Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3332203d3e203532383938.roa
File:                     3136382e3232372e3135362e302f32322d3332203d3e203532383938.roa (raw, json)
Hash identifier:          XUds1+aalLEt46qm99oC+eJglx1ifxVUlcTkO3LpubE=
Subject key identifier:   8C:0B:C3:3F:27:EF:BB:DB:1E:7D:A8:0F:B9:65:1A:B4:DE:53:C7:ED
Certificate issuer:       /CN=5685F2E6C66A6D819815D1D86FC270B4F36579E9
Certificate serial:       4E822E548119BF3778E4390BA84A1A9167CDE83E
Authority key identifier: 56:85:F2:E6:C6:6A:6D:81:98:15:D1:D8:6F:C2:70:B4:F3:65:79:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3332203d3e203532383938.roa
Signing time:             Mon 10 Apr 2023 22:23:11 +0000
ROA not before:           Mon 10 Apr 2023 22:18:11 +0000
ROA not after:            Mon 08 Apr 2024 22:23:11 +0000
asID:                     52898
IP address blocks:        168.227.156.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:82:2e:54:81:19:bf:37:78:e4:39:0b:a8:4a:1a:91:67:cd:e8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5685F2E6C66A6D819815D1D86FC270B4F36579E9
        Validity
            Not Before: Apr 10 22:18:11 2023 GMT
            Not After : Apr  8 22:23:11 2024 GMT
        Subject: CN=8C0BC33F27EFBBDB1E7DA80FB9651AB4DE53C7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:1f:b5:e6:98:a6:20:1c:c1:42:24:ff:0f:
                    ef:d8:ce:40:ca:29:b1:bc:75:51:03:33:13:05:07:
                    b7:04:8e:73:18:a2:5f:f0:ad:27:ca:78:be:c8:43:
                    4c:2a:ee:8d:53:22:ef:c7:64:b3:9c:0a:5e:f7:14:
                    51:dc:a8:36:94:cf:7a:1d:a9:ab:78:d8:fd:f7:34:
                    51:80:38:b8:67:53:f9:e7:54:6e:e8:60:e1:9e:40:
                    9b:13:13:5a:fd:26:63:08:11:91:00:65:ae:79:25:
                    89:6d:a3:ec:61:7e:ce:dd:bc:be:da:a6:43:0d:fa:
                    ca:15:0b:24:44:b4:a1:df:bd:3d:dc:74:c8:8a:b2:
                    1c:d2:70:08:a2:8e:0e:ab:ca:ea:36:1d:25:cd:af:
                    f8:3b:90:5b:91:41:40:dc:d1:f2:a3:13:9b:41:13:
                    2c:2d:78:34:26:61:04:2a:70:1a:63:d6:38:df:bc:
                    fb:7a:70:43:e7:80:32:11:37:ed:fc:92:dc:5e:28:
                    42:d7:9d:5b:a3:87:72:7a:37:4b:27:7d:c0:22:04:
                    11:61:37:92:52:d5:0b:23:ef:61:f2:8f:16:3c:e5:
                    49:b1:c5:69:a6:95:45:2b:9a:58:31:65:0c:32:2c:
                    5d:62:af:0e:74:46:1d:3f:6a:1b:4a:49:43:27:e4:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0B:C3:3F:27:EF:BB:DB:1E:7D:A8:0F:B9:65:1A:B4:DE:53:C7:ED
            X509v3 Authority Key Identifier:
                keyid:56:85:F2:E6:C6:6A:6D:81:98:15:D1:D8:6F:C2:70:B4:F3:65:79:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3332203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:2a:f7:18:9c:06:27:ca:4a:87:6b:61:8d:fb:ff:4c:bd:c1:
         dc:c8:7b:a4:a8:c7:80:e6:90:83:87:37:b4:08:24:f0:ff:55:
         50:03:c0:f3:34:eb:60:43:ad:10:99:bf:19:56:92:00:48:00:
         2e:58:77:06:74:d5:7a:bd:6b:46:1a:f1:7c:62:12:da:2c:6b:
         4f:6b:9c:46:02:fc:99:0c:b6:a8:72:13:ea:8f:4b:57:76:48:
         fa:e6:f4:84:dd:9d:55:39:67:0d:16:31:eb:93:c0:67:8f:4f:
         4e:4f:f1:44:12:c0:2f:fb:6d:99:a3:d7:42:35:03:33:0a:84:
         ab:8f:44:8d:bd:80:b4:e6:34:d0:5c:56:a1:ae:90:49:bc:7a:
         b2:ed:5d:d5:87:74:53:1c:92:6d:6e:29:c3:9e:65:15:d7:7e:
         15:56:b8:f4:96:04:8e:bc:7f:db:84:22:c2:13:52:3a:f2:f0:
         d0:fe:b9:8d:9f:e4:34:57:74:38:0c:ef:8a:7e:67:40:06:ef:
         fe:93:92:dd:79:47:80:8e:a9:0f:15:44:71:fa:c3:57:3b:f6:
         ed:77:3d:2e:48:c0:3d:aa:e7:62:de:a6:9a:5f:b7:49:2e:eb:
         55:2a:61:6b:b1:de:46:c3:5b:f9:aa:6a:93:24:f7:00:ab:65:
         86:ed:50:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org