Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3136382e3233322e36382e302f32322d3234203d3e20323632333534.roa
File:                     3136382e3233322e36382e302f32322d3234203d3e20323632333534.roa (raw, json)
Hash identifier:          w7T32dWzSIIttM56fQikzfUyq4qmYH3179tRQfiC1eo=
Subject key identifier:   48:CE:D1:FB:13:5C:7E:DC:88:BE:C0:46:04:8D:F6:12:5E:C8:9D:89
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       56FA7C4D0F5159EA06872BF50426E4E9408DB8AF
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3136382e3233322e36382e302f32322d3234203d3e20323632333534.roa
Signing time:             Tue 02 Apr 2024 23:23:34 +0000
ROA not before:           Tue 02 Apr 2024 23:18:34 +0000
ROA not after:            Tue 01 Apr 2025 23:23:34 +0000
asID:                     262354
IP address blocks:        168.232.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fa:7c:4d:0f:51:59:ea:06:87:2b:f5:04:26:e4:e9:40:8d:b8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Apr  2 23:18:34 2024 GMT
            Not After : Apr  1 23:23:34 2025 GMT
        Subject: CN=48CED1FB135C7EDC88BEC046048DF6125EC89D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:5b:d2:03:59:9b:3c:7d:51:1d:5b:68:4c:
                    62:58:bc:ac:35:e8:23:e0:d0:d0:c3:43:c3:e5:60:
                    57:9c:9e:a2:87:a4:08:24:48:d3:85:00:e6:25:5a:
                    5d:ce:74:d6:55:d8:db:c0:9e:af:6c:ed:35:59:a8:
                    3a:1f:e3:37:f3:f8:3d:ef:a1:ff:31:13:c4:fe:25:
                    ca:bf:bf:43:7c:fa:0f:21:b2:41:ef:5b:10:a9:47:
                    83:51:2c:0a:28:b4:5e:ae:6d:18:f8:aa:e8:ca:69:
                    9f:64:19:a6:65:a2:57:45:bc:b9:2f:75:da:78:9f:
                    f7:b5:cb:bc:9c:ee:45:ed:a0:2e:b2:48:d0:5b:09:
                    b5:6a:70:da:ef:e8:fc:59:7b:85:d0:36:19:de:9b:
                    a7:d4:76:67:ec:6d:08:9d:9d:d7:c9:0e:36:17:5c:
                    61:17:23:b3:da:6e:02:f4:2d:7e:97:b7:75:7b:f0:
                    e2:58:b0:e5:05:f2:eb:06:49:79:b3:ff:5f:95:28:
                    c5:c8:2a:96:a8:4c:d5:8a:3a:f2:e1:70:35:1d:d8:
                    37:38:5a:df:f7:c4:5d:0d:f8:6d:06:4c:e8:d7:ef:
                    f2:2d:df:74:30:c1:66:ac:1b:90:86:fe:45:a2:30:
                    53:01:e2:83:38:75:e6:38:fd:6a:b3:6c:42:4a:d2:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CE:D1:FB:13:5C:7E:DC:88:BE:C0:46:04:8D:F6:12:5E:C8:9D:89
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3136382e3233322e36382e302f32322d3234203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:50:87:15:4a:09:96:cf:44:5b:34:38:a3:29:4d:42:6a:6e:
         45:98:89:44:5f:62:cc:5e:9e:33:42:31:02:ef:23:a8:2e:97:
         13:f8:53:d4:19:c2:11:48:8e:41:b3:d5:41:24:60:e5:5c:2b:
         77:ad:bb:45:19:09:fa:5c:4b:34:78:c1:50:a0:15:c4:fd:e1:
         4e:39:79:69:dc:eb:7c:1b:9b:3a:38:f8:13:be:3e:7d:b2:67:
         3c:48:81:0e:69:db:4e:11:66:81:60:97:d4:8c:7a:05:39:d9:
         e3:2c:bb:a2:30:ff:9b:22:54:bb:28:8d:e2:08:e3:c8:bd:c7:
         7b:2c:25:9c:dc:f2:88:7a:b4:8d:24:67:8c:74:a8:72:a0:a7:
         fb:56:06:c0:be:b9:29:1b:3a:90:b9:66:7d:f1:48:56:4d:a9:
         53:39:b0:9b:43:7b:f0:b9:1b:96:1b:84:33:f6:c2:17:10:fe:
         ac:19:dd:94:4b:66:12:d7:92:23:cf:07:9e:25:e1:64:8d:f7:
         89:17:73:c9:78:b6:f8:ac:e9:db:1e:1f:bf:eb:0b:07:90:f7:
         e3:b3:9d:b4:5f:ab:b8:ab:1d:d1:ac:6b:df:e7:d0:5c:9a:dd:
         73:77:d2:19:29:da:62:48:60:98:95:3b:67:53:a2:cc:17:83:
         21:42:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org