Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e302e302f32322d3332203d3e20323634383934.roa
File:                     3136382e3232382e302e302f32322d3332203d3e20323634383934.roa (raw, json)
Hash identifier:          54BprZyhMoVfafNdxQic59ZaDyYjpmZr1zpp+xEURGg=
Subject key identifier:   63:57:83:12:63:3D:35:BF:00:B5:18:A7:FD:19:28:16:1F:C1:96:46
Certificate issuer:       /CN=8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53
Certificate serial:       2E05B67B38EA1D92FB5CE7F94A545F7A62760FE3
Authority key identifier: 8B:36:FE:55:A9:D7:FA:60:24:3F:74:A2:0F:15:ED:B4:DC:E0:4B:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e302e302f32322d3332203d3e20323634383934.roa
Signing time:             Wed 05 Apr 2023 20:22:32 +0000
ROA not before:           Wed 05 Apr 2023 20:17:32 +0000
ROA not after:            Wed 03 Apr 2024 20:22:32 +0000
asID:                     264894
IP address blocks:        168.228.0.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:05:b6:7b:38:ea:1d:92:fb:5c:e7:f9:4a:54:5f:7a:62:76:0f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53
        Validity
            Not Before: Apr  5 20:17:32 2023 GMT
            Not After : Apr  3 20:22:32 2024 GMT
        Subject: CN=63578312633D35BF00B518A7FD1928161FC19646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:cd:e9:18:e6:a2:ad:04:e4:f3:7f:c3:35:
                    b0:7a:cb:d3:5c:1c:ce:91:d0:59:0b:68:34:4d:12:
                    59:f6:98:1d:f1:da:55:ec:d0:50:6b:ef:bd:f6:61:
                    82:ce:8a:24:a8:9d:93:1f:10:03:eb:ed:d8:1f:bc:
                    51:ff:9c:72:d3:f1:46:1f:59:96:c7:0a:0f:36:9f:
                    8b:2b:3b:a6:51:86:69:c3:da:24:87:2e:b7:aa:29:
                    a2:91:48:8a:68:36:86:67:e9:26:81:60:7a:03:f1:
                    85:fc:bd:9c:f3:3d:2e:f3:d5:e9:47:d8:1c:b4:be:
                    e7:2b:5c:6b:b1:89:04:05:7d:95:45:ae:80:c9:7a:
                    37:f6:b9:a7:94:e2:33:16:59:8d:18:0d:a8:7b:65:
                    7a:ba:21:6a:cd:df:19:3c:0f:2e:ad:05:d4:6a:4c:
                    b8:04:0c:59:a7:c2:f3:29:c2:aa:19:22:8a:f1:bc:
                    8b:02:dd:b1:2a:bf:1e:45:4b:36:8e:96:a8:25:7a:
                    52:fb:49:9b:7e:66:58:fd:48:e6:d3:45:37:e3:07:
                    bc:5b:1b:0e:9a:a8:02:80:e6:aa:91:77:b6:cb:d3:
                    28:87:ae:0e:07:7c:ea:c3:d0:e5:70:c3:7b:5d:e5:
                    36:88:5a:d4:83:be:7c:ce:fc:ba:7f:18:68:80:31:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:57:83:12:63:3D:35:BF:00:B5:18:A7:FD:19:28:16:1F:C1:96:46
            X509v3 Authority Key Identifier:
                keyid:8B:36:FE:55:A9:D7:FA:60:24:3F:74:A2:0F:15:ED:B4:DC:E0:4B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/3136382e3232382e302e302f32322d3332203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:99:e2:59:b6:c1:3a:cf:a3:66:12:97:0a:ca:17:5f:95:07:
         53:c3:cc:65:4d:72:86:b6:86:7c:5e:83:a5:74:d8:3d:15:6f:
         34:fd:2f:fa:ff:0d:b5:94:ad:ce:0b:03:18:fd:ba:6e:7b:8e:
         58:29:90:9d:a4:6e:3c:99:4f:e9:51:15:52:72:85:94:d9:10:
         9d:bf:60:ef:9c:3a:f0:5d:2a:e8:cd:97:72:64:b5:98:53:db:
         27:0c:8a:06:7c:01:cf:6d:7d:d2:15:91:64:68:ae:2a:a6:82:
         33:1b:99:b9:d7:1d:c4:11:63:f2:9f:f7:f9:3a:53:c5:03:0d:
         d2:2d:c8:60:f5:37:9e:d1:d8:25:c9:c5:49:bc:a7:5a:a9:3a:
         4e:49:40:be:cf:81:25:0d:1a:54:82:70:ac:8d:4d:a9:65:b3:
         3f:14:32:6e:a6:5b:e8:f4:3e:18:90:41:90:53:c8:a6:41:62:
         d2:3b:96:f6:15:65:77:4b:d1:8e:7f:49:a6:58:8d:83:79:56:
         4d:7f:88:a5:01:a7:3f:71:60:a8:ff:83:a6:22:6e:02:b8:b7:
         5d:e4:bf:eb:2e:e6:48:57:73:63:cb:c4:3f:3d:0a:f7:50:af:
         77:39:2a:03:3d:15:03:3c:cf:39:07:a3:fc:86:e6:9e:b6:4c:
         5f:7d:ff:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org