Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32332d3233203d3e203631373531.roa
File:                     3136382e3232382e34302e302f32332d3233203d3e203631373531.roa (raw, json)
Hash identifier:          k9p9LCHIpu96074HT+5FnJQyFn8AHxobsevuV9VwOQo=
Subject key identifier:   5C:90:F4:AC:63:8E:C1:CF:59:A8:1B:06:AD:B1:73:AA:CA:5B:5D:EA
Certificate issuer:       /CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Certificate serial:       67BF50CA3F4814F994ECDC972A2F459C75FDA44B
Authority key identifier: CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32332d3233203d3e203631373531.roa
Signing time:             Fri 15 Sep 2023 20:39:10 +0000
ROA not before:           Fri 15 Sep 2023 20:34:10 +0000
ROA not after:            Fri 13 Sep 2024 20:39:10 +0000
asID:                     61751
IP address blocks:        168.228.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bf:50:ca:3f:48:14:f9:94:ec:dc:97:2a:2f:45:9c:75:fd:a4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
        Validity
            Not Before: Sep 15 20:34:10 2023 GMT
            Not After : Sep 13 20:39:10 2024 GMT
        Subject: CN=5C90F4AC638EC1CF59A81B06ADB173AACA5B5DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:89:3b:0f:d0:96:69:32:26:1d:a8:34:49:
                    2a:53:7d:77:10:63:2d:c5:62:b3:a5:c5:3d:8a:bc:
                    ad:ad:41:5b:16:62:6e:15:c1:82:50:ce:86:c3:0f:
                    a2:d5:72:30:8f:37:a0:f0:19:00:db:7c:2e:10:1f:
                    2d:59:77:1b:a5:f5:a7:5a:66:19:6d:81:40:0a:9c:
                    ac:70:77:83:15:10:a6:ad:5a:63:b7:7f:c7:89:c4:
                    52:23:cd:c5:3e:b9:2e:c8:dd:08:c1:e7:a5:18:38:
                    70:4a:19:2a:c1:39:dd:74:a3:4d:ea:e8:58:b5:76:
                    4b:d0:1f:d1:85:83:04:26:99:c0:97:65:8a:e1:60:
                    26:95:ad:92:d2:46:0d:25:6b:27:54:73:93:f6:99:
                    f8:59:83:0c:2b:6b:51:99:e4:9e:4f:55:71:46:2d:
                    a4:fe:d7:b9:e6:80:50:11:3d:07:8e:f9:5a:d3:59:
                    7b:4c:3a:b2:a7:08:6e:ba:b2:9d:12:ce:88:eb:09:
                    34:e3:94:6c:a2:1f:80:c7:ff:b3:4c:4a:f2:9a:6e:
                    5d:41:7e:ff:41:cb:d1:2f:8d:71:74:80:b4:3d:08:
                    e6:a2:64:f9:79:55:b7:77:7e:79:5a:00:af:ee:3f:
                    68:57:fc:f9:d2:88:01:63:b8:66:f4:50:72:0c:ae:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:90:F4:AC:63:8E:C1:CF:59:A8:1B:06:AD:B1:73:AA:CA:5B:5D:EA
            X509v3 Authority Key Identifier:
                keyid:CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32332d3233203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:3d:fd:87:fc:be:9c:86:28:db:2e:fc:6b:b6:e6:ae:94:db:
         5c:0f:64:8f:25:65:1c:f2:69:d1:f0:64:01:5c:95:d3:82:52:
         1a:00:f3:ed:40:1c:9b:6f:13:64:d8:bc:d4:d0:6c:42:09:c4:
         cb:60:a4:2f:c7:59:3f:d0:44:20:4c:06:3f:9a:2d:ae:ee:f6:
         88:bc:81:f5:d1:e2:eb:53:8b:16:d8:23:20:22:25:eb:bd:a4:
         7d:19:f6:8f:14:9a:cb:4c:d1:03:a4:86:92:f8:3c:9b:47:ea:
         9a:72:c3:cb:bc:d7:d0:8c:45:60:e0:44:b8:e8:3a:eb:2a:e0:
         b7:ca:77:98:2c:12:98:a5:67:00:ca:aa:bf:5a:0d:64:21:53:
         12:c4:59:56:25:34:81:30:e2:e0:6a:d2:81:b6:cd:bd:ea:8e:
         4e:2a:f1:80:f9:8d:d3:fe:c7:10:23:4d:5b:2d:69:63:e5:7b:
         be:dc:03:0b:d7:da:66:70:49:3f:03:87:49:67:6a:f9:82:57:
         59:f4:48:70:db:08:36:e2:5d:b6:18:73:28:4c:c1:a6:3d:a9:
         13:dd:e4:70:2f:51:82:cb:26:12:51:87:94:0b:38:e3:48:f6:
         aa:f6:09:29:25:9e:29:a2:a4:56:f7:0a:a4:1b:6e:a4:b5:47:
         92:c2:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:36 2024 by rpki-client on console-ams.rpki-client.org