Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34332e302f32342d3234203d3e203631373531.roa
File:                     3136382e3232382e34332e302f32342d3234203d3e203631373531.roa (raw, json)
Hash identifier:          OCVIMoWpNpACcuGP10+W+tLQZGfAeP+mTXIX+P0ZEss=
Subject key identifier:   58:76:74:59:F6:FF:D0:8A:F7:6B:98:FA:98:8D:67:C6:DD:31:2A:F5
Certificate issuer:       /CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Certificate serial:       0F7C6ABDC0FAC7BAA38614D7C21F87921B778C52
Authority key identifier: CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34332e302f32342d3234203d3e203631373531.roa
Signing time:             Fri 15 Sep 2023 20:39:23 +0000
ROA not before:           Fri 15 Sep 2023 20:34:23 +0000
ROA not after:            Fri 13 Sep 2024 20:39:23 +0000
asID:                     61751
IP address blocks:        168.228.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7c:6a:bd:c0:fa:c7:ba:a3:86:14:d7:c2:1f:87:92:1b:77:8c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
        Validity
            Not Before: Sep 15 20:34:23 2023 GMT
            Not After : Sep 13 20:39:23 2024 GMT
        Subject: CN=58767459F6FFD08AF76B98FA988D67C6DD312AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:b3:43:04:7b:90:44:02:38:44:3a:ce:e1:
                    bd:27:69:3c:aa:fc:37:50:bf:5f:31:dc:0c:1a:be:
                    7f:42:02:e7:5d:fd:30:a7:27:19:7c:ec:c6:7b:98:
                    c5:e4:1d:77:e8:39:bd:6d:af:7f:bf:ed:79:e1:0d:
                    68:22:1d:ce:ea:d0:c0:c0:05:77:2d:61:f1:5f:cd:
                    53:5b:e5:8b:15:a2:f1:9f:d7:bb:e9:b9:48:f0:0b:
                    38:c3:7b:bd:eb:5b:9d:0d:c5:d4:87:f0:8d:d6:d2:
                    52:92:a4:d1:8d:f8:13:0f:5a:ba:5b:9a:4a:03:da:
                    0b:fe:8a:34:81:06:b6:1b:34:52:ca:18:59:6d:78:
                    13:9c:73:f4:42:2e:49:ed:26:d5:8e:fb:14:a0:5e:
                    9d:5b:0f:b8:c1:1a:03:14:dd:a2:23:cb:ad:cc:e4:
                    bf:34:c3:84:7d:4d:ef:2b:de:98:be:d2:26:1a:60:
                    84:f8:b3:eb:5a:64:44:31:47:36:b4:c3:14:bc:39:
                    eb:2a:e9:8d:05:75:76:44:bd:0f:4a:d6:c4:3f:b7:
                    d2:90:41:e7:25:29:84:e6:d4:0e:90:21:4d:92:c4:
                    3a:42:df:ab:f5:e0:0a:b9:53:a0:2d:88:b5:ac:10:
                    89:2a:ed:9b:84:dc:ce:6b:06:d0:1e:31:56:98:3b:
                    7b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:76:74:59:F6:FF:D0:8A:F7:6B:98:FA:98:8D:67:C6:DD:31:2A:F5
            X509v3 Authority Key Identifier:
                keyid:CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34332e302f32342d3234203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:19:ac:2e:9f:90:bf:03:af:34:97:9c:f8:fb:13:ac:9a:72:
         dd:b8:3c:f6:6c:88:86:71:a8:99:fb:7e:9d:0a:ae:9f:64:68:
         8b:3e:32:2f:fc:1a:da:3f:22:0a:81:70:19:83:cc:f9:73:57:
         7a:a9:82:79:af:b9:62:1d:a1:af:57:21:be:30:4e:f7:b6:fd:
         5a:29:1e:c5:b1:af:82:18:87:a7:b9:28:cb:9c:09:e1:65:f5:
         55:95:a6:06:72:ee:99:73:84:12:8d:fa:13:8b:b2:2b:9c:8b:
         a5:e3:a3:2c:ec:9e:65:f3:bc:61:c5:30:26:07:8a:bc:a7:f0:
         2f:cb:2b:ee:45:b4:ff:80:bb:62:95:2b:04:b0:f3:54:0a:16:
         ea:1a:5e:89:0e:a0:8f:c6:9d:82:3d:90:3c:87:ab:39:05:f5:
         f2:74:4b:4e:63:74:69:90:e0:4b:27:e6:89:fe:49:57:91:42:
         44:30:52:43:38:81:94:e3:02:f4:7d:1a:d1:da:df:34:35:86:
         c0:62:6c:a1:c9:f0:7c:e1:65:7b:8c:2b:9d:62:2f:e5:d8:c1:
         08:b4:cd:13:78:9d:9e:fd:2e:2d:3b:0b:7a:cd:2c:81:eb:b7:
         26:83:ad:73:19:da:4b:bb:dc:94:d1:c4:f4:5c:a5:d7:a7:9d:
         16:63:7d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:36 2024 by rpki-client on console-ams.rpki-client.org