Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PMPRR6Qri1BDAvYtUApPxNy4B7AfRxZC39ZiiTRfyaK/0/3136382e3138312e3235322e302f32322d3234203d3e20323635333437.roa
File:                     3136382e3138312e3235322e302f32322d3234203d3e20323635333437.roa (raw, json)
Hash identifier:          c8wXBB+j73+DZjGCw1tiZMDOGFY5TpT9dC6rBlb+3fA=
Subject key identifier:   AA:E3:67:69:BB:AE:CF:D8:BF:F6:86:4C:C7:E8:5B:41:01:0E:DE:CF
Certificate issuer:       /CN=7C701A6EB476AE9EFA2738D3F166690C51BC38BF
Certificate serial:       19EFA18EE257471A18DC935E4D0E51F8D6513C0C
Authority key identifier: 7C:70:1A:6E:B4:76:AE:9E:FA:27:38:D3:F1:66:69:0C:51:BC:38:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C701A6EB476AE9EFA2738D3F166690C51BC38BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PMPRR6Qri1BDAvYtUApPxNy4B7AfRxZC39ZiiTRfyaK/0/3136382e3138312e3235322e302f32322d3234203d3e20323635333437.roa
Signing time:             Sun 20 Nov 2022 00:43:25 +0000
ROA not before:           Sun 20 Nov 2022 00:38:25 +0000
ROA not after:            Sun 19 Nov 2023 00:43:25 +0000
asID:                     265347
IP address blocks:        168.181.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ef:a1:8e:e2:57:47:1a:18:dc:93:5e:4d:0e:51:f8:d6:51:3c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C701A6EB476AE9EFA2738D3F166690C51BC38BF
        Validity
            Not Before: Nov 20 00:38:25 2022 GMT
            Not After : Nov 19 00:43:25 2023 GMT
        Subject: CN=AAE36769BBAECFD8BFF6864CC7E85B41010EDECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:af:b8:83:e9:a2:b4:0d:93:e1:76:63:0d:
                    13:f8:dd:a1:a0:70:65:16:42:53:12:07:c8:f8:65:
                    7e:67:ca:f6:a7:a5:64:ea:72:91:d7:68:91:5a:b4:
                    02:fd:93:c9:05:28:3e:41:90:c9:57:ef:47:de:03:
                    6e:b9:0d:3c:9a:a8:60:3b:26:c5:8e:55:18:96:89:
                    92:0f:93:6b:0c:15:89:66:22:a6:e2:84:5a:42:6b:
                    51:09:69:58:f1:e0:39:52:c6:2c:86:1e:bb:0c:36:
                    0a:e8:bc:14:f0:ff:3f:3f:c5:d9:c5:21:94:93:eb:
                    04:b0:69:56:ab:4c:f9:58:45:65:42:ab:c4:3f:fa:
                    00:b0:fe:90:48:d5:1a:3a:c6:97:a7:fc:98:e6:2e:
                    10:e1:6c:73:f6:2a:ca:9d:16:0e:7d:1a:8b:3d:5c:
                    cb:59:44:ef:91:10:13:64:94:89:2d:07:9b:3a:22:
                    96:fe:c8:90:6b:10:6c:1b:f6:48:67:55:da:e5:ef:
                    73:97:cf:a9:5a:21:74:a5:9c:ec:03:a2:0c:c3:d6:
                    7f:fe:1f:90:6c:b8:dc:e8:63:b0:98:c5:e0:14:64:
                    8c:f0:84:19:f5:7b:09:4e:81:96:53:4b:12:e7:45:
                    49:88:63:99:b2:3a:82:6e:04:45:55:7c:ad:71:84:
                    00:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E3:67:69:BB:AE:CF:D8:BF:F6:86:4C:C7:E8:5B:41:01:0E:DE:CF
            X509v3 Authority Key Identifier:
                keyid:7C:70:1A:6E:B4:76:AE:9E:FA:27:38:D3:F1:66:69:0C:51:BC:38:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PMPRR6Qri1BDAvYtUApPxNy4B7AfRxZC39ZiiTRfyaK/0/7C701A6EB476AE9EFA2738D3F166690C51BC38BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C701A6EB476AE9EFA2738D3F166690C51BC38BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PMPRR6Qri1BDAvYtUApPxNy4B7AfRxZC39ZiiTRfyaK/0/3136382e3138312e3235322e302f32322d3234203d3e20323635333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:45:6f:de:97:83:63:6f:5f:dc:05:2b:af:03:e0:c0:03:
         78:5c:ad:9a:ff:6b:93:94:72:ac:f3:ca:44:54:23:f1:22:e5:
         75:45:20:42:16:cf:a4:bf:c1:69:b7:0b:6c:a7:42:e9:cd:d6:
         cd:59:35:ea:2b:8e:a1:6c:19:78:a4:4a:24:a5:31:58:84:72:
         d1:a3:0d:83:86:07:fc:69:24:40:0c:24:e3:85:4d:2e:52:71:
         bc:f8:d3:fd:1a:4d:7d:e7:b3:24:54:a5:06:1a:de:0a:e5:6a:
         f7:1a:f5:43:e2:b5:a6:f0:87:dc:8e:33:cd:24:eb:3f:ad:7f:
         17:f7:4d:13:27:9f:cb:61:d7:5e:38:04:35:f4:2e:97:43:bb:
         0e:fa:ab:ee:9e:a0:68:c3:58:5d:cd:a5:c7:08:5b:30:e6:6a:
         34:96:f0:48:3e:b3:3c:c5:ec:a7:bf:8c:96:12:90:0d:58:d6:
         f8:f6:bc:24:a4:15:77:a1:55:23:76:f0:2b:aa:e8:2a:91:49:
         7b:b2:8c:9f:b8:3b:5b:57:fa:cd:c5:33:38:1c:f0:2d:82:f5:
         89:ec:ec:6c:e1:88:d2:83:29:d0:7f:55:ec:e5:2d:24:80:e0:
         30:6e:f4:1c:41:39:03:d1:26:f8:14:3a:ff:d3:43:41:f9:e6:
         11:89:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org