Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3136382e3139352e3130302e302f32322d3332203d3e20323634323238.roa
File:                     3136382e3139352e3130302e302f32322d3332203d3e20323634323238.roa (raw, json)
Hash identifier:          NzXj2NzsaLvb/OmTklGiwI3T+q4nWK1tJs1pnphqGA8=
Subject key identifier:   59:E4:15:83:A3:3A:98:0F:89:2F:FB:16:F2:36:72:48:BE:E8:B7:8D
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       2EC0FACE0C82AB3DA0C7908E8E06AE883429683E
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3136382e3139352e3130302e302f32322d3332203d3e20323634323238.roa
Signing time:             Mon 27 Mar 2023 17:41:22 +0000
ROA not before:           Mon 27 Mar 2023 17:36:22 +0000
ROA not after:            Mon 25 Mar 2024 17:41:22 +0000
asID:                     264228
IP address blocks:        168.195.100.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c0:fa:ce:0c:82:ab:3d:a0:c7:90:8e:8e:06:ae:88:34:29:68:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Mar 27 17:36:22 2023 GMT
            Not After : Mar 25 17:41:22 2024 GMT
        Subject: CN=59E41583A33A980F892FFB16F2367248BEE8B78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:8e:73:13:ff:63:e9:b7:82:d2:44:75:ba:
                    3e:83:68:c2:b2:f3:c1:9c:20:8a:bd:3e:06:00:92:
                    38:c6:0f:f6:1c:88:5a:5d:ad:f5:2b:bb:eb:06:d8:
                    85:32:27:c0:5e:50:45:9a:30:fd:8a:da:77:09:bb:
                    fd:15:38:e5:c2:2d:23:b8:2f:55:16:82:35:dc:7d:
                    ec:8c:3a:37:2b:4d:37:01:40:63:44:e3:a1:9f:5d:
                    3f:ff:e3:4e:b5:2b:a3:b1:a2:65:3d:d6:ed:7c:4e:
                    64:81:b4:58:69:b4:0c:6a:06:dd:9a:27:27:88:a2:
                    c9:9b:9f:74:b0:e5:b4:3d:6a:46:65:32:05:9a:00:
                    bb:a0:98:31:ea:b0:70:ec:b2:da:c7:4a:b4:82:fd:
                    81:3a:46:33:47:79:1c:e1:c4:f9:1f:49:73:77:4d:
                    fc:d5:c2:7d:b2:38:0a:2e:92:13:d0:59:2e:ee:23:
                    01:9f:59:f9:72:b1:ff:01:6b:f7:6a:c2:37:b9:b8:
                    d7:cf:5d:f0:d3:17:75:53:9d:0b:da:e8:a0:c3:a9:
                    3d:a0:a4:00:55:60:1b:5a:ab:05:ca:90:a1:4a:a8:
                    16:15:f3:7b:28:f1:ce:9f:db:25:49:fb:72:03:be:
                    3f:93:6b:da:50:23:cb:63:74:eb:36:8d:b9:54:f6:
                    d5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E4:15:83:A3:3A:98:0F:89:2F:FB:16:F2:36:72:48:BE:E8:B7:8D
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3136382e3139352e3130302e302f32322d3332203d3e20323634323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:62:c6:2a:0f:3d:df:2f:35:b2:00:22:4d:03:32:77:07:
         73:d9:c9:a2:4f:2c:46:c6:e3:29:e4:27:e7:89:ab:ab:15:76:
         5b:fd:d1:44:30:ec:2f:ef:5c:15:4e:06:90:04:fe:c2:19:7e:
         30:46:e4:f6:89:76:7c:4d:11:cf:ed:53:48:ec:f3:6c:da:8e:
         e5:37:2c:c4:0f:fc:4d:8f:0c:cc:35:c2:e8:5c:b8:c2:2f:dd:
         85:31:fa:75:30:ee:05:33:8d:8c:32:5a:0f:4b:c6:31:bb:48:
         e9:79:44:5c:af:47:0f:90:8f:42:cf:23:06:a2:ac:26:08:db:
         3f:b6:e7:54:0b:f8:af:af:3a:e7:cc:4e:f2:cb:ed:c0:77:f6:
         51:e9:8e:7f:85:a1:58:18:8f:b8:6f:e4:19:5b:c9:da:b0:30:
         8e:71:42:87:d4:d3:75:38:a7:06:4f:50:ae:d7:ad:16:3c:3e:
         84:c0:6f:de:61:49:17:1d:42:1c:a0:2d:5d:6b:a2:ac:02:a9:
         1f:2b:69:38:74:a0:1c:1d:1e:01:64:de:a6:24:46:88:b0:a8:
         df:27:e4:3f:9c:b3:06:6b:8b:c5:5f:a4:70:bc:5d:9d:b1:55:
         22:2f:4e:76:47:93:eb:09:39:b5:fa:e3:e7:06:37:6c:0e:41:
         ff:4e:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org