:9e:2e:47:6e:4b:57:0d:ed:16:b8:cc:38:ea:75:59:e1:84:
         8e:0f:39:78:92:7e:f9:9c:4f:eb:ce:55:d8:7c:d1:65:76:c5:
         4a:20:88:36:1f:67:3b:e8:ee:91:5b:f6:bb:8d:a9:5f:f5:fb:
         e3:c7:e4:f0:b5:cc:d6:36:b0:e6:8b:f3:c4:ee:b2:29:4f:a6:
         54:3b:24:23:1e:74:27:91:6a:ef:bb:2a:95:cc:90:17:ed:9d:
         37:2f:ab:e3:dd:fc:a9:b6:e8:cf:d7:ac:8b:2c:c1:5a:e0:f1:
         54:52:e7:31:c0:c1:a4:15:e5:8c:f3:c4:94:f5:c4:c3:b2:45:
         c2:8a:2e:e9:e7:77:5b:22:40:11:7c:d6:d3:32:ba:54:8c:49:
         53:e2:f1:d5:1d:5f:18:84:91:2d:5f:06:dc:a2:91:ff:c5:ef:
         d3:8e:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org