Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa
File:                     3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa (raw, json)
Hash identifier:          BB/NcinXRGlCPbADYT82FGLEeP0ZGGlJsw+CEJWLMhQ=
Subject key identifier:   95:56:8B:AD:D4:50:8C:B0:34:CB:E6:97:90:3C:0F:47:D5:89:3A:93
Certificate issuer:       /CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
Certificate serial:       09A25E261E776828C0A730A16AD13010C56FBC38
Authority key identifier: B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa
Signing time:             Tue 12 Mar 2024 18:03:02 +0000
ROA not before:           Tue 12 Mar 2024 17:58:02 +0000
ROA not after:            Tue 11 Mar 2025 18:03:02 +0000
asID:                     264879
IP address blocks:        168.227.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a2:5e:26:1e:77:68:28:c0:a7:30:a1:6a:d1:30:10:c5:6f:bc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
        Validity
            Not Before: Mar 12 17:58:02 2024 GMT
            Not After : Mar 11 18:03:02 2025 GMT
        Subject: CN=95568BADD4508CB034CBE697903C0F47D5893A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:81:f4:5d:78:3d:3b:57:f7:62:b3:5f:56:
                    29:48:ab:83:aa:92:c4:fa:01:2e:8e:44:5b:1c:c7:
                    f4:06:0f:04:d4:18:7d:74:76:eb:88:9e:f5:08:78:
                    c0:aa:73:99:3f:1b:4b:ec:9d:34:38:ec:6a:57:ab:
                    fb:60:ee:48:e6:7c:75:a1:ad:4c:17:60:ee:90:f6:
                    b9:b1:db:d1:2e:25:6c:0b:5d:c3:57:8f:d3:28:d1:
                    dc:e9:8c:fe:ce:ad:39:95:68:96:59:98:09:c6:1d:
                    f2:b1:d6:13:51:40:c9:76:0d:07:1a:8e:2c:fa:cc:
                    45:cb:8b:86:64:75:23:09:49:0f:d6:7c:e1:8c:39:
                    66:20:bb:57:61:d0:f4:d0:61:a4:4d:8f:f9:9f:b5:
                    5b:de:af:a8:54:27:c5:f1:d4:a7:75:a2:7c:33:8a:
                    54:66:c3:5d:2b:86:34:b1:c1:9b:98:07:f5:85:b1:
                    51:49:ca:71:48:cb:41:bc:2f:48:c0:bb:dd:08:53:
                    7e:29:1d:67:2f:30:d3:2c:9b:ea:88:64:fa:07:8c:
                    e7:06:c3:1c:b2:25:81:5e:af:74:d8:4d:65:72:15:
                    4f:db:d0:f9:ba:28:bd:4c:95:6b:9c:8b:d9:ff:3d:
                    48:51:54:20:09:57:fc:6c:5f:3c:36:70:d4:1e:53:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:56:8B:AD:D4:50:8C:B0:34:CB:E6:97:90:3C:0F:47:D5:89:3A:93
            X509v3 Authority Key Identifier:
                keyid:B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:f5:84:89:df:86:3a:6f:03:2b:b5:b5:56:4d:09:32:c8:9a:
         2d:67:5b:dc:5d:65:8f:1d:ce:3c:f1:9d:51:9e:d1:24:7d:9f:
         6c:57:6d:2b:02:71:ca:f8:ba:14:d7:ee:36:50:8f:be:d9:76:
         6e:45:28:80:09:d8:25:57:f5:eb:03:01:f6:18:41:25:74:9e:
         44:39:8e:0a:e7:8e:b7:c1:37:21:ac:4f:3e:e2:67:c6:72:1b:
         2d:be:db:94:fe:2c:34:1a:ac:b5:da:5b:9e:6f:3b:e5:80:cd:
         cf:b1:4b:45:2e:15:2f:16:f3:cf:5d:f7:4a:5c:18:5a:5a:10:
         cf:ca:3c:1b:17:88:9a:79:d1:90:c9:10:b4:cc:3a:70:2e:04:
         35:6a:4a:e8:49:e3:3d:51:3c:90:70:38:6a:97:9f:50:d1:a8:
         b3:ea:40:b4:29:d3:57:85:68:35:3b:e8:54:18:3d:a2:47:20:
         96:aa:b2:9f:f5:1c:2d:58:21:eb:bd:35:4e:1a:77:67:61:f1:
         f2:05:45:52:7c:8e:62:fc:80:c8:2e:11:c9:4d:9a:79:8d:96:
         fd:a7:86:1e:ad:62:2e:d6:e2:97:54:79:3c:fe:c6:ec:43:35:
         b8:18:b8:9a:a6:d2:db:30:fb:dc:78:68:a7:c6:ff:d8:05:c1:
         42:38:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org