Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137362e302f32322d3232203d3e20323634393236.roa
File:                     3136382e3232382e3137362e302f32322d3232203d3e20323634393236.roa (raw, json)
Hash identifier:          nCxCA99/oY73Y1HX+uRaTZgHuFHBcz8q6OtJXSJV8Zo=
Subject key identifier:   E8:2C:C0:D1:3D:B2:61:F0:C8:43:4C:82:55:B1:6F:CC:2D:16:46:5B
Certificate issuer:       /CN=1D4B1E0F83937DB50136A86BC6213C3318CDF58A
Certificate serial:       7F00DB0A74A34ED6C0B9261851E3F5BB836C7184
Authority key identifier: 1D:4B:1E:0F:83:93:7D:B5:01:36:A8:6B:C6:21:3C:33:18:CD:F5:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137362e302f32322d3232203d3e20323634393236.roa
Signing time:             Mon 29 Jan 2024 08:59:59 +0000
ROA not before:           Mon 29 Jan 2024 08:54:59 +0000
ROA not after:            Mon 27 Jan 2025 08:59:59 +0000
asID:                     264926
IP address blocks:        168.228.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:00:db:0a:74:a3:4e:d6:c0:b9:26:18:51:e3:f5:bb:83:6c:71:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4B1E0F83937DB50136A86BC6213C3318CDF58A
        Validity
            Not Before: Jan 29 08:54:59 2024 GMT
            Not After : Jan 27 08:59:59 2025 GMT
        Subject: CN=E82CC0D13DB261F0C8434C8255B16FCC2D16465B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:e6:0e:48:c0:43:93:46:69:ea:e9:0b:f3:
                    c6:86:40:c1:d2:c6:da:d9:cc:fc:87:09:23:01:ec:
                    9e:23:05:2b:9c:39:45:0b:7a:b3:ec:dc:00:b3:31:
                    06:3c:07:94:30:82:55:77:db:6f:b6:4b:cd:4c:1c:
                    e0:74:ab:a0:8a:f8:68:cb:da:7f:98:01:25:73:4e:
                    12:c6:ff:9c:d5:9e:ca:f0:b8:13:2a:37:20:0c:ce:
                    d3:c2:c9:fa:61:99:40:52:31:c6:3c:4b:60:4a:c0:
                    ac:74:e2:e9:68:64:a3:c8:63:5d:59:db:6c:9c:fb:
                    b7:3f:f6:91:05:02:7a:d6:3a:66:8a:83:1e:66:41:
                    d8:89:86:31:b3:69:74:84:e2:45:f2:90:cb:82:90:
                    e2:f3:21:6f:04:b8:35:e8:38:4a:81:c1:a1:55:4d:
                    30:ae:ea:9d:a4:4a:43:29:3e:cb:4b:c6:97:60:e4:
                    9d:75:a5:00:db:b8:8c:71:13:ca:03:8b:02:70:ac:
                    f1:19:a1:30:12:7c:95:37:59:8f:2a:0b:be:7f:0c:
                    29:10:64:11:28:10:4a:3e:67:90:b1:e0:b9:77:fd:
                    9d:20:ef:da:8f:ad:e2:1b:91:05:7c:72:d2:d9:82:
                    2d:fd:f4:01:e2:2e:5a:8e:0b:64:81:81:ed:21:28:
                    6a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2C:C0:D1:3D:B2:61:F0:C8:43:4C:82:55:B1:6F:CC:2D:16:46:5B
            X509v3 Authority Key Identifier:
                keyid:1D:4B:1E:0F:83:93:7D:B5:01:36:A8:6B:C6:21:3C:33:18:CD:F5:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137362e302f32322d3232203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:73:88:ee:b2:2c:54:2b:86:7f:77:52:1e:1e:8d:07:27:a9:
         f8:b0:db:bb:c1:e5:3e:03:1d:89:9b:dc:9a:54:cb:6b:71:d2:
         75:22:99:cf:a9:19:7b:f4:c8:26:f7:9e:f0:c4:71:b0:9e:c2:
         43:42:c4:c9:72:7e:ad:90:4a:26:71:02:ad:22:0c:16:5f:c9:
         d8:22:d0:4d:9d:d8:fd:02:f0:a5:b9:2f:77:f3:97:5a:20:4d:
         fd:d8:56:3f:65:5e:34:e3:b8:dd:2f:47:19:5e:ee:4f:2a:80:
         3a:8d:2d:3b:0d:d4:cb:ce:cc:2a:a3:e9:c2:c1:11:58:e7:4e:
         d5:d5:ba:56:9b:05:06:7a:b3:53:ed:66:73:d5:e5:a9:b5:68:
         43:3c:22:66:f5:8b:db:32:04:58:21:bd:0c:54:4c:40:ed:dc:
         2b:12:2d:7e:48:0d:1f:06:96:cd:e7:e2:85:12:a3:ed:5c:31:
         cd:c8:29:71:07:ea:a3:fe:12:bb:45:9a:7b:40:82:ac:d0:6e:
         cc:58:0f:5c:b1:83:89:b3:be:7d:e1:0d:d3:9c:f6:79:82:1d:
         48:03:c0:3c:87:bd:62:72:f7:9c:30:b1:03:11:d5:2a:81:0c:
         4c:9c:f2:ec:a0:a5:74:9e:45:80:05:d9:c2:3f:a9:2b:5c:46:
         99:fd:04:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org