Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa
File:                     3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa (raw, json)
Hash identifier:          +4ZOm4dPgSuIfaBLQcJ/T2QyGeplVdpDPItb+8p1SBU=
Subject key identifier:   56:F1:FE:8E:D7:EE:84:F9:8D:26:88:82:A0:90:E9:C2:7E:81:6C:68
Certificate issuer:       /CN=B8A77988EAC7E76375143BCCA6FA803A833D4C0F
Certificate serial:       5EAAE29E3FEBAC222FF92CC9ED54DE60940FF946
Authority key identifier: B8:A7:79:88:EA:C7:E7:63:75:14:3B:CC:A6:FA:80:3A:83:3D:4C:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa
Signing time:             Mon 29 Jan 2024 14:36:07 +0000
ROA not before:           Mon 29 Jan 2024 14:31:07 +0000
ROA not after:            Mon 27 Jan 2025 14:36:07 +0000
asID:                     268097
IP address blocks:        168.194.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:aa:e2:9e:3f:eb:ac:22:2f:f9:2c:c9:ed:54:de:60:94:0f:f9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A77988EAC7E76375143BCCA6FA803A833D4C0F
        Validity
            Not Before: Jan 29 14:31:07 2024 GMT
            Not After : Jan 27 14:36:07 2025 GMT
        Subject: CN=56F1FE8ED7EE84F98D268882A090E9C27E816C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:21:ca:b1:58:c7:ee:ae:8c:22:fd:00:ef:
                    94:ad:ed:1d:b6:8f:37:e9:10:4e:bc:e2:3b:b4:fc:
                    31:e4:e4:a5:ac:7e:8a:37:f3:7b:77:65:c0:ec:2e:
                    9a:23:7d:88:c4:cd:ff:da:dd:85:64:06:0e:4d:e4:
                    23:ca:a5:c4:2e:fe:24:67:a5:f9:3d:33:ce:0e:8d:
                    76:a2:a1:be:fe:51:24:db:cc:84:1c:b8:9b:23:86:
                    e2:fc:f9:2a:a9:70:af:ae:d8:5a:6f:ca:cb:e9:bf:
                    74:1b:1f:9e:fe:18:e9:90:dc:e7:87:71:7a:c8:77:
                    89:d3:b3:f8:38:a3:03:f6:56:30:c7:92:a4:7f:ce:
                    78:77:8f:87:26:4f:41:b4:1a:34:0f:50:f6:a5:ea:
                    6c:b2:43:6a:a3:98:25:6a:74:f7:2a:c1:40:8f:3e:
                    13:12:99:2b:37:46:2f:f6:3d:8d:36:35:24:cc:79:
                    c5:c0:9b:81:79:4c:36:e7:31:e6:9c:32:05:14:db:
                    30:0c:6b:73:23:c3:e4:1a:ef:0c:b2:bd:76:4e:ac:
                    f7:0e:07:41:91:c4:cc:46:aa:f1:e8:61:ef:10:67:
                    99:f3:d2:0e:6e:33:cb:de:1d:51:72:02:ff:37:44:
                    07:ff:82:d2:f0:5a:7a:3f:0a:fb:4c:51:b5:15:71:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F1:FE:8E:D7:EE:84:F9:8D:26:88:82:A0:90:E9:C2:7E:81:6C:68
            X509v3 Authority Key Identifier:
                keyid:B8:A7:79:88:EA:C7:E7:63:75:14:3B:CC:A6:FA:80:3A:83:3D:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:25:05:83:6a:e6:fe:81:a6:a6:de:dc:db:a2:f8:6d:95:c2:
         d1:fa:63:08:8a:05:6a:19:93:a7:82:34:c4:77:10:64:b7:73:
         42:a5:70:9d:f8:01:91:05:47:82:45:38:65:ef:1b:66:35:3a:
         a4:73:87:0c:de:9a:56:58:e2:ad:26:02:77:59:f7:8b:6d:e5:
         51:ea:98:58:0a:56:df:9d:45:a1:0d:30:c2:be:d9:a4:51:be:
         02:cb:24:55:b4:34:35:fb:8c:26:6d:6d:65:d5:10:cb:d6:2b:
         fd:5c:78:f0:2a:ea:fe:ff:ad:36:4e:2b:27:45:da:c3:4b:85:
         4f:82:f4:32:b8:1a:8b:7f:3e:d3:5f:2c:6c:07:7c:3a:be:5a:
         3e:db:00:ed:cc:a4:64:79:f7:16:03:4d:87:53:56:e9:f4:6b:
         b9:30:9f:79:a2:a2:09:54:26:76:7f:c0:51:ba:0e:53:04:81:
         5c:a5:b1:f9:1c:28:e5:e6:35:a3:e4:17:8e:80:b8:e0:7a:69:
         db:73:f3:96:aa:4f:93:f4:24:e7:c5:d1:b1:8a:27:17:52:72:
         d6:2d:49:21:11:60:03:d6:68:36:1f:fa:e0:5f:7c:53:ca:2e:
         a4:ff:69:ff:c5:da:05:75:69:58:40:84:b6:58:0d:21:e5:04:
         ba:85:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org