Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137382e302f32342d3234203d3e20323634393236.roa
File:                     3136382e3232382e3137382e302f32342d3234203d3e20323634393236.roa (raw, json)
Hash identifier:          7k3CHfjP8Qd+7QS6PYBdQT9A8eA1qGm90uMut/NsNNs=
Subject key identifier:   14:AB:0B:7B:C4:A2:E6:D9:6B:5C:6A:AA:98:0D:07:BC:28:06:48:23
Certificate issuer:       /CN=1D4B1E0F83937DB50136A86BC6213C3318CDF58A
Certificate serial:       63D08B8EA7F0FBC7E28938D66B25F25BB6ACC22F
Authority key identifier: 1D:4B:1E:0F:83:93:7D:B5:01:36:A8:6B:C6:21:3C:33:18:CD:F5:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137382e302f32342d3234203d3e20323634393236.roa
Signing time:             Mon 29 Jan 2024 09:01:15 +0000
ROA not before:           Mon 29 Jan 2024 08:56:15 +0000
ROA not after:            Mon 27 Jan 2025 09:01:15 +0000
asID:                     264926
IP address blocks:        168.228.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d0:8b:8e:a7:f0:fb:c7:e2:89:38:d6:6b:25:f2:5b:b6:ac:c2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4B1E0F83937DB50136A86BC6213C3318CDF58A
        Validity
            Not Before: Jan 29 08:56:15 2024 GMT
            Not After : Jan 27 09:01:15 2025 GMT
        Subject: CN=14AB0B7BC4A2E6D96B5C6AAA980D07BC28064823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:53:14:66:2a:fa:e3:3a:be:0b:a2:38:38:
                    ab:71:46:c9:7c:f6:3e:49:dd:3e:9e:62:3f:e9:1c:
                    45:d9:02:d4:9c:14:0a:94:6f:ea:be:b2:25:f5:2c:
                    77:26:07:ed:83:61:5b:e9:91:b6:02:e4:9a:7a:07:
                    81:6e:f3:fc:ab:8e:0e:93:86:e8:ae:76:6a:05:66:
                    ed:4b:77:e5:c5:98:62:d7:62:d5:94:0b:7f:bd:a4:
                    89:25:0a:5c:5c:53:c9:6c:b5:1c:d3:b5:a3:b0:e4:
                    09:4c:87:7c:62:0a:e4:da:f0:8e:90:39:d2:81:d2:
                    72:72:d5:5f:55:d4:59:cf:00:f0:17:ab:07:a6:de:
                    5d:33:5d:b2:8a:6e:1a:8c:d2:9d:12:cd:71:a6:66:
                    30:94:85:7d:7a:94:3f:8b:8a:4b:46:d8:48:51:ce:
                    f1:0b:5c:62:87:75:b7:9b:cc:d0:41:56:fa:d9:19:
                    50:87:59:3d:45:61:68:0e:56:f3:a7:f1:6b:86:20:
                    8a:d5:10:0f:74:cf:56:18:89:cd:33:50:45:ea:f2:
                    db:45:27:b3:bd:12:d2:4c:52:2f:4c:3d:e4:8d:8d:
                    19:3c:f2:7a:33:3f:9c:06:89:6a:e3:64:67:47:ad:
                    cb:b1:39:68:77:39:1b:12:e6:e2:36:ee:55:42:9e:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AB:0B:7B:C4:A2:E6:D9:6B:5C:6A:AA:98:0D:07:BC:28:06:48:23
            X509v3 Authority Key Identifier:
                keyid:1D:4B:1E:0F:83:93:7D:B5:01:36:A8:6B:C6:21:3C:33:18:CD:F5:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137382e302f32342d3234203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2a:7e:34:e7:1b:41:03:67:26:fd:ab:20:a4:2d:11:5f:f8:
         1c:53:10:bf:1f:77:64:d5:8d:ac:94:e7:10:96:1c:d3:13:5f:
         73:c4:6e:19:1f:f1:3a:98:20:1e:25:db:9f:b6:98:aa:7f:fc:
         86:51:b6:9e:e4:62:a1:bc:1f:ab:a6:e8:13:b0:23:8d:c4:ca:
         36:01:46:0e:38:d9:74:c2:1d:be:98:3d:97:20:98:a8:0b:86:
         02:a9:69:fc:d6:2d:ba:75:95:a7:4f:69:b7:a2:bb:58:bf:09:
         e4:d9:79:1b:fb:86:f9:e9:8e:3c:fb:26:d7:4b:9f:58:de:69:
         96:03:a0:d9:1f:5f:ef:69:fb:29:1a:16:6e:13:04:1f:cc:88:
         8c:80:87:00:4f:14:c7:65:3a:fb:e8:16:be:46:9b:4b:d1:0c:
         b4:74:a3:30:e7:3e:f0:65:66:b2:41:5f:fe:ec:16:7c:d8:d4:
         b8:f8:53:a5:d6:ef:1d:c9:a6:ec:9f:8d:aa:b5:f0:3a:ec:c9:
         e7:4c:4b:ce:b0:0b:71:ce:ff:af:ec:b1:01:5d:af:43:35:50:
         9f:a9:b1:b3:fa:64:3f:3a:c6:f2:b3:e8:8f:84:5c:e9:26:d0:
         eb:7f:4b:22:e8:38:34:0d:44:23:2d:4a:d2:36:31:2a:74:56:
         ad:46:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:06 2024 by rpki-client on console-ams.rpki-client.org