Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136382e3232372e37322e302f32322d3232203d3e20323632383638.roa
File:                     3136382e3232372e37322e302f32322d3232203d3e20323632383638.roa (raw, json)
Hash identifier:          ZiceAQY8vZHC9/SUTlQW5PfS8CONmaXvBbPgM2w7Wfs=
Subject key identifier:   B7:D4:04:CF:31:D3:93:AC:26:64:E2:49:6C:CD:8A:35:C4:EB:D0:2C
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       1DFF5E381FA05C1DBBEDB6D8775A57E1CEB7F230
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136382e3232372e37322e302f32322d3232203d3e20323632383638.roa
Signing time:             Sat 22 Jul 2023 21:39:21 +0000
ROA not before:           Sat 22 Jul 2023 21:34:21 +0000
ROA not after:            Sat 20 Jul 2024 21:39:21 +0000
asID:                     262868
IP address blocks:        168.227.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ff:5e:38:1f:a0:5c:1d:bb:ed:b6:d8:77:5a:57:e1:ce:b7:f2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: Jul 22 21:34:21 2023 GMT
            Not After : Jul 20 21:39:21 2024 GMT
        Subject: CN=B7D404CF31D393AC2664E2496CCD8A35C4EBD02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:88:b1:8b:a5:66:f6:bd:c8:e1:88:7a:8e:
                    23:0d:2c:93:7c:97:20:c0:2f:c9:a0:a3:be:c9:de:
                    91:21:7f:28:36:d4:79:81:58:eb:b6:be:4c:75:65:
                    14:09:8c:4f:8f:23:80:d0:db:88:ef:bd:30:a2:01:
                    21:88:a3:fe:52:ea:5f:31:e4:aa:6c:ff:5c:33:9e:
                    a7:2f:3f:8a:48:fe:c3:3e:41:2c:87:84:eb:e6:a2:
                    e0:a6:ec:f6:88:00:76:8b:7a:68:bc:5c:34:28:0a:
                    59:f5:e7:e6:95:8c:cc:ad:41:e5:c2:90:c7:ba:ac:
                    66:30:10:9b:f8:41:ea:eb:ae:b1:2c:d2:48:19:a5:
                    80:1d:9d:4b:1b:5c:b0:ee:0c:a3:9f:b5:ae:11:75:
                    72:f8:7b:b0:c6:72:97:df:87:30:cc:56:ce:c7:34:
                    db:0b:f1:fd:ca:3e:f6:ef:f8:80:63:8b:c1:92:94:
                    de:c2:2e:f0:6c:35:30:05:ac:fd:bc:97:92:47:41:
                    ed:89:eb:b9:49:d5:36:5a:66:b7:f5:44:8a:4d:5e:
                    7b:eb:3d:3f:5c:bc:93:96:6c:cf:ff:ea:27:2e:e1:
                    09:de:65:af:3d:a7:f0:a9:23:5f:6c:04:60:a6:6c:
                    39:64:ed:78:90:da:bf:85:f7:98:37:38:95:87:88:
                    a4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D4:04:CF:31:D3:93:AC:26:64:E2:49:6C:CD:8A:35:C4:EB:D0:2C
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136382e3232372e37322e302f32322d3232203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:17:ca:51:25:aa:43:fc:c4:ce:12:02:45:19:9b:f1:d8:a4:
         f2:28:61:f1:01:c0:f0:5e:9a:7f:6f:3c:26:8f:23:5b:a1:33:
         19:b3:e3:59:45:94:6d:bf:96:0b:96:82:97:53:fd:85:b4:1f:
         63:a6:f5:d5:28:47:2a:c2:02:1b:f4:ed:a8:f3:81:2d:53:4b:
         6e:ea:96:e3:9e:7b:9f:e7:be:ef:14:76:27:fd:2c:6c:93:ac:
         45:c4:75:93:c9:af:c1:2a:f0:91:bf:5d:d6:6f:b2:b8:53:5e:
         a1:8d:fc:8d:aa:d2:82:d5:48:1d:88:c7:4d:6d:b9:31:ca:9b:
         07:3d:28:5c:fe:78:c6:b1:26:91:8d:88:b6:f6:73:fe:0c:d8:
         43:fe:cf:e9:57:55:11:3b:a9:4a:a2:6b:58:6b:83:1c:9e:c0:
         1d:75:4b:ec:ad:c0:8d:33:52:54:f4:e3:41:72:6e:c9:82:26:
         bc:61:17:33:7a:8e:6d:ee:d3:b3:4e:cd:f3:c7:22:e8:27:fb:
         8f:a0:08:b6:a7:64:70:ac:d1:7f:67:77:50:35:e8:58:be:2b:
         cf:40:80:bc:c6:c5:60:ca:f8:e2:07:1f:b1:71:d8:8d:96:39:
         c8:10:44:73:32:1b:4d:44:8b:4d:51:7e:79:31:39:f8:cd:46:
         33:71:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org