Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa
File:                     3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa (raw, json)
Hash identifier:          Hfzbx+Vb3oLyJ8+U6qiS4g3OdxhFHDYjmaQ1FdAH2ng=
Subject key identifier:   0B:54:B6:E5:09:84:2A:F2:D7:84:C9:F6:BD:63:DA:A0:7A:28:21:09
Certificate issuer:       /CN=68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E
Certificate serial:       079F549CAF9E967BDA16B74662705A0B3C4F0DCF
Authority key identifier: 68:F7:E0:63:7F:23:C3:E9:F6:44:A9:B6:53:17:04:BB:CB:E7:AA:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa
Signing time:             Thu 21 Mar 2024 20:53:05 +0000
ROA not before:           Thu 21 Mar 2024 20:48:05 +0000
ROA not after:            Thu 20 Mar 2025 20:53:05 +0000
asID:                     264881
IP address blocks:        168.227.172.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9f:54:9c:af:9e:96:7b:da:16:b7:46:62:70:5a:0b:3c:4f:0d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E
        Validity
            Not Before: Mar 21 20:48:05 2024 GMT
            Not After : Mar 20 20:53:05 2025 GMT
        Subject: CN=0B54B6E509842AF2D784C9F6BD63DAA07A282109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:07:d8:a9:67:64:3e:f1:c8:05:fe:eb:bb:
                    ff:78:b5:6b:98:2a:08:f7:cf:27:80:10:df:e3:02:
                    46:23:11:9c:66:8e:64:ff:30:85:cb:52:e6:38:66:
                    d3:b7:46:04:18:fe:7d:d7:66:19:d1:0e:ef:15:ab:
                    e5:84:b7:1a:6e:73:ef:d7:e4:51:cd:3a:8a:ed:c5:
                    ec:a2:b4:60:ae:f7:bd:1c:8d:4d:da:2b:22:b3:a5:
                    7f:f5:2c:ce:5b:04:eb:b4:81:f4:3b:cb:36:ca:7a:
                    14:d9:a1:f0:a4:86:45:92:3c:a4:b8:fb:2c:1a:34:
                    cf:bd:fa:ce:ef:8a:d6:22:4b:82:9b:a5:62:ea:68:
                    3b:04:aa:38:c0:ec:db:20:1a:44:72:5d:b8:2a:48:
                    a9:ac:6d:81:6b:f5:0a:e8:c5:73:7f:70:29:0e:ab:
                    2d:8b:0d:4c:8e:9e:7c:ef:65:4c:ed:1a:49:16:2c:
                    be:0d:d9:01:44:3c:a1:21:60:78:08:d9:b9:ff:02:
                    d9:6e:9e:38:76:33:48:0a:d5:40:b8:8f:a2:70:50:
                    df:f9:13:f2:24:6f:fa:12:a7:f5:22:40:ba:01:12:
                    75:19:75:65:20:ff:1d:20:81:46:af:08:34:29:77:
                    b6:50:1a:95:62:eb:e6:ff:89:0d:d6:75:24:e4:fb:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:54:B6:E5:09:84:2A:F2:D7:84:C9:F6:BD:63:DA:A0:7A:28:21:09
            X509v3 Authority Key Identifier:
                keyid:68:F7:E0:63:7F:23:C3:E9:F6:44:A9:B6:53:17:04:BB:CB:E7:AA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:fd:6d:b7:cd:cf:46:8b:12:c6:34:5c:6c:fe:62:48:ad:f2:
         ef:ef:1d:f5:09:a8:d3:9c:04:1a:64:82:d9:a7:8a:bc:09:11:
         fa:fd:73:96:ba:b2:c8:bd:dc:87:67:e9:1f:1e:18:ec:e5:17:
         5b:3d:a8:98:5b:cc:2c:01:0b:ea:8d:30:3b:7c:0b:18:9c:de:
         40:d9:e8:83:04:f1:14:89:fb:f6:6a:88:3a:1c:67:dd:f6:a1:
         e8:0e:96:40:3b:7f:87:86:d1:67:ef:70:14:8d:1a:0a:19:d8:
         23:bb:54:cc:83:93:9d:95:01:c5:ca:8d:26:8d:a2:f9:44:e0:
         c2:bd:ef:36:b6:92:30:39:f3:70:a9:fa:9e:c8:5b:ae:d4:af:
         0a:01:72:ae:03:f2:db:a9:76:09:63:32:7e:fd:a3:52:a3:d6:
         1b:8d:3a:de:d2:99:e9:c8:95:45:33:23:0e:af:1c:70:99:bf:
         f3:03:b4:92:85:32:9e:99:ef:1f:6e:4c:46:bc:06:99:e7:bc:
         99:65:65:1f:b9:60:ec:0c:01:8c:0f:9d:0b:c8:31:9b:73:b2:
         1d:d3:89:9c:65:a9:23:ec:aa:02:e7:87:7f:94:57:9c:86:d9:
         6f:6d:a5:49:1d:27:63:f5:43:fa:e9:a1:f6:d5:90:7e:be:92:
         c2:b5:2a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org