Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
File:                     3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa (raw, json)
Hash identifier:          x1MMY+HlyDxYv04ID3Z08GIhZV7GxtBR1MCcCYRec0s=
Subject key identifier:   47:55:71:47:98:88:54:8F:5E:0F:7C:32:1D:A1:57:19:D6:15:16:6E
Certificate issuer:       /CN=ADE422DDDDCA4BE538D94666695572095FCEDC5B
Certificate serial:       52C32E4BE22417203C04235D778474828C38F116
Authority key identifier: AD:E4:22:DD:DD:CA:4B:E5:38:D9:46:66:69:55:72:09:5F:CE:DC:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADE422DDDDCA4BE538D94666695572095FCEDC5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
Signing time:             Thu 14 Mar 2024 13:07:11 +0000
ROA not before:           Thu 14 Mar 2024 13:02:11 +0000
ROA not after:            Thu 13 Mar 2025 13:07:11 +0000
asID:                     52898
IP address blocks:        168.227.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c3:2e:4b:e2:24:17:20:3c:04:23:5d:77:84:74:82:8c:38:f1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE422DDDDCA4BE538D94666695572095FCEDC5B
        Validity
            Not Before: Mar 14 13:02:11 2024 GMT
            Not After : Mar 13 13:07:11 2025 GMT
        Subject: CN=475571479888548F5E0F7C321DA15719D615166E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:39:49:08:3c:cd:bd:1a:03:c4:d8:55:28:
                    fc:eb:69:c5:db:13:01:a2:c4:61:33:e8:80:ba:65:
                    74:3a:16:85:2a:5d:c8:e1:1b:31:be:59:5e:44:c5:
                    a8:ea:16:cd:42:a7:32:8a:04:24:35:96:ac:7b:5c:
                    0e:97:1f:36:4a:c4:a3:d7:6c:d8:4b:de:94:ac:68:
                    f5:61:7e:54:32:bf:36:a7:15:e4:82:18:49:cd:52:
                    44:d3:70:69:af:e6:12:c7:1b:91:f1:9a:d0:3e:dc:
                    0c:d8:33:dd:f9:9e:ba:f9:4d:48:1c:b4:43:54:04:
                    1d:53:00:cb:de:5f:6b:86:a7:60:48:c1:8e:b9:be:
                    70:51:26:de:c6:8b:c5:dc:ef:df:16:00:a5:28:08:
                    5b:c2:bb:a8:c0:2c:ca:28:6f:65:2d:ff:3d:33:dd:
                    5a:be:89:e8:86:fd:29:bc:8f:1e:67:a3:e8:0c:cd:
                    57:da:e9:9b:21:e0:28:a9:0f:01:60:82:f3:a0:ab:
                    c4:4c:3a:62:42:e6:59:f7:91:63:c7:49:2b:f2:90:
                    16:41:97:a5:78:20:fd:1a:ad:42:52:a3:5e:9d:88:
                    e5:02:aa:83:ae:11:52:51:18:3b:94:13:fd:be:d1:
                    73:d8:40:4e:d4:27:54:d6:ac:59:d6:0d:a2:09:cc:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:55:71:47:98:88:54:8F:5E:0F:7C:32:1D:A1:57:19:D6:15:16:6E
            X509v3 Authority Key Identifier:
                keyid:AD:E4:22:DD:DD:CA:4B:E5:38:D9:46:66:69:55:72:09:5F:CE:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/ADE422DDDDCA4BE538D94666695572095FCEDC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADE422DDDDCA4BE538D94666695572095FCEDC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:cd:19:71:6c:10:6a:e8:1c:dc:cf:1d:42:b4:97:3e:ff:0a:
         55:7e:89:44:e7:ca:ad:f7:9b:8f:84:cb:a5:30:b6:cd:10:d8:
         81:cf:ef:35:cd:96:4b:19:22:5b:dd:20:9c:5a:8d:55:cb:1e:
         d1:0b:59:53:66:8e:59:5a:f7:51:9f:ec:a3:7b:0a:43:dc:9d:
         da:2f:dd:73:34:84:c0:5e:13:c8:84:41:8f:49:5a:65:75:f5:
         ec:5b:34:21:bb:f6:60:62:f0:ce:92:f1:51:57:8d:99:51:db:
         18:f5:ee:94:3d:c6:db:cd:28:16:3a:4a:9b:4c:e4:1a:8e:03:
         75:bd:d5:ae:10:71:cd:c8:e9:fd:29:68:ab:1b:15:da:72:2b:
         65:fb:b1:62:3e:c9:7c:14:df:80:aa:9b:fb:70:a6:c6:e4:6e:
         a9:dd:b7:1e:24:f5:1e:76:4c:8b:f5:6d:62:de:d0:92:9d:2d:
         73:a8:64:5c:77:30:59:91:84:02:65:4a:b1:6a:b8:c5:31:9e:
         d6:44:92:60:e0:97:5f:89:2f:4d:bd:81:01:36:59:87:f5:d9:
         cf:e6:23:ee:cf:69:e8:f3:9c:04:fb:6b:37:58:63:6f:37:4e:
         a1:b0:c5:80:00:f3:af:3b:27:bb:bf:e2:44:73:90:9b:aa:e9:
         4c:cc:c8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org