Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34322e302f32342d3234203d3e203631373531.roa
File:                     3136382e3232382e34322e302f32342d3234203d3e203631373531.roa (raw, json)
Hash identifier:          uU6KqRJyK5HUh/GONR4bmgSHL2ph9v+MJ/CLkJ39HOU=
Subject key identifier:   1A:15:32:08:5F:A8:3B:71:6D:5C:06:23:B1:F7:91:08:AE:ED:50:B4
Certificate issuer:       /CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Certificate serial:       747011215CF45A7F8B94DC94655E7EFFDF5542EB
Authority key identifier: CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34322e302f32342d3234203d3e203631373531.roa
Signing time:             Fri 15 Sep 2023 20:39:21 +0000
ROA not before:           Fri 15 Sep 2023 20:34:21 +0000
ROA not after:            Fri 13 Sep 2024 20:39:21 +0000
asID:                     61751
IP address blocks:        168.228.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:70:11:21:5c:f4:5a:7f:8b:94:dc:94:65:5e:7e:ff:df:55:42:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
        Validity
            Not Before: Sep 15 20:34:21 2023 GMT
            Not After : Sep 13 20:39:21 2024 GMT
        Subject: CN=1A1532085FA83B716D5C0623B1F79108AEED50B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:29:55:23:ad:13:8f:ad:95:b9:c7:c6:be:09:
                    2f:cd:f6:6e:fb:c7:f9:c1:7b:1c:ff:68:57:5f:f6:
                    e8:a1:ca:ac:47:20:8e:e0:35:55:d5:65:54:96:68:
                    ac:3a:db:11:8e:89:09:5d:02:d3:c1:15:1e:f9:4d:
                    2b:bd:2d:8d:cf:a7:06:2e:3d:79:1f:e5:13:a1:41:
                    22:6d:87:48:d1:9c:fe:ae:82:ac:e5:3b:9c:a0:c2:
                    71:f2:a1:1b:17:cf:78:11:87:bf:5c:1f:23:af:1e:
                    a1:c8:35:09:31:ca:b1:6d:e6:5f:0e:2e:3d:23:61:
                    c6:57:1e:a5:85:ba:75:ab:b3:65:9d:25:1b:23:dd:
                    73:b1:2a:9e:b3:46:05:35:13:3e:3e:8a:2e:bb:e0:
                    17:08:fd:aa:94:00:60:8d:4f:e6:d8:cd:f7:17:8f:
                    2d:f6:9b:2c:a5:54:07:7d:22:da:e0:d5:74:50:45:
                    2c:8c:ec:73:ad:9c:8e:6d:8e:43:82:37:aa:ad:80:
                    7f:c7:18:5d:f3:c6:8b:67:8a:30:79:46:4b:e5:f6:
                    83:47:f5:12:bd:5d:b0:1c:08:a8:fa:7c:b7:0e:50:
                    6d:23:89:56:58:9e:df:42:1a:72:a2:2d:e5:74:89:
                    2c:cf:06:16:a9:e3:7a:d7:0a:7f:d6:78:62:31:1c:
                    2d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:15:32:08:5F:A8:3B:71:6D:5C:06:23:B1:F7:91:08:AE:ED:50:B4
            X509v3 Authority Key Identifier:
                keyid:CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34322e302f32342d3234203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:de:72:11:e7:2f:b5:a9:88:a9:68:6f:06:6d:03:38:f2:af:
         a9:2a:6a:59:c0:9f:95:b9:d1:78:11:28:10:2e:89:d2:42:21:
         dd:ab:64:c5:68:e7:83:79:35:b7:a4:26:ba:d1:1b:f6:9f:11:
         8f:af:4a:26:c4:ea:3b:f3:5b:bb:85:a5:7d:02:9c:1c:81:f9:
         a2:ed:e0:7e:26:2a:b3:4d:e5:a2:05:35:db:e2:ed:42:d6:d9:
         e6:0a:90:ec:c4:42:0a:77:85:70:0d:86:87:77:71:c1:d0:83:
         c0:ce:c4:9e:2f:43:35:6e:dd:fe:a6:b1:32:16:3d:17:87:05:
         ad:17:60:6c:44:92:a4:8a:a2:d7:40:e0:27:bc:ab:51:c4:bf:
         94:ac:61:36:0e:cc:6b:21:9e:a2:d7:be:db:85:1f:fc:32:3f:
         6c:0a:9b:26:d2:24:81:21:69:82:30:5b:4a:6a:08:86:ea:ac:
         b1:b2:c9:8d:ee:ea:2b:14:44:79:17:43:70:76:7e:59:78:ee:
         89:c1:d3:3e:3b:11:49:fc:e9:4e:54:23:d6:73:4d:61:d3:aa:
         2c:27:3d:91:e4:a7:5a:6e:84:4b:54:29:fc:07:e5:fa:8c:c7:
         6b:a9:c6:b9:bf:22:df:6d:dd:2a:b7:be:24:16:f3:ab:69:f7:
         41:1a:92:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:36 2024 by rpki-client on console-ams.rpki-client.org