Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa
File:                     3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa (raw, json)
Hash identifier:          zN3w1nN9xhaGC8UJaifbNFRmZxcDBIlKFC0PgsTObuI=
Subject key identifier:   AD:DA:A1:25:8D:8D:7E:F6:07:95:A9:07:3E:49:5E:7E:F7:98:78:EE
Certificate issuer:       /CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
Certificate serial:       33110B0CEC72C03F6F30F6C3A93ABCC95118B318
Authority key identifier: AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa
Signing time:             Wed 14 Jun 2023 20:57:21 +0000
ROA not before:           Wed 14 Jun 2023 20:52:21 +0000
ROA not after:            Wed 12 Jun 2024 20:57:21 +0000
asID:                     265425
IP address blocks:        168.195.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:11:0b:0c:ec:72:c0:3f:6f:30:f6:c3:a9:3a:bc:c9:51:18:b3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
        Validity
            Not Before: Jun 14 20:52:21 2023 GMT
            Not After : Jun 12 20:57:21 2024 GMT
        Subject: CN=ADDAA1258D8D7EF60795A9073E495E7EF79878EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:dc:2b:25:05:f5:d3:50:58:e1:3d:a6:03:
                    f4:b6:1a:19:ea:00:25:85:78:cf:92:4a:0e:94:18:
                    69:a4:9d:d5:d6:e3:8c:a8:c1:0e:b0:f9:65:ae:07:
                    9c:f3:c1:82:8f:0f:e9:aa:aa:63:62:1a:64:ad:fb:
                    7c:3f:86:8d:3e:b4:ef:22:d4:d2:78:2b:a6:39:fe:
                    a2:92:0d:7d:b1:fc:97:9e:98:6c:a7:29:a6:55:b5:
                    b7:eb:31:df:40:5e:5b:f0:af:c8:4d:ad:35:e4:33:
                    2b:87:12:73:2e:bf:8c:7f:2e:85:46:d8:f1:a6:64:
                    69:0a:ba:a6:ca:96:e0:ba:a6:df:cd:ab:b3:e4:e7:
                    0a:b6:5b:49:50:e2:f8:c3:6e:d0:cb:35:8f:23:c5:
                    9a:83:1e:04:e2:a7:9a:7a:28:f4:e6:2d:ea:05:91:
                    4d:08:4e:dc:89:20:af:3d:1c:b6:02:ae:bf:27:9b:
                    40:0e:ba:04:33:42:88:3a:d2:0c:53:f1:a7:8f:75:
                    c5:8a:f2:51:7f:05:b1:84:e6:e6:5b:87:3a:1a:72:
                    8c:e7:ef:91:16:fc:ca:e0:fd:d3:32:c9:38:3a:37:
                    72:39:18:3b:f6:0a:20:8f:6b:4f:1f:02:91:0c:a0:
                    37:82:f7:87:20:28:13:ad:4b:75:2e:06:98:ee:ef:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DA:A1:25:8D:8D:7E:F6:07:95:A9:07:3E:49:5E:7E:F7:98:78:EE
            X509v3 Authority Key Identifier:
                keyid:AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:11:9c:ed:f3:07:7d:03:f9:b9:e1:a8:1a:bd:fe:4d:f5:42:
         45:6a:f3:bb:42:d9:4f:67:48:d5:1a:6b:df:7b:5a:a1:2c:ec:
         37:64:18:db:64:fb:81:cc:2d:1e:ea:ac:92:15:ee:32:58:38:
         b6:37:31:8b:13:25:5e:bc:ec:67:62:11:7d:2a:97:cc:5c:f5:
         e2:a0:3d:7a:8e:e5:ef:59:f0:e0:94:aa:12:23:22:a2:7a:56:
         f9:f7:6a:80:7c:be:b7:53:1a:38:da:1f:1b:1d:46:78:42:7f:
         f1:cd:d3:c8:cd:b9:9b:26:39:c9:68:fc:fb:68:c0:2d:ed:a3:
         c0:60:e9:65:99:a1:23:dd:79:f7:68:3e:20:5e:f3:f8:84:14:
         d2:26:90:05:4e:65:ad:a9:8f:d9:86:ce:e8:e7:9a:0f:0a:8e:
         50:92:72:fd:90:26:0d:e0:f9:8e:e0:df:9d:01:2c:66:91:3b:
         5f:b1:36:44:b0:4a:d3:77:c7:da:1a:87:42:f7:05:81:29:0f:
         7c:18:1d:ef:d5:61:00:1e:7b:bb:67:71:ce:c8:e3:d9:84:16:
         40:ed:d0:09:a6:5e:83:29:1a:6f:6d:4b:9e:43:ab:1a:18:24:
         e1:65:39:ec:1a:33:2a:a7:7e:f2:a8:af:e4:94:be:a9:9d:1d:
         aa:74:69:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org