Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PMPRR6Qri1BDAvYtUApPxNy4B7AfRxZC39ZiiTRfyaK/1/3136382e3138312e3235322e302f32322d3234203d3e20323635333437.roa
File:                     3136382e3138312e3235322e302f32322d3234203d3e20323635333437.roa (raw, json)
Hash identifier:          PYeaPCPYsbrrE/ArcoAUi9IvEyFBsOhpRb1PiHpXRhg=
Subject key identifier:   C7:4C:DE:3E:95:1C:8F:5D:24:3D:BF:5E:01:F9:87:B6:A6:18:31:64
Certificate issuer:       /CN=10067344E8488D7168BE29EAA4F7408481854C47
Certificate serial:       4DC6E5E94FDCAB30EA3F4C7BCE74712235A61035
Authority key identifier: 10:06:73:44:E8:48:8D:71:68:BE:29:EA:A4:F7:40:84:81:85:4C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10067344E8488D7168BE29EAA4F7408481854C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PMPRR6Qri1BDAvYtUApPxNy4B7AfRxZC39ZiiTRfyaK/1/3136382e3138312e3235322e302f32322d3234203d3e20323635333437.roa
Signing time:             Thu 02 Jun 2022 17:36:01 +0000
ROA not before:           Thu 02 Jun 2022 17:31:01 +0000
ROA not after:            Thu 01 Jun 2023 17:36:01 +0000
asID:                     265347
IP address blocks:        168.181.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c6:e5:e9:4f:dc:ab:30:ea:3f:4c:7b:ce:74:71:22:35:a6:10:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10067344E8488D7168BE29EAA4F7408481854C47
        Validity
            Not Before: Jun  2 17:31:01 2022 GMT
            Not After : Jun  1 17:36:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:fe:da:c8:c3:c3:88:ab:cb:1d:b5:57:3b:
                    6b:2b:04:99:c3:8b:ad:6f:bd:b7:d2:e5:90:f9:a4:
                    58:87:5a:70:de:4d:be:9c:15:68:bd:64:0c:3c:79:
                    96:4b:ac:b8:7b:b5:14:50:8a:7e:e0:c4:d4:47:46:
                    c7:ff:85:14:f3:56:08:aa:68:b4:3f:3c:4a:40:ac:
                    3c:fc:f2:a0:5e:0c:d3:14:0d:80:f4:e2:c4:0d:86:
                    fb:27:40:7b:aa:41:6f:d2:fa:98:07:ec:35:70:94:
                    9f:3a:2e:15:98:70:3d:2c:32:ec:c4:f6:ab:11:30:
                    c3:e4:14:1c:7d:9f:cd:d9:67:e8:61:de:4d:aa:02:
                    49:94:e1:ca:2f:7a:a4:09:87:9f:46:c5:48:af:46:
                    35:be:d1:fd:36:58:9d:0b:d2:74:48:3f:7a:c5:8e:
                    e6:f8:79:cd:46:a4:0b:7d:8d:eb:ef:6e:d0:96:b7:
                    f9:d9:29:6e:9c:11:d4:55:c0:87:67:df:ad:a6:27:
                    dc:de:63:db:44:fc:f4:b3:3a:e6:06:7b:37:86:2e:
                    96:c2:bc:46:19:4d:1f:87:ce:01:07:ed:85:01:ce:
                    e9:1c:b8:ad:07:9c:69:0e:77:cc:ab:d6:da:9a:ac:
                    95:e2:f7:11:6d:60:5f:0d:6d:ba:2b:4c:fa:a9:e1:
                    a0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4C:DE:3E:95:1C:8F:5D:24:3D:BF:5E:01:F9:87:B6:A6:18:31:64
            X509v3 Authority Key Identifier:
                keyid:10:06:73:44:E8:48:8D:71:68:BE:29:EA:A4:F7:40:84:81:85:4C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PMPRR6Qri1BDAvYtUApPxNy4B7AfRxZC39ZiiTRfyaK/1/10067344E8488D7168BE29EAA4F7408481854C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10067344E8488D7168BE29EAA4F7408481854C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PMPRR6Qri1BDAvYtUApPxNy4B7AfRxZC39ZiiTRfyaK/1/3136382e3138312e3235322e302f32322d3234203d3e20323635333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:ed:47:c9:5e:1f:01:a9:ab:eb:9c:b6:50:7d:91:74:fb:12:
         3a:88:4f:76:e8:ba:63:bd:60:06:f8:82:b5:9b:34:f7:85:bf:
         18:16:10:27:b7:79:ed:1c:fa:62:3d:94:55:9a:e6:5c:0c:80:
         cc:d3:ee:20:c4:5e:d7:85:d9:fc:85:b5:f5:c6:2a:71:64:9e:
         68:46:5e:61:58:d5:63:db:40:1f:77:ec:51:ce:44:06:66:21:
         cd:8b:90:b8:9a:b0:60:5f:0a:46:94:fb:90:a1:e5:32:74:f2:
         d6:5d:19:32:3d:46:3d:7e:49:25:2e:66:bb:e8:3a:ee:70:a2:
         de:1f:91:1c:c7:35:bc:97:64:45:c4:97:06:c8:a2:fb:2d:55:
         67:6a:4d:fe:82:ec:c7:5a:5a:54:e3:28:10:66:cd:b4:3b:6d:
         10:62:a9:51:8d:8e:a6:f7:e5:b7:5d:87:0a:c6:e7:d0:31:3d:
         6a:4d:68:fd:58:bc:23:16:1d:83:15:7c:49:71:99:7b:e0:9f:
         08:95:91:8b:d4:de:ec:28:34:13:1e:17:ca:76:c8:8c:2b:15:
         4e:c2:f4:ad:64:70:2e:cb:0e:17:cc:14:15:84:c0:f3:86:e2:
         04:f7:3a:4b:16:1b:fd:c7:93:c9:68:07:7a:c6:7b:6f:03:7b:
         a0:8c:7d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org