Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32342d3234203d3e20323634393135.roa
File:                     3136382e3232382e3232302e302f32342d3234203d3e20323634393135.roa (raw, json)
Hash identifier:          Kiviy4fqtS1KEKlmwV5WRpB3EdHkeVZCSDo51MbOuQc=
Subject key identifier:   71:E7:5F:2A:11:E7:1E:14:0C:CD:ED:B7:E9:63:81:C4:EC:BD:57:B8
Certificate issuer:       /CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
Certificate serial:       4901E99439613FEC65BD34E4E54A1F0A6C4AF54E
Authority key identifier: 41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32342d3234203d3e20323634393135.roa
Signing time:             Tue 13 Feb 2024 15:55:29 +0000
ROA not before:           Tue 13 Feb 2024 15:50:29 +0000
ROA not after:            Tue 11 Feb 2025 15:55:29 +0000
asID:                     264915
IP address blocks:        168.228.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:01:e9:94:39:61:3f:ec:65:bd:34:e4:e5:4a:1f:0a:6c:4a:f5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
        Validity
            Not Before: Feb 13 15:50:29 2024 GMT
            Not After : Feb 11 15:55:29 2025 GMT
        Subject: CN=71E75F2A11E71E140CCDEDB7E96381C4ECBD57B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:5e:d7:8f:a8:0b:96:14:16:bf:b0:ed:79:
                    46:1e:0c:a5:7b:3c:39:43:95:76:9f:51:be:5d:b7:
                    b5:87:8c:c1:03:f4:94:97:5f:3c:9b:5b:7c:82:e1:
                    20:5f:ba:f3:fa:3e:56:4c:dc:62:fb:20:80:14:11:
                    61:22:59:a9:42:f0:f1:1b:79:9e:bf:46:6f:ba:39:
                    d6:5d:7c:b4:16:12:e1:51:3b:51:ea:c3:f3:40:62:
                    ad:fe:22:74:29:55:56:4e:35:06:71:a5:24:8b:58:
                    2c:74:af:3e:6d:a0:82:26:9c:3d:93:2b:d2:80:f7:
                    ba:f2:57:53:58:59:e3:38:21:4c:8a:2e:b2:0e:d1:
                    5b:bb:25:94:99:ee:be:d9:71:7b:a5:59:40:b6:66:
                    70:de:9e:68:45:d5:a8:31:c2:a1:ba:b9:3d:a9:8b:
                    d8:37:0c:df:63:7c:7f:91:8a:b2:b9:d3:51:fa:32:
                    ee:8a:f1:7b:0a:b9:7d:34:07:26:9e:6b:14:c1:6c:
                    88:d8:04:2d:4b:d6:52:8c:9e:f9:f9:ea:8a:39:72:
                    a3:98:9a:ae:6a:b0:05:4b:32:ff:b8:f2:8a:7b:d1:
                    e9:b9:be:84:1a:a3:fe:64:71:e3:91:bd:ce:58:3f:
                    87:83:0c:ce:9b:c1:a4:95:63:59:7b:ce:a9:aa:47:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E7:5F:2A:11:E7:1E:14:0C:CD:ED:B7:E9:63:81:C4:EC:BD:57:B8
            X509v3 Authority Key Identifier:
                keyid:41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32342d3234203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:36:d0:10:72:cc:1a:38:9e:27:e3:95:d8:7a:f6:92:7d:ed:
         da:94:e4:a7:a7:f9:9b:78:4c:d5:ea:a1:ee:04:13:80:87:06:
         60:55:bd:3d:ef:c8:fe:52:cb:bc:d1:0d:a0:0d:4d:70:1c:8c:
         fa:14:b5:41:23:9e:85:3e:ad:91:cf:2a:c8:5b:2d:bd:50:36:
         1e:b0:bf:31:e2:df:34:cb:b2:fa:a5:22:e3:1f:78:29:0d:3b:
         82:e2:18:15:16:b2:d9:d6:23:8e:f9:be:f6:7c:8a:6f:a7:b5:
         84:d0:83:7b:c3:c7:8f:38:08:90:12:7e:cb:bc:1b:db:2d:90:
         7e:75:e0:df:f2:57:b2:22:90:b5:24:15:04:96:c2:58:38:cc:
         5e:18:e0:1d:b5:e1:bc:c6:41:84:07:82:1d:15:21:88:b9:dd:
         72:6e:82:93:85:d0:02:33:b2:a0:45:81:16:15:3a:10:3b:82:
         d7:37:5a:53:2f:ea:91:a8:aa:1e:a7:50:ba:e4:f9:bd:92:77:
         89:f2:e3:5f:a9:5a:c0:c0:9d:77:7d:df:94:6e:62:1f:63:a6:
         16:a3:13:2c:0d:46:f7:9f:23:12:06:f8:71:d3:bd:41:ba:96:
         18:d6:56:40:b5:56:b4:76:7f:4a:90:a8:a9:b5:f6:ea:e6:e2:
         a0:ca:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org