Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e3232372e3233362e302f32322d3234203d3e203532363734.roa
File:                     3136382e3232372e3233362e302f32322d3234203d3e203532363734.roa (raw, json)
Hash identifier:          GH5zA255M49ip9uyhZ/W24sC+yjwGaY2IJrCSdh/qBI=
Subject key identifier:   49:48:AA:83:6E:1C:E1:F9:88:4C:25:DF:FB:CA:FE:C2:85:B8:F9:18
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       13F59649B36ED7A8292C6009490B0BB1BBB3B16B
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e3232372e3233362e302f32322d3234203d3e203532363734.roa
Signing time:             Wed 21 Feb 2024 22:53:25 +0000
ROA not before:           Wed 21 Feb 2024 22:48:25 +0000
ROA not after:            Wed 19 Feb 2025 22:53:25 +0000
asID:                     52674
IP address blocks:        168.227.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f5:96:49:b3:6e:d7:a8:29:2c:60:09:49:0b:0b:b1:bb:b3:b1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb 21 22:48:25 2024 GMT
            Not After : Feb 19 22:53:25 2025 GMT
        Subject: CN=4948AA836E1CE1F9884C25DFFBCAFEC285B8F918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:00:95:d9:9c:e3:16:8b:de:5b:96:de:49:
                    2f:0d:0d:6d:0c:ff:f9:07:09:84:aa:1a:b6:4b:8e:
                    f8:3c:5e:b4:48:5f:d6:c1:13:32:8a:7f:73:14:67:
                    9f:6c:61:c4:23:9c:4b:de:ef:6b:ed:8d:95:c8:01:
                    08:7e:a9:46:da:09:c6:98:10:f9:ac:63:6e:1b:58:
                    71:9b:09:de:bf:2d:7b:be:a4:07:97:5b:6a:1d:26:
                    7e:62:44:65:8c:4e:cc:41:78:a7:01:43:41:a5:fb:
                    1d:b3:fe:76:72:46:4b:78:40:0c:47:8a:01:6d:a3:
                    f8:8a:1b:d7:da:46:c2:ca:22:47:22:e3:d6:b3:28:
                    c4:84:af:00:49:8c:eb:63:1c:50:af:54:d2:19:aa:
                    8b:cb:98:01:68:8c:d5:f0:9f:b1:08:04:63:3f:69:
                    ff:ff:8e:e2:d5:5e:b2:d4:85:4f:84:ca:44:95:93:
                    b1:8d:cb:a8:4c:58:54:9d:ef:88:71:92:bc:87:7c:
                    3b:e3:51:fa:b7:f6:1a:e2:f7:fa:61:06:b8:91:4b:
                    86:01:f5:c2:1a:6d:ec:96:11:d5:5f:b0:63:81:8f:
                    0b:1c:16:1b:13:5d:68:bf:0b:8c:7a:58:3d:1e:c1:
                    89:1e:4e:6c:27:c6:e7:f7:5c:c5:44:64:78:67:94:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:48:AA:83:6E:1C:E1:F9:88:4C:25:DF:FB:CA:FE:C2:85:B8:F9:18
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e3232372e3233362e302f32322d3234203d3e203532363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:d0:b7:0f:bd:b5:05:0b:00:9d:4f:b2:6b:54:58:92:dc:37:
         de:d4:c0:05:fd:66:80:51:da:99:dc:a9:1d:9a:c5:34:f8:b0:
         8b:4c:cc:8b:f3:8e:9a:f6:b5:cf:44:cd:fb:74:68:7e:af:e1:
         68:fd:e3:ef:3f:a1:e1:44:cd:4c:7a:34:ad:43:5d:37:54:32:
         4f:0e:ac:ac:72:61:d5:4a:cb:b1:f9:54:fa:23:e5:21:41:ab:
         c0:62:9c:4a:b5:af:5a:5b:a3:13:0f:67:35:1d:49:04:44:e1:
         a5:d6:bd:71:97:84:1d:1d:11:e6:80:2b:d9:87:2e:5d:99:06:
         aa:4e:b3:24:64:01:19:15:28:62:5f:31:dc:31:93:3b:9b:c4:
         50:cc:8c:ac:58:2d:8d:15:e1:bd:80:2d:18:e8:dd:f7:91:e7:
         cb:db:ef:51:ba:4f:56:aa:39:97:f5:da:5d:6a:23:ba:ee:72:
         27:5a:51:58:56:fa:28:21:3a:c7:55:a8:89:9d:28:5f:4f:c3:
         99:b6:0d:47:00:17:2c:61:05:ba:19:7a:f7:b4:06:c3:3f:85:
         67:80:13:1b:8a:1b:84:df:d0:70:96:ef:f6:58:98:50:ce:1a:
         ed:54:b8:ac:98:fa:d1:bc:9d:66:59:1e:e8:93:f1:e2:0a:0f:
         29:7a:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org