Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136382e3139372e3231322e302f32322d3232203d3e20323632383638.roa
File:                     3136382e3139372e3231322e302f32322d3232203d3e20323632383638.roa (raw, json)
Hash identifier:          wIR77qIXY7w+J2SHPSv402xT2gau98xuGiR/jdUuBEQ=
Subject key identifier:   AE:AC:7B:30:A8:80:CC:CF:90:3A:DA:ED:86:E4:15:A9:05:A2:2D:84
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       20073DAE77D720E8D0D315B3AE5F1B0AD532778C
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136382e3139372e3231322e302f32322d3232203d3e20323632383638.roa
Signing time:             Sat 22 Jul 2023 21:39:12 +0000
ROA not before:           Sat 22 Jul 2023 21:34:12 +0000
ROA not after:            Sat 20 Jul 2024 21:39:12 +0000
asID:                     262868
IP address blocks:        168.197.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:07:3d:ae:77:d7:20:e8:d0:d3:15:b3:ae:5f:1b:0a:d5:32:77:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: Jul 22 21:34:12 2023 GMT
            Not After : Jul 20 21:39:12 2024 GMT
        Subject: CN=AEAC7B30A880CCCF903ADAED86E415A905A22D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:76:86:e5:5d:56:f6:f6:41:f6:69:c8:1a:
                    a0:ab:83:fb:b6:29:68:49:e3:ac:19:6a:1e:ee:80:
                    00:ad:8d:75:15:3a:f7:3b:6d:ac:fe:ec:47:e8:98:
                    90:80:4d:f2:ba:2e:2a:ec:4c:2b:5f:33:2e:59:63:
                    5e:da:f6:62:07:8c:d5:e0:77:12:bb:26:de:e7:5a:
                    08:07:80:78:b4:ce:2a:29:2c:a5:2b:c2:f2:ac:81:
                    0a:e5:f8:82:b4:7a:e0:61:2b:cd:04:61:03:15:b1:
                    ae:d4:57:23:50:56:28:61:3e:7d:5e:f3:13:f4:cf:
                    2f:79:ef:83:66:dd:c8:b8:6c:ae:89:cf:8a:e6:d6:
                    05:4a:e2:9d:13:64:2e:73:8e:9b:6a:40:ac:05:9c:
                    57:92:72:44:f8:59:c0:36:ef:fb:7e:72:bd:20:df:
                    d1:8f:dc:3e:5b:84:a1:20:4b:00:6e:b1:90:d3:57:
                    0b:56:80:13:df:d5:93:98:b2:2d:2b:09:f7:0d:a1:
                    5f:fc:9c:ce:81:70:3a:e3:f4:5f:b2:1f:f4:af:ce:
                    4b:b1:04:33:04:17:0d:9c:ef:87:9f:f7:92:af:af:
                    98:66:90:b7:29:79:14:af:79:98:80:c2:64:52:03:
                    63:2a:2e:ee:b8:05:63:4d:ed:ec:a4:4a:22:84:fc:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AC:7B:30:A8:80:CC:CF:90:3A:DA:ED:86:E4:15:A9:05:A2:2D:84
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136382e3139372e3231322e302f32322d3232203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:7f:4c:47:82:02:3c:f4:d2:2d:84:00:39:0f:b6:d5:24:da:
         57:db:e7:f5:e3:22:8a:37:ab:d6:da:06:ca:49:ca:4b:ef:e4:
         3f:ce:5a:b6:7d:06:13:a3:97:8e:bd:3f:48:c8:13:49:aa:91:
         2e:81:5e:a6:a3:2a:02:7b:23:e2:55:eb:8f:ca:7b:c3:26:da:
         89:96:a5:5d:67:2d:a7:d5:75:38:f9:0a:ed:f2:cb:e0:fc:51:
         20:32:f5:85:6d:e4:16:a4:e9:3e:63:f7:d5:9e:21:1a:ec:38:
         39:b7:b7:e5:29:6c:a1:39:54:15:8c:28:9e:c2:5f:d0:9d:10:
         4b:c1:04:49:e1:91:c8:82:1b:2b:29:f1:dc:9c:c5:e2:0f:f8:
         b0:8f:b7:18:02:72:0c:bc:00:0c:b4:10:33:26:46:00:e0:ef:
         79:51:8d:c3:12:f4:d8:5c:8e:73:2a:10:b1:52:09:f4:af:7e:
         4d:da:0d:1b:10:7b:33:22:3b:c2:35:fc:69:71:cb:9d:c8:a0:
         11:82:34:cb:4d:40:61:f8:f8:28:6c:91:8c:af:c3:bc:a5:52:
         70:3b:ba:dc:4f:df:c6:ce:43:fb:9c:7b:f9:02:da:49:12:7c:
         be:ef:0d:ec:0c:8a:2b:03:a1:7f:6d:0c:fa:49:fe:a2:9c:fe:
         62:9b:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org