Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa
File:                     3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa (raw, json)
Hash identifier:          V9gA84P8A0ORNZfkx+ClzoBFBzrG1QlVPCwLM2sAVn4=
Subject key identifier:   E2:2A:02:2D:BE:DC:09:40:3A:1E:EC:D6:11:E0:FE:5B:DA:CB:91:01
Certificate issuer:       /CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
Certificate serial:       133465230EF0A4C6828554DD40FC46314D994A62
Authority key identifier: 13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa
Signing time:             Tue 02 Apr 2024 14:40:53 +0000
ROA not before:           Tue 02 Apr 2024 14:35:53 +0000
ROA not after:            Tue 01 Apr 2025 14:40:53 +0000
asID:                     264936
IP address blocks:        168.232.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:34:65:23:0e:f0:a4:c6:82:85:54:dd:40:fc:46:31:4d:99:4a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
        Validity
            Not Before: Apr  2 14:35:53 2024 GMT
            Not After : Apr  1 14:40:53 2025 GMT
        Subject: CN=E22A022DBEDC09403A1EECD611E0FE5BDACB9101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:36:59:35:b5:92:29:b7:02:45:9e:80:39:b0:
                    ff:40:b1:21:08:bf:f5:35:5b:a0:5f:22:4a:89:bb:
                    08:df:5b:08:85:b3:55:57:8a:40:ae:b2:0f:83:65:
                    ae:d6:46:53:ad:fc:50:7d:29:21:cc:b2:a6:2f:cb:
                    f4:08:0c:b0:83:a7:7b:c2:73:54:08:cd:9c:a3:fd:
                    34:b4:f8:38:ba:40:dd:a6:db:b0:d8:5f:e0:59:eb:
                    77:1d:ad:08:82:e7:47:23:09:14:b2:af:e9:8d:e8:
                    2e:9f:dd:bb:10:d4:52:b1:24:f3:15:5e:2a:f0:8e:
                    23:f2:2b:b6:ef:3b:cd:2b:33:06:90:09:4f:e1:93:
                    9f:4e:a1:c4:6e:ae:db:bb:c1:b0:a0:f4:19:fe:64:
                    16:20:7d:52:5d:a8:70:1c:5a:09:42:27:6d:13:71:
                    08:50:4e:12:ac:f4:23:51:ff:d9:a9:8f:e1:09:14:
                    0f:32:32:32:95:c3:c0:35:70:53:21:0f:0b:e0:40:
                    8e:0f:93:c6:43:38:45:c8:5c:b9:de:32:cb:63:5b:
                    ea:ca:61:97:7f:ab:91:24:95:02:1d:1a:2c:2e:d3:
                    aa:94:df:a5:f8:c1:96:87:e6:93:31:18:bf:18:61:
                    99:40:41:a9:8f:2e:54:57:1c:13:51:5f:d1:65:e8:
                    bf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2A:02:2D:BE:DC:09:40:3A:1E:EC:D6:11:E0:FE:5B:DA:CB:91:01
            X509v3 Authority Key Identifier:
                keyid:13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:14:52:72:9b:bf:b0:fb:88:44:36:a1:87:96:17:80:a7:55:
         e0:b3:19:13:49:3a:81:67:00:5f:1d:d1:f2:9d:15:f0:74:20:
         f6:33:5a:11:04:25:4b:c3:72:27:95:f3:9f:09:a6:aa:29:67:
         55:80:c7:c7:3f:76:ad:4b:2f:9e:62:69:d3:14:b6:38:95:de:
         2e:e9:f4:78:30:2f:82:87:af:af:e4:96:0b:19:69:b3:3b:bb:
         aa:2a:b0:62:91:58:80:85:44:0e:c0:1b:1f:11:e2:27:51:6d:
         25:e4:bc:64:5a:42:a1:00:dd:a4:c7:6a:91:63:7d:f0:08:22:
         16:0d:36:8e:20:9e:cf:c1:e3:98:ea:50:70:5c:58:3b:fe:f0:
         54:88:13:b9:7e:11:42:cd:74:b4:54:29:d1:c2:65:a4:57:a5:
         54:f2:02:a3:d1:4c:93:6c:84:24:a8:14:b4:d7:6b:71:24:2a:
         1f:e0:ff:0c:57:a3:b3:2b:78:0c:42:5b:f3:26:6d:55:24:8d:
         f8:5b:c2:c8:0d:40:05:3e:9d:d1:73:70:13:fb:29:d4:15:e4:
         6d:41:4f:f7:4d:90:cb:6d:12:95:e0:fe:41:62:bf:07:1c:d3:
         da:a1:c6:cd:67:cb:43:65:9e:93:41:30:74:7e:ca:e3:f9:0a:
         5d:68:9f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org