Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3234203d3e203631373531.roa
File:                     3136382e3232382e34302e302f32322d3234203d3e203631373531.roa (raw, json)
Hash identifier:          ZrRa2V75DEmLege8ooC5Sl6xOy5ZYctkpTNzr5omO2I=
Subject key identifier:   8B:64:3C:68:EA:5E:79:B5:A2:E4:94:43:DD:36:C2:CD:D0:24:50:CA
Certificate issuer:       /CN=469A53B9F91A9A8071D2848E6D2024DF31F63E43
Certificate serial:       60B4D4D429551CE65D465060A0D8ED28A96644E3
Authority key identifier: 46:9A:53:B9:F9:1A:9A:80:71:D2:84:8E:6D:20:24:DF:31:F6:3E:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/469A53B9F91A9A8071D2848E6D2024DF31F63E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3234203d3e203631373531.roa
Signing time:             Thu 20 Oct 2022 20:44:08 +0000
ROA not before:           Thu 20 Oct 2022 20:39:08 +0000
ROA not after:            Thu 19 Oct 2023 20:44:08 +0000
asID:                     61751
IP address blocks:        168.228.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b4:d4:d4:29:55:1c:e6:5d:46:50:60:a0:d8:ed:28:a9:66:44:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469A53B9F91A9A8071D2848E6D2024DF31F63E43
        Validity
            Not Before: Oct 20 20:39:08 2022 GMT
            Not After : Oct 19 20:44:08 2023 GMT
        Subject: CN=8B643C68EA5E79B5A2E49443DD36C2CDD02450CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:3c:fb:f5:ac:61:9c:cc:5b:63:90:3b:f0:
                    af:4f:22:1e:ab:ec:6f:03:d5:b8:76:a6:bc:30:36:
                    27:38:83:0d:63:03:5c:a4:eb:84:1c:a9:1f:05:55:
                    9f:c3:17:ac:5f:db:1a:70:81:ea:24:d9:4c:6c:c3:
                    71:21:8e:e0:e6:af:ab:cd:ba:48:6a:db:bd:08:03:
                    85:26:40:d9:f6:43:f2:f5:21:2f:20:4c:9d:f4:7f:
                    7f:f7:3a:d0:1b:aa:0a:1b:d2:85:3a:8d:86:ac:c1:
                    0c:f9:7b:23:37:e3:b5:98:86:de:53:7b:72:0d:32:
                    3c:d9:dc:3e:67:dc:03:c5:0b:fd:db:df:b0:03:eb:
                    18:4c:d7:63:11:9f:b6:45:95:f3:55:81:f1:fb:84:
                    b5:4c:12:d4:fe:2a:93:15:b9:80:bb:70:7c:a7:85:
                    77:25:42:e4:7a:83:07:58:9c:55:e3:3f:e3:53:c2:
                    90:4a:d4:08:94:c7:d5:d8:01:4a:04:bb:a2:4e:fd:
                    f1:c3:c7:56:9c:ff:ea:ff:52:b7:02:87:69:e2:dc:
                    e3:e5:8e:ad:39:bc:c2:fe:0d:63:58:ab:a2:a1:8b:
                    15:3b:91:3c:20:1e:e3:cc:47:f6:d2:7d:ed:54:14:
                    42:33:f7:95:e9:67:83:1e:3b:a3:9f:bc:b1:d6:b7:
                    f8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:64:3C:68:EA:5E:79:B5:A2:E4:94:43:DD:36:C2:CD:D0:24:50:CA
            X509v3 Authority Key Identifier:
                keyid:46:9A:53:B9:F9:1A:9A:80:71:D2:84:8E:6D:20:24:DF:31:F6:3E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/469A53B9F91A9A8071D2848E6D2024DF31F63E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/469A53B9F91A9A8071D2848E6D2024DF31F63E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3234203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:ca:bc:64:64:b0:02:e6:8e:8b:16:3f:3f:aa:1b:3a:c8:99:
         6b:59:62:68:b0:4e:5a:1f:91:ef:bb:ef:fb:09:48:e1:4a:6d:
         6d:a1:6b:4e:66:df:fc:cc:bc:e4:3a:53:b2:38:37:48:69:e1:
         59:06:44:fc:b0:72:8b:f3:28:d5:45:77:8e:d5:28:7a:34:81:
         0b:7f:80:86:51:3c:67:91:42:fd:66:0d:32:1e:92:51:44:87:
         f2:71:29:93:05:3b:ff:2b:9b:5f:db:a0:8f:ba:92:b7:42:03:
         3f:c2:37:bb:06:ed:ea:ed:e0:ab:75:e6:4e:54:b7:dd:51:df:
         14:d2:37:cc:85:0d:95:88:8c:c6:b7:e4:aa:78:aa:d5:7c:00:
         4b:39:2f:84:05:66:0e:66:2a:97:f2:4e:b2:31:c7:31:19:ee:
         2e:92:f2:d0:27:e6:81:d0:26:90:d9:9a:19:3e:f7:f0:69:6f:
         57:4b:56:ea:ea:74:77:cd:95:33:38:26:0c:ce:dd:40:bf:b0:
         b7:0d:45:73:fc:60:e3:6d:23:0a:dc:e0:f3:63:3f:90:40:b5:
         9a:fa:46:32:81:c9:76:1f:e5:25:57:45:25:b8:2f:be:24:88:
         7d:47:07:4a:5a:c0:16:b3:b3:40:21:13:ea:6b:32:27:d9:81:
         0c:33:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org