Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137362e302f32332d3233203d3e20323634393236.roa
File:                     3136382e3232382e3137362e302f32332d3233203d3e20323634393236.roa (raw, json)
Hash identifier:          9XnO+dI6GyTrpXhT2PrkWjNLgWYM5WJWdbJPa6xYT1E=
Subject key identifier:   7B:A8:CB:4A:8E:07:84:36:C6:8C:C2:E1:20:B7:FA:2A:92:73:86:12
Certificate issuer:       /CN=1D4B1E0F83937DB50136A86BC6213C3318CDF58A
Certificate serial:       6D3DB985595C0DF86B9EE2747E8A507B81626823
Authority key identifier: 1D:4B:1E:0F:83:93:7D:B5:01:36:A8:6B:C6:21:3C:33:18:CD:F5:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137362e302f32332d3233203d3e20323634393236.roa
Signing time:             Mon 29 Jan 2024 09:00:17 +0000
ROA not before:           Mon 29 Jan 2024 08:55:17 +0000
ROA not after:            Mon 27 Jan 2025 09:00:17 +0000
asID:                     264926
IP address blocks:        168.228.176.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3d:b9:85:59:5c:0d:f8:6b:9e:e2:74:7e:8a:50:7b:81:62:68:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4B1E0F83937DB50136A86BC6213C3318CDF58A
        Validity
            Not Before: Jan 29 08:55:17 2024 GMT
            Not After : Jan 27 09:00:17 2025 GMT
        Subject: CN=7BA8CB4A8E078436C68CC2E120B7FA2A92738612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:f4:65:fb:32:28:e0:60:58:98:0e:80:3c:
                    59:d0:d5:6b:19:e1:92:66:b9:9d:86:b6:73:67:27:
                    2d:7d:90:9e:7f:52:32:5b:76:77:f7:33:28:4f:40:
                    f3:1c:a4:78:a1:ef:da:3c:a8:aa:e7:cc:e3:8a:34:
                    7b:28:d7:bc:d1:a0:d6:a2:ed:99:69:74:92:c3:16:
                    4e:aa:db:99:54:fa:b2:f3:20:02:bb:82:1e:e2:1f:
                    95:d7:68:c3:14:41:0e:be:08:4b:eb:38:5a:e6:79:
                    c9:47:91:33:a6:2e:d4:a0:20:04:03:d6:dc:4a:79:
                    ab:d5:fb:85:cb:4c:70:18:53:e7:98:49:e1:40:17:
                    38:e8:58:ed:4d:32:e4:67:90:e4:37:4b:90:02:80:
                    da:35:1c:34:5a:dc:8d:90:b8:e4:2a:57:31:94:5c:
                    a5:75:d8:8f:e2:56:41:4d:1b:b1:ee:03:3f:0f:3a:
                    50:e5:7a:90:41:88:19:30:f3:08:74:c4:d7:db:71:
                    df:9f:45:69:ad:bf:96:1e:8a:fe:c8:f8:ee:f0:c6:
                    8f:17:23:ac:d5:32:e7:d2:60:f0:01:96:6c:85:e9:
                    7e:56:6a:79:45:13:3a:d4:ae:c7:e9:aa:75:ec:14:
                    37:4a:fe:be:a7:cb:be:f0:77:8c:f6:4b:28:c3:58:
                    ec:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A8:CB:4A:8E:07:84:36:C6:8C:C2:E1:20:B7:FA:2A:92:73:86:12
            X509v3 Authority Key Identifier:
                keyid:1D:4B:1E:0F:83:93:7D:B5:01:36:A8:6B:C6:21:3C:33:18:CD:F5:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137362e302f32332d3233203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:59:81:5a:21:7b:47:d7:56:b5:13:fc:7e:9f:09:9e:85:93:
         b7:46:3f:86:91:de:15:5e:ee:58:cf:eb:72:ef:4d:66:3e:ab:
         e4:79:7b:5b:5e:ba:33:6c:8b:0a:91:3e:74:88:7e:7c:cd:c1:
         0d:3e:7f:c2:b8:92:2e:5f:12:ca:5d:d1:45:10:b4:1b:27:d3:
         53:8c:af:f6:10:05:19:93:4f:8a:d1:f1:c4:d6:d3:60:b2:15:
         e5:ec:67:61:d1:31:de:c1:aa:97:62:c3:69:6e:7b:a0:b1:b3:
         1c:48:17:69:33:00:ac:2f:7e:6d:ef:94:88:20:b2:b6:8d:9b:
         8d:6e:89:33:de:00:32:43:bb:61:64:ec:6e:fd:4f:31:ac:52:
         08:99:f1:ef:11:0f:8a:7b:b6:2d:57:e2:fb:b0:aa:e3:8c:60:
         7a:ea:cf:cf:41:0e:da:21:e2:92:44:41:16:1f:91:14:8a:22:
         46:56:b5:18:1e:d4:c0:d8:34:6b:37:c9:56:09:35:7e:ce:38:
         c6:26:0d:54:3e:3b:e9:a0:cc:ee:78:d8:9a:1a:e0:69:c7:23:
         14:ea:40:c5:0d:5d:47:2f:ef:a1:c3:0c:4d:0d:aa:5c:c1:2e:
         a6:3c:64:5e:94:83:d4:c8:a3:3a:3d:cd:36:82:17:b7:19:e0:
         1a:05:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org