Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/0/3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa
File:                     3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa (raw, json)
Hash identifier:          KBCb/ugp/PfahLXidndlOzcXNTwsJ9nlEFqyk72jipY=
Subject key identifier:   45:04:A9:87:CF:CB:10:DB:14:32:EF:FB:F3:1D:2D:59:6C:49:72:9F
Certificate issuer:       /CN=44DA92DFB9EC07AC03BD03311A517C61A7556E8D
Certificate serial:       08D255A083749309C461A69A19BBAC6DA8CB5DDF
Authority key identifier: 44:DA:92:DF:B9:EC:07:AC:03:BD:03:31:1A:51:7C:61:A7:55:6E:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44DA92DFB9EC07AC03BD03311A517C61A7556E8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/0/3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa
Signing time:             Mon 20 Feb 2023 22:19:05 +0000
ROA not before:           Mon 20 Feb 2023 22:14:05 +0000
ROA not after:            Mon 19 Feb 2024 22:19:05 +0000
asID:                     265425
IP address blocks:        168.195.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d2:55:a0:83:74:93:09:c4:61:a6:9a:19:bb:ac:6d:a8:cb:5d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44DA92DFB9EC07AC03BD03311A517C61A7556E8D
        Validity
            Not Before: Feb 20 22:14:05 2023 GMT
            Not After : Feb 19 22:19:05 2024 GMT
        Subject: CN=4504A987CFCB10DB1432EFFBF31D2D596C49729F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:8a:f8:9b:5a:b8:77:e5:d6:57:91:3e:03:
                    e7:28:3d:35:74:05:ee:b0:33:11:08:34:66:04:a7:
                    55:db:fb:51:46:3e:53:74:d3:b0:58:11:6d:44:53:
                    e5:c7:69:ee:e2:a9:99:db:63:11:12:3b:36:33:f9:
                    23:c5:8b:5f:b0:b8:c8:30:e2:e4:73:6a:88:01:01:
                    2e:8f:ff:eb:7b:fc:86:35:d3:e7:a0:c8:4b:ef:85:
                    df:1b:2e:cd:c2:48:8c:84:9c:10:ad:ec:d7:53:bd:
                    1f:f7:a9:ce:47:a1:0e:bb:0f:72:fc:06:27:d6:64:
                    30:9f:75:d2:16:85:e0:d0:cc:2f:32:df:45:ea:d5:
                    91:5a:09:01:96:e4:45:5d:3d:a3:1d:ad:e8:74:cb:
                    9b:2f:5c:62:bf:8d:84:2c:f7:cf:b6:1b:52:0c:51:
                    97:83:80:de:c9:88:4f:18:6e:6a:b0:78:cd:da:88:
                    06:44:2a:62:22:b1:27:0c:55:f0:11:78:b0:61:3d:
                    e2:2a:b5:12:5c:62:44:6f:3d:e5:fa:2b:5f:50:39:
                    69:70:3e:f4:96:a1:d6:ba:49:0b:2a:2d:1d:16:11:
                    60:c5:fa:c1:bd:57:b0:6a:32:54:76:21:d2:91:52:
                    9c:e2:ec:d5:94:2f:f7:47:48:12:7a:86:3f:25:72:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:04:A9:87:CF:CB:10:DB:14:32:EF:FB:F3:1D:2D:59:6C:49:72:9F
            X509v3 Authority Key Identifier:
                keyid:44:DA:92:DF:B9:EC:07:AC:03:BD:03:31:1A:51:7C:61:A7:55:6E:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/0/44DA92DFB9EC07AC03BD03311A517C61A7556E8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44DA92DFB9EC07AC03BD03311A517C61A7556E8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/0/3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:0e:cd:b7:43:70:ed:14:f2:c0:3b:61:db:14:62:c1:7d:8c:
         77:81:29:78:08:69:2f:54:6b:ae:cc:cb:d7:27:4c:16:e8:1f:
         63:81:d6:ea:a1:82:91:57:ca:25:3f:43:2c:c8:9e:06:8b:0c:
         a4:d8:2b:9c:79:73:d7:4a:3d:ae:e2:7a:46:90:c3:b5:81:90:
         90:ac:36:03:33:a7:ba:b7:14:fa:eb:ce:e3:79:5e:3c:57:17:
         fc:79:a4:49:9e:ee:0a:3e:50:e2:ad:64:2b:a3:3a:8d:f1:aa:
         e8:95:78:07:e0:99:3b:69:e6:f4:8c:4c:dc:75:3c:b2:f1:49:
         6b:dc:13:5e:7c:8d:13:3e:14:cc:da:b1:9e:c4:4a:87:40:f2:
         48:2e:8f:0f:58:e4:78:83:a6:c4:d5:7e:09:3e:10:07:41:8a:
         eb:d7:aa:8a:4e:75:33:16:5c:a2:71:d8:8f:51:89:1f:d3:e6:
         cf:32:02:90:4b:a7:28:08:b2:c6:9b:50:b5:78:f6:2b:e2:4c:
         48:72:dc:d6:27:65:92:74:24:8d:bc:ab:a4:2e:3a:fb:80:36:
         9b:4a:68:fc:18:90:da:99:19:8a:a6:37:df:c6:87:b4:9d:d6:
         ca:cb:39:a1:e7:ec:f0:70:da:3a:d9:b7:a5:5b:5e:fb:ef:7b:
         5a:f8:66:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org