Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3136382e3139342e3232382e302f32322d3234203d3e203238353830.roa
File:                     3136382e3139342e3232382e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier:          ZGPuVX8cMfOBkVDU6NF2z6oLKojXZ+pYwqcnDHSzKO8=
Subject key identifier:   9E:DE:19:05:1F:D1:04:3E:85:E0:9B:80:E1:D4:01:20:60:99:A3:8B
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       6321CFCE082A723F596F4419441383517C1A24A8
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3136382e3139342e3232382e302f32322d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:07 +0000
ROA not before:           Thu 19 Oct 2023 19:10:07 +0000
ROA not after:            Thu 17 Oct 2024 19:15:07 +0000
asID:                     28580
IP address blocks:        168.194.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:21:cf:ce:08:2a:72:3f:59:6f:44:19:44:13:83:51:7c:1a:24:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:07 2023 GMT
            Not After : Oct 17 19:15:07 2024 GMT
        Subject: CN=9EDE19051FD1043E85E09B80E1D401206099A38B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:c2:af:d7:c9:bf:a5:49:8d:8a:37:5c:3c:
                    69:f6:05:8d:b8:a4:c7:b6:c6:33:a0:28:0b:06:cf:
                    e6:b2:86:a4:ae:bd:3d:e6:ef:0e:5e:04:c0:06:c2:
                    72:76:7b:87:eb:04:dc:06:fc:d6:9c:f8:44:b8:aa:
                    6e:60:b9:63:61:4e:c6:d4:fc:27:5f:d7:1c:94:b7:
                    16:9e:29:9e:3e:f6:6d:3b:78:1c:f6:4d:37:dc:39:
                    61:6e:9c:94:33:50:97:f3:2d:63:80:04:53:a9:a6:
                    90:9d:39:84:e4:d5:e3:e8:c6:d4:5b:69:91:19:42:
                    9c:3b:4d:7f:e2:a4:c6:2b:80:22:92:e7:18:de:41:
                    f8:6c:d4:87:70:10:d2:c7:6b:17:b8:76:49:d5:15:
                    35:1e:ef:0d:e6:1c:ad:09:77:b4:72:5f:66:60:61:
                    2b:d1:d9:16:43:76:ac:5a:46:aa:db:68:b6:0f:d1:
                    c8:f5:4e:71:a1:65:0b:bd:49:4a:44:31:46:48:7f:
                    c3:9c:95:f4:64:b0:16:d1:2c:fb:e0:2f:2d:87:ae:
                    9a:11:21:2a:63:95:18:ed:8c:26:14:62:d9:ab:5d:
                    f2:ee:ae:04:b5:38:ce:f9:76:85:a1:76:85:9e:34:
                    be:2c:0f:a5:9d:f9:7e:a0:e2:ba:df:39:15:54:63:
                    db:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DE:19:05:1F:D1:04:3E:85:E0:9B:80:E1:D4:01:20:60:99:A3:8B
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3136382e3139342e3232382e302f32322d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:e5:98:46:b3:d4:91:12:9d:e7:90:7f:1d:95:8b:43:68:74:
         86:f7:d5:50:48:b6:5b:ab:33:ac:39:ec:80:cc:ab:5a:43:f5:
         66:5e:f4:30:9a:41:cc:e9:b8:c1:4d:d7:5b:9c:26:aa:5f:a6:
         11:4c:67:99:50:11:8c:c5:74:e5:db:25:83:4e:37:43:61:cd:
         e3:e7:a7:ed:2a:34:f0:f6:99:27:dc:b1:a0:b9:2c:db:eb:a7:
         23:a4:80:dd:b8:ac:2e:43:e5:0e:8b:e6:fe:e8:ae:cb:2c:38:
         3e:80:cc:12:db:4e:cd:fb:f4:1a:32:db:b5:03:a9:02:0e:dd:
         47:56:36:59:90:0f:90:c5:d5:de:fe:3a:75:64:ad:3d:e9:19:
         3f:e1:ca:cd:ff:1f:12:a9:67:ce:c0:f8:8f:86:7e:eb:d4:0b:
         3e:ad:19:6d:e5:8b:1b:52:3b:78:b3:ef:3b:73:18:32:7f:56:
         db:13:6b:bb:86:97:77:f8:b4:0b:a0:d5:17:b4:65:82:d6:cd:
         6f:07:3b:cf:17:4c:4a:03:9e:6f:82:d0:01:c3:58:43:91:f0:
         34:a7:de:81:6d:2c:01:46:f2:62:ab:4d:dc:5d:69:d7:09:05:
         68:00:7e:1b:d9:28:49:ba:a6:63:7a:3b:1d:24:7c:b3:ce:2e:
         03:3a:f3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org