Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e3232372e3136382e302f32322d3234203d3e20323632393037.roa
File:                     3136382e3232372e3136382e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          oVznhhqF5zVvNel6ReK9bhpnmAQxaVnT34HiNAhww1w=
Subject key identifier:   A6:C8:32:7B:2C:20:97:ED:67:66:12:85:E1:A2:05:BC:27:F4:86:E4
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       1E97F44C45793F4BA65FFF3E5B4686FD56E7E839
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e3232372e3136382e302f32322d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:19 +0000
ROA not before:           Sat 03 Feb 2024 12:48:19 +0000
ROA not after:            Sat 01 Feb 2025 12:53:19 +0000
asID:                     262907
IP address blocks:        168.227.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:97:f4:4c:45:79:3f:4b:a6:5f:ff:3e:5b:46:86:fd:56:e7:e8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:19 2024 GMT
            Not After : Feb  1 12:53:19 2025 GMT
        Subject: CN=A6C8327B2C2097ED67661285E1A205BC27F486E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:9e:87:8c:5e:99:a0:18:67:2e:1e:c9:40:
                    2f:b6:6a:ae:ef:50:bf:94:03:f6:42:80:f0:d6:e4:
                    82:78:2b:6d:d8:4f:48:7b:be:80:6c:be:5f:dd:e0:
                    1d:f1:e6:ca:60:9d:b4:09:23:1c:98:03:a8:3b:01:
                    c9:bd:31:8a:dd:94:04:23:07:84:5e:0b:1b:7a:3e:
                    32:a3:91:2a:4a:dd:8a:7b:bb:94:3d:bb:32:46:c9:
                    74:55:06:a4:4b:3e:f2:e6:c0:ba:65:63:b8:4b:ed:
                    2e:f0:b9:43:ad:ed:98:2a:4e:8b:d4:54:08:2b:7e:
                    8d:51:91:96:c1:ae:a6:7b:6f:58:ae:9d:0b:54:65:
                    48:dc:f1:04:16:24:1b:7f:9a:1e:17:e5:54:57:e2:
                    8b:d5:fe:4c:dd:34:6e:af:f6:59:83:c0:15:53:e8:
                    f0:1f:b2:f2:7b:b1:f1:7e:15:96:e0:cf:a7:60:cf:
                    47:cc:91:76:a2:f4:61:4b:57:8d:75:09:11:7b:e9:
                    b0:a4:20:25:64:54:e5:9f:18:df:db:33:cc:c3:df:
                    cf:88:09:56:e2:f1:51:13:56:a9:5e:55:c2:89:af:
                    5b:c6:13:f9:53:ce:3f:c5:cc:72:ee:c3:79:ca:2d:
                    10:68:97:67:a9:75:13:8b:be:e9:93:5b:0e:99:f8:
                    d6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C8:32:7B:2C:20:97:ED:67:66:12:85:E1:A2:05:BC:27:F4:86:E4
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e3232372e3136382e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:1a:24:ab:c2:de:a0:8e:be:08:a7:b5:94:1e:11:8f:57:6a:
         94:96:3b:1f:00:1e:29:0e:6e:a7:d7:45:5f:f2:36:86:23:2e:
         7a:98:94:05:8f:36:71:86:a5:55:94:df:08:a9:54:3b:b2:73:
         0a:47:ea:8e:06:11:7e:fe:4b:72:ea:9a:ed:7c:f6:29:4a:3e:
         5d:2b:85:f2:e6:00:97:2e:62:49:8d:d5:f0:f8:a7:b2:6e:c9:
         99:ea:da:06:ac:50:52:d9:2f:10:88:6c:fb:3d:01:a7:7b:82:
         6d:1a:80:38:6a:f6:bb:79:c7:7a:63:46:5e:7b:3f:e3:2e:94:
         e9:89:fe:25:ec:56:c3:6b:a8:98:86:a3:cb:8d:54:51:32:63:
         95:1d:1b:f8:db:30:1e:7b:db:fb:4b:c9:d2:fb:2b:15:97:48:
         2c:ec:27:c9:b7:38:d6:3a:f8:c3:42:3b:9b:c1:6e:28:c4:5c:
         66:f4:4b:5e:d1:fd:33:bc:0a:33:11:3c:03:d3:a4:91:63:13:
         ea:5d:f8:6d:85:8b:77:3b:35:80:65:bb:a1:37:e7:6e:6c:4f:
         65:85:71:92:bb:6b:3d:be:4b:77:e3:a0:33:ec:72:4b:bb:a2:
         a9:ea:ee:83:dd:24:9d:cc:c8:92:16:a1:00:f3:af:10:c0:66:
         ed:7b:67:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org