Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/0/3136382e3233322e342e302f32322d3332203d3e20323634393230.roa
File:                     3136382e3233322e342e302f32322d3332203d3e20323634393230.roa (raw, json)
Hash identifier:          3oF156jjtpy0ccffqo+SGvz2GFImycxly8uxG/IOtJU=
Subject key identifier:   B7:B3:35:43:DF:E8:C7:64:34:99:E0:59:89:53:42:62:21:46:D7:60
Certificate issuer:       /CN=AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF
Certificate serial:       18F93E91D9B9DEC7D7D17150605B4246B03D9B42
Authority key identifier: AE:7F:53:DA:33:01:84:7B:E9:FC:FB:81:FB:BD:12:76:43:2F:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/0/3136382e3233322e342e302f32322d3332203d3e20323634393230.roa
Signing time:             Tue 18 Apr 2023 16:35:56 +0000
ROA not before:           Tue 18 Apr 2023 16:30:56 +0000
ROA not after:            Tue 16 Apr 2024 16:35:56 +0000
asID:                     264920
IP address blocks:        168.232.4.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f9:3e:91:d9:b9:de:c7:d7:d1:71:50:60:5b:42:46:b0:3d:9b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF
        Validity
            Not Before: Apr 18 16:30:56 2023 GMT
            Not After : Apr 16 16:35:56 2024 GMT
        Subject: CN=B7B33543DFE8C7643499E059895342622146D760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:a1:7b:fa:e3:a6:65:04:bf:64:79:c4:b1:
                    f8:68:d1:66:d4:66:8a:cd:69:8a:89:81:19:88:08:
                    2d:27:58:a1:d3:a9:11:c9:31:52:ff:df:dc:fa:e7:
                    f2:6e:e6:c8:fa:e8:c2:de:4b:71:fd:de:5c:d1:95:
                    01:1c:f1:6c:10:65:2e:3a:70:04:bc:1c:41:7c:e2:
                    7e:7d:ce:6a:29:c3:05:21:f3:1c:25:dc:8a:45:a1:
                    79:b5:f4:9e:f9:48:70:54:3d:69:5d:bf:57:16:6e:
                    dc:05:b3:32:63:1a:ad:61:67:08:8b:91:8b:f3:98:
                    c1:a6:c5:e2:2f:a1:1d:ce:6d:ab:33:00:8d:73:a1:
                    36:9f:ac:49:6f:f4:ec:3a:d0:b7:46:8d:83:25:11:
                    f1:76:17:8f:26:b9:be:86:78:8b:bb:70:79:84:89:
                    e0:fc:9a:94:ac:71:ff:a6:c3:cc:2a:72:44:c0:c3:
                    f6:0e:4c:2a:34:96:82:ee:6a:1e:00:59:d7:34:58:
                    cd:f0:59:f6:ab:ea:78:90:c3:64:17:99:fa:1d:67:
                    76:ee:f7:ce:df:f5:c5:f2:8b:59:07:f3:32:61:cf:
                    ae:ea:77:64:8b:37:54:bb:df:89:91:89:37:b6:91:
                    a0:70:c2:8b:ac:0b:ad:86:74:34:9a:04:1c:c3:d3:
                    ac:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B3:35:43:DF:E8:C7:64:34:99:E0:59:89:53:42:62:21:46:D7:60
            X509v3 Authority Key Identifier:
                keyid:AE:7F:53:DA:33:01:84:7B:E9:FC:FB:81:FB:BD:12:76:43:2F:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/0/AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/0/3136382e3233322e342e302f32322d3332203d3e20323634393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:e0:48:7a:08:df:a5:7f:2b:ef:fb:c2:82:b8:fa:a3:d9:8f:
         5a:a1:76:b3:c3:a0:c4:9a:be:59:f2:ca:23:ed:44:48:8c:5f:
         36:b7:01:73:c3:af:b8:ce:41:b1:b6:56:41:a0:f5:79:64:28:
         37:2e:79:98:2c:16:1b:22:13:21:8e:5c:f3:5e:9f:ec:e0:28:
         43:d1:0e:ef:8b:2a:07:14:4b:27:fa:13:fa:98:a9:52:13:92:
         bd:76:61:1a:34:11:8c:bd:7f:66:31:24:8c:36:bf:b3:43:b8:
         bf:46:60:22:60:f0:bc:e0:f1:51:bb:ff:25:4a:f7:04:dd:76:
         71:82:77:68:2a:97:6b:47:11:f3:b4:6e:40:17:24:f0:df:a6:
         3c:5f:23:0c:75:0f:3f:49:72:af:e7:22:1f:2d:8d:2f:84:74:
         1f:71:66:62:60:59:30:18:d9:4a:ce:5f:ce:75:c6:5c:07:bb:
         e2:2e:53:cd:bd:a2:9a:3f:69:82:80:3b:62:d1:4f:7a:a2:e9:
         2c:85:90:41:06:c1:a1:97:84:ab:07:7a:49:bf:cd:d0:b6:7d:
         90:2d:c4:80:8a:41:32:f1:b5:61:44:42:0c:db:7e:7f:97:19:
         ef:43:c6:5b:2f:60:a7:c0:f7:15:0d:f6:d4:d9:55:35:4d:c9:
         f5:ae:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org