Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3230203d3e203238333630.roa
File:                     3138392e37362e3232342e302f32302d3230203d3e203238333630.roa (raw, json)
Hash identifier:          JLwoPyrxFo8sdU50UCL/Tfp13alfOtXdEZKW9odz0eg=
Subject key identifier:   D4:51:B8:FD:65:F4:EC:2D:B6:9B:29:64:D1:01:9F:6A:2F:9D:2F:78
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       5D71AE9924498A10353361AB3B48E3C938491533
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3230203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:34 +0000
ROA not before:           Thu 17 Nov 2022 17:58:34 +0000
ROA not after:            Thu 16 Nov 2023 18:03:34 +0000
asID:                     28360
IP address blocks:        189.76.224.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:71:ae:99:24:49:8a:10:35:33:61:ab:3b:48:e3:c9:38:49:15:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:34 2022 GMT
            Not After : Nov 16 18:03:34 2023 GMT
        Subject: CN=D451B8FD65F4EC2DB69B2964D1019F6A2F9D2F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:65:71:7e:03:2d:39:c2:e8:8c:94:5c:ee:
                    1f:12:ac:70:38:81:3d:ae:23:fa:8d:30:75:1f:0d:
                    87:c7:c2:42:05:31:c2:c9:0e:3e:a5:ec:e9:f9:6f:
                    a3:5e:05:e2:cf:57:e7:73:48:b7:37:5f:8f:2d:d0:
                    55:01:d5:96:0d:b4:6d:7a:97:07:66:61:27:23:49:
                    f0:f3:16:20:0a:48:6d:9f:5d:80:4b:84:a5:a4:82:
                    bc:62:90:56:d0:41:26:31:0f:27:cb:55:d2:1a:27:
                    f5:93:0a:1c:f3:82:66:be:1a:fa:cb:3d:50:c5:96:
                    99:d1:ec:80:b2:51:9f:2c:09:a3:94:a1:34:d3:dd:
                    82:b1:41:ae:d5:8f:1c:40:28:39:56:8d:6c:30:70:
                    7f:1d:4e:31:17:03:d9:a0:8b:68:ae:42:9a:01:c9:
                    a3:03:7a:2d:5e:ff:aa:16:76:03:d5:f0:66:2d:18:
                    af:e0:49:02:eb:b5:c6:69:1f:07:86:f5:ec:1d:b4:
                    93:7b:a3:d6:00:27:b9:6c:5d:2e:e5:fb:11:71:ac:
                    84:74:a0:5d:db:81:6b:17:1a:6c:1d:4b:88:4c:19:
                    c7:05:70:eb:ec:73:13:d9:39:19:d0:9c:31:01:c6:
                    1a:99:9a:89:84:6b:78:61:ab:8b:49:12:9f:23:ef:
                    6e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:51:B8:FD:65:F4:EC:2D:B6:9B:29:64:D1:01:9F:6A:2F:9D:2F:78
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3230203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:40:f5:3c:f4:ba:8c:19:cd:69:3f:c4:10:49:54:42:8a:4d:
         e3:f6:b0:5c:6f:eb:bc:88:d8:59:57:b3:52:1e:23:e8:53:9b:
         99:1e:9c:3e:ff:3f:5c:5f:8f:a0:70:7b:27:61:34:3c:de:12:
         fc:89:f4:ea:45:a1:cc:49:90:20:05:3d:0a:77:9b:b0:d4:2a:
         08:63:a3:3b:0d:be:9a:2e:de:fe:1a:20:c3:5d:bb:d6:7a:f1:
         82:53:30:c6:54:7b:81:04:f3:57:63:b5:b4:31:dd:1d:17:b1:
         76:e9:03:53:ba:2f:e2:e3:38:38:35:3b:a7:4d:b4:a7:96:13:
         d2:19:c3:83:e4:cd:2f:0a:bf:a0:0f:1f:35:87:cf:32:99:2a:
         69:39:d4:da:b5:cf:e6:c9:33:f5:72:30:ec:c9:b4:7a:2b:68:
         77:c2:60:26:20:2d:19:7d:e5:37:e4:df:d6:fd:2f:3e:c4:6b:
         2d:8d:dc:fb:5e:16:4a:83:dc:2d:96:55:6a:bc:da:d3:9f:18:
         e0:25:7f:7f:37:2e:6c:7a:a2:fd:f7:e8:60:d4:37:21:b2:a4:
         17:7d:d7:f4:6c:70:af:3f:c6:d5:f2:92:a7:e3:30:e3:fe:32:
         d2:e0:04:2f:86:6f:6d:4a:d2:6b:c6:10:fb:73:d0:5e:31:b2:
         27:e7:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org