Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130302e302f32322d3234203d3e203631363834.roa
File:                     3136382e3232382e3130302e302f32322d3234203d3e203631363834.roa (raw, json)
Hash identifier:          EfJHM3Z8jw3ISYpTbZU9Y2XSeu5qJ+420HBdLqjlHOk=
Subject key identifier:   2E:7A:BC:02:59:F9:32:7C:F8:54:7A:AB:DF:3B:BE:1F:06:F9:CF:A6
Certificate issuer:       /CN=A8B44EDE07D1AAC7130670203BFBDC45D609F8B9
Certificate serial:       22D7114DC6D4E3810A31C009AB156510B4F5EA03
Authority key identifier: A8:B4:4E:DE:07:D1:AA:C7:13:06:70:20:3B:FB:DC:45:D6:09:F8:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8B44EDE07D1AAC7130670203BFBDC45D609F8B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130302e302f32322d3234203d3e203631363834.roa
Signing time:             Sun 22 Oct 2023 14:51:33 +0000
ROA not before:           Sun 22 Oct 2023 14:46:33 +0000
ROA not after:            Sun 20 Oct 2024 14:51:33 +0000
asID:                     61684
IP address blocks:        168.228.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d7:11:4d:c6:d4:e3:81:0a:31:c0:09:ab:15:65:10:b4:f5:ea:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8B44EDE07D1AAC7130670203BFBDC45D609F8B9
        Validity
            Not Before: Oct 22 14:46:33 2023 GMT
            Not After : Oct 20 14:51:33 2024 GMT
        Subject: CN=2E7ABC0259F9327CF8547AABDF3BBE1F06F9CFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:84:1c:b8:e7:b9:34:33:65:68:63:85:5b:
                    47:b7:89:2e:d6:df:f9:ca:31:a8:10:3b:79:52:45:
                    6f:84:62:f9:d3:32:48:59:bc:1f:2b:28:17:6f:c9:
                    92:68:05:f2:bb:54:e1:28:53:7a:61:05:47:41:48:
                    fb:10:25:6f:be:15:ee:05:a9:8f:59:b7:a5:ab:5d:
                    fb:34:ab:73:db:44:9c:9a:48:8c:31:d7:b4:06:7b:
                    cf:79:67:c4:d1:50:08:b6:19:cc:0f:69:ad:50:fd:
                    d3:0f:3e:7d:a6:34:b3:87:0a:53:ba:12:7b:a2:39:
                    a4:f2:45:eb:33:25:6f:45:25:17:a8:61:18:bb:a2:
                    84:98:7a:a2:46:c9:bb:a6:1b:79:d2:0e:35:ed:ac:
                    9f:1a:f1:1c:27:f7:45:36:20:e1:8e:37:34:a9:87:
                    f3:76:06:2f:b9:94:89:f7:63:90:7d:8b:6a:17:1f:
                    3d:5c:5c:5f:01:bb:cf:09:28:68:ce:07:3f:17:49:
                    ca:0b:66:43:b5:cf:d1:98:46:45:92:0d:d2:c3:f0:
                    4d:18:80:07:60:29:41:9b:9b:d7:89:14:d4:26:0c:
                    b1:98:96:49:41:8b:8b:db:35:06:89:24:88:7d:37:
                    6d:79:36:08:eb:91:7c:94:7a:7c:99:ac:af:e5:72:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7A:BC:02:59:F9:32:7C:F8:54:7A:AB:DF:3B:BE:1F:06:F9:CF:A6
            X509v3 Authority Key Identifier:
                keyid:A8:B4:4E:DE:07:D1:AA:C7:13:06:70:20:3B:FB:DC:45:D6:09:F8:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/A8B44EDE07D1AAC7130670203BFBDC45D609F8B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8B44EDE07D1AAC7130670203BFBDC45D609F8B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130302e302f32322d3234203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:23:4e:7a:0b:55:ff:a1:24:f4:dd:1c:06:e9:72:16:e6:ae:
         8c:b3:94:ea:dc:56:05:ce:78:6b:d8:f4:66:70:9a:5b:a3:14:
         39:43:f0:54:73:9f:9b:f0:f4:c2:ff:70:06:fb:c2:8b:ef:7d:
         9c:86:26:9c:32:7c:f6:cc:0d:7a:47:f2:8e:80:e4:5e:87:89:
         24:06:13:51:af:1f:9e:a9:2c:e5:fa:aa:40:17:ea:a7:e0:1e:
         7c:d4:67:2e:80:73:98:ca:ae:8f:00:4d:49:82:ed:01:56:e7:
         10:7c:26:34:56:fb:c8:ae:3e:38:ff:35:b9:00:91:41:5b:8f:
         83:88:50:69:d5:aa:61:f2:95:10:d8:2b:1b:f1:49:4b:a6:90:
         92:71:db:be:50:38:5b:9c:f4:c2:83:cf:33:ac:23:07:e7:79:
         b4:0c:e5:3d:b0:e4:83:85:ca:3d:2b:48:b7:bc:d1:c8:d2:1a:
         47:99:d0:0d:cb:37:91:be:0c:40:72:3d:1b:98:90:d7:7b:55:
         3e:e0:57:ea:3d:cd:26:b0:a4:aa:d0:e4:39:89:3b:39:ab:bb:
         a8:6e:49:ab:95:b6:80:e9:2d:84:3c:21:0c:ad:5b:90:ba:51:
         ca:5a:56:45:c0:87:63:75:4a:42:ac:2c:25:d0:99:59:82:df:
         ea:cd:c9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org