Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3136382e3232382e3138302e302f32322d3234203d3e203238363432.roa
File:                     3136382e3232382e3138302e302f32322d3234203d3e203238363432.roa (raw, json)
Hash identifier:          arGGIouIBaQrYF+LNxgBMyjUL1d+nHNtbHLePT8m7TI=
Subject key identifier:   FC:F3:DC:0F:EF:CE:C0:AF:F0:29:2E:8F:BD:CB:73:CB:F9:D6:94:80
Certificate issuer:       /CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
Certificate serial:       6675E99A4DD893C49B648B0E9DC6D4CF07A90DF6
Authority key identifier: 13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3136382e3232382e3138302e302f32322d3234203d3e203238363432.roa
Signing time:             Tue 26 Mar 2024 14:25:32 +0000
ROA not before:           Tue 26 Mar 2024 14:20:32 +0000
ROA not after:            Tue 25 Mar 2025 14:25:32 +0000
asID:                     28642
IP address blocks:        168.228.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:75:e9:9a:4d:d8:93:c4:9b:64:8b:0e:9d:c6:d4:cf:07:a9:0d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
        Validity
            Not Before: Mar 26 14:20:32 2024 GMT
            Not After : Mar 25 14:25:32 2025 GMT
        Subject: CN=FCF3DC0FEFCEC0AFF0292E8FBDCB73CBF9D69480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:b5:fd:8e:f7:40:fb:ac:df:8d:ff:6c:e8:
                    56:e5:72:c4:53:d8:9d:48:f5:7f:1c:6d:e6:4a:b8:
                    d2:e4:24:6e:fe:d9:57:cd:07:58:dc:42:ca:32:eb:
                    27:26:74:f3:98:d4:71:58:8a:2d:66:5b:95:14:4f:
                    3a:27:9d:50:1d:15:58:68:d1:6e:c2:a6:81:11:54:
                    66:f3:6d:a0:bc:93:e1:3b:df:54:8e:b3:e4:c1:d1:
                    f9:e8:aa:bf:8f:db:18:df:3a:84:4a:ee:90:79:00:
                    c0:03:17:5b:c0:65:9a:61:d8:ab:ab:69:38:d4:7a:
                    b3:7d:87:02:37:85:53:81:9a:8f:37:1f:7a:54:51:
                    de:7b:7d:17:fc:01:0d:70:e7:0c:a3:79:18:63:3d:
                    4e:77:23:93:b2:81:6b:e1:4a:4f:3f:55:81:dd:5b:
                    d8:2c:ca:ad:fa:27:a0:29:66:91:ca:b9:2d:8f:80:
                    7e:0e:0f:47:45:60:0c:9e:fa:93:8d:b7:05:01:5f:
                    c8:fb:27:57:81:1a:30:24:41:d0:4f:99:9d:49:ce:
                    f0:dc:f7:20:b4:ef:90:20:e6:04:5d:89:6c:bf:74:
                    8e:4d:e7:c4:9f:0d:65:d0:24:41:a9:93:3c:ef:47:
                    1d:f9:e6:7e:2d:de:e3:ca:9b:54:c3:4d:8f:85:e4:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F3:DC:0F:EF:CE:C0:AF:F0:29:2E:8F:BD:CB:73:CB:F9:D6:94:80
            X509v3 Authority Key Identifier:
                keyid:13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3136382e3232382e3138302e302f32322d3234203d3e203238363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:89:52:d9:e9:3c:b8:06:7f:13:75:d0:34:ed:1f:15:05:4f:
         2e:2c:f6:1d:c6:93:db:f1:b3:c4:3e:0f:a8:a2:65:ef:f6:8a:
         fb:9e:e2:8c:26:57:88:17:75:39:34:fa:5c:ca:47:38:a7:80:
         78:91:7a:8f:5d:37:7b:1e:09:ef:bf:58:9f:84:53:54:e2:fc:
         f4:7e:1b:39:c0:9f:33:b5:81:9b:7b:52:69:1f:66:ab:ba:21:
         31:e3:e9:f5:37:2a:4e:a6:e0:13:c2:e1:c6:9d:86:6e:34:ba:
         5e:61:25:c6:31:26:78:06:67:21:e5:be:0d:c8:f1:db:37:82:
         f5:b7:ea:ab:09:28:ec:02:e2:eb:44:cb:4b:26:12:a8:9c:78:
         f6:46:0e:8e:97:62:33:0f:aa:76:bb:9c:a3:86:e2:07:30:a2:
         41:8f:83:25:1b:f4:a4:37:51:35:7b:5b:37:64:3a:a9:64:7e:
         c2:f1:e8:ed:12:79:83:61:c5:41:9d:18:3e:4d:e3:6d:07:b9:
         1b:29:2d:3a:8c:1f:7a:47:eb:c7:f9:02:e4:c3:d3:65:3f:d6:
         f5:3c:f5:e7:0b:21:7f:16:87:9e:aa:bc:cf:4f:61:98:06:99:
         37:d2:a8:7d:58:b2:6d:66:18:70:a3:ef:60:b5:b7:5c:0d:fc:
         5c:af:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org