Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa
File:                     3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa (raw, json)
Hash identifier:          AfRxBTuX4dGzgFnrTXA7Gd9iGmLKe9enkdASuRni1vg=
Subject key identifier:   32:ED:49:B9:32:0C:EC:32:73:45:28:EC:28:95:B8:83:C1:FD:62:08
Certificate issuer:       /CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
Certificate serial:       64F24B99142BDA6128BE94B48FB38D967ACA802C
Authority key identifier: B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa
Signing time:             Tue 12 Mar 2024 18:03:11 +0000
ROA not before:           Tue 12 Mar 2024 17:58:11 +0000
ROA not after:            Tue 11 Mar 2025 18:03:11 +0000
asID:                     264879
IP address blocks:        168.227.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f2:4b:99:14:2b:da:61:28:be:94:b4:8f:b3:8d:96:7a:ca:80:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
        Validity
            Not Before: Mar 12 17:58:11 2024 GMT
            Not After : Mar 11 18:03:11 2025 GMT
        Subject: CN=32ED49B9320CEC32734528EC2895B883C1FD6208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:07:5b:13:63:45:45:e7:a2:6b:0f:cd:e7:
                    b8:1f:11:f5:f5:6d:f4:45:79:ca:d5:3a:47:9c:d9:
                    42:9a:48:94:d4:eb:44:d3:65:da:b3:3f:4a:97:b3:
                    26:ed:f9:b2:fe:08:62:b8:f1:ea:0c:7f:71:21:47:
                    c2:ea:eb:b0:1f:29:1a:2e:d3:65:73:e7:7d:72:f2:
                    50:2e:fb:a7:cc:dc:db:58:0a:f2:c7:62:2f:a8:7e:
                    76:b9:77:38:6d:e9:66:a2:c2:95:c7:14:05:cd:30:
                    c7:59:78:a3:4c:d5:0a:2f:9c:2f:d4:b2:14:59:17:
                    5b:22:8a:f6:c1:07:fb:e9:0e:10:7f:e9:69:84:2d:
                    e1:c3:fa:3c:fb:9a:97:d9:af:f5:c5:ca:7a:79:3c:
                    20:e8:51:47:fc:60:05:45:08:3a:14:b3:93:3b:40:
                    b4:d9:db:f3:cb:25:20:e2:5a:89:87:d3:76:7b:7c:
                    99:eb:e2:fb:03:0e:11:9b:d6:b6:30:c7:f0:31:8a:
                    64:d7:0f:f4:23:09:b3:25:bb:7d:25:70:fb:41:63:
                    09:9a:40:92:9f:ed:09:4e:f1:e1:d2:26:e7:62:52:
                    35:6f:2d:30:4e:e6:2d:7c:5d:ae:6b:25:6e:d9:87:
                    2d:6c:e9:97:50:8a:81:92:f1:25:94:e3:86:17:4e:
                    0a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:ED:49:B9:32:0C:EC:32:73:45:28:EC:28:95:B8:83:C1:FD:62:08
            X509v3 Authority Key Identifier:
                keyid:B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:18:da:42:8e:cb:47:7d:4c:fa:fc:c8:ec:59:6f:f3:1f:6d:
         c8:2e:5b:c8:80:e5:30:64:cf:f7:e4:11:ad:a0:72:01:24:7a:
         88:81:0a:68:fc:23:fc:ed:2c:c5:26:7d:1d:73:76:46:86:d5:
         53:0a:6c:99:9b:fa:3b:e6:de:e4:8e:47:5b:dc:6b:23:33:f4:
         f7:03:73:ae:c1:d2:50:ae:9f:b3:7c:e3:e2:2b:e7:dd:c1:f9:
         28:82:c2:37:45:2a:f3:69:9d:37:58:f5:9f:d8:6d:82:79:52:
         cf:98:82:6e:cc:8e:b4:81:c2:ec:16:f8:31:3f:29:1f:35:1c:
         75:dc:bc:94:fa:2e:e5:73:2a:34:7d:82:0e:ca:4e:66:b2:a4:
         32:bf:93:bc:05:97:2d:6b:ff:d9:18:ff:c5:60:ac:00:52:df:
         75:c4:ab:97:25:45:3b:ca:27:06:00:51:7b:98:14:28:d2:78:
         66:b3:de:10:35:d0:04:34:26:41:6f:fd:b8:98:a3:5b:cc:36:
         fb:1c:0b:45:3a:80:ea:d1:09:11:1c:cc:ef:ab:4d:c1:a6:8e:
         a0:82:a3:53:e7:1b:0e:71:4f:5d:39:5e:d4:f6:6c:32:66:0b:
         23:1a:d8:bd:8d:d4:1b:00:08:04:b8:9a:ee:8d:05:2a:5f:69:
         3b:f2:73:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org