Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa
File:                     3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa (raw, json)
Hash identifier:          zy9uVnWD4B5SPnReHTV/2ZLJkKKEBV8Z7PT810GSsOA=
Subject key identifier:   36:58:E6:F2:A3:B0:8B:12:8D:3E:96:69:68:52:4C:9C:6A:61:FF:79
Certificate issuer:       /CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
Certificate serial:       111A6FC49835BB9AC5C8BD4B9DBC30F8E8B2AD33
Authority key identifier: 1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa
Signing time:             Mon 26 Jun 2023 13:08:05 +0000
ROA not before:           Mon 26 Jun 2023 13:03:05 +0000
ROA not after:            Mon 24 Jun 2024 13:08:05 +0000
asID:                     265462
IP address blocks:        168.196.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1a:6f:c4:98:35:bb:9a:c5:c8:bd:4b:9d:bc:30:f8:e8:b2:ad:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
        Validity
            Not Before: Jun 26 13:03:05 2023 GMT
            Not After : Jun 24 13:08:05 2024 GMT
        Subject: CN=3658E6F2A3B08B128D3E966968524C9C6A61FF79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:8b:5f:7c:35:6c:79:93:4e:95:be:8f:e6:
                    0b:7d:ba:84:2b:9d:96:8c:ca:42:34:a5:b0:68:a8:
                    15:0b:4e:3a:06:70:49:73:c4:52:f7:70:e6:b5:da:
                    6e:aa:e5:a5:21:15:13:9c:a6:74:24:c2:33:8b:08:
                    e4:b1:5d:4d:5e:d7:a8:1e:9a:63:d0:12:00:de:ea:
                    6c:0e:55:7c:0d:94:f8:29:d5:e5:ab:94:43:49:5d:
                    bc:de:ff:40:47:ba:aa:cf:7d:27:3b:33:7e:c4:66:
                    38:e7:59:e9:88:0e:c6:a6:a5:35:ad:6a:15:46:82:
                    7a:a2:fe:bd:2a:45:fd:07:44:10:98:49:50:81:64:
                    af:d0:8e:80:9e:ae:c4:77:99:63:48:94:c4:f3:30:
                    d4:6e:8e:cd:aa:dd:a2:a9:a0:f5:da:ed:83:2c:69:
                    e4:85:ee:00:83:0e:62:2a:f5:63:8a:80:f0:10:3e:
                    7b:e7:0e:9c:13:67:a6:ee:94:29:fb:60:7d:67:58:
                    83:a6:68:0d:ca:2d:7f:af:06:29:6c:ab:6e:92:5b:
                    79:5b:c9:94:31:52:44:fc:d3:88:32:1d:be:35:44:
                    96:5c:82:be:ac:c0:da:bc:94:0d:62:b2:c5:1e:b4:
                    ad:c8:df:77:72:53:c4:3b:14:0d:f0:00:0f:59:62:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:58:E6:F2:A3:B0:8B:12:8D:3E:96:69:68:52:4C:9C:6A:61:FF:79
            X509v3 Authority Key Identifier:
                keyid:1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:d8:57:07:54:0b:0e:cc:bc:ca:52:9b:67:ef:e7:be:0e:2e:
         8c:e7:43:df:91:20:e1:8a:a5:dd:00:4c:3c:38:cc:5d:61:cd:
         d3:4e:8c:f1:e0:25:8e:9b:65:10:3f:c1:52:04:85:da:95:ee:
         7b:9e:03:e3:1f:e9:cc:f9:82:96:a2:b5:5f:9d:ec:63:ee:10:
         96:59:de:fc:fc:b6:3b:fc:c1:a0:b1:c8:16:70:06:44:1f:f2:
         9c:ef:16:07:19:29:f3:6c:57:89:12:33:b0:a9:90:8f:ae:50:
         1e:a4:ca:c8:66:f3:f9:dd:ef:ea:2c:24:df:9a:96:14:90:62:
         a5:5c:41:5f:f6:06:ed:ee:83:08:a8:fd:ed:63:b7:92:52:ad:
         65:75:29:de:e6:5f:59:3e:71:9c:7a:57:4d:be:14:89:24:5b:
         2d:1e:54:d8:5d:b7:3e:cb:75:d0:63:58:ed:9d:9a:35:1a:ed:
         bd:c6:08:76:33:b5:90:6d:74:28:ff:ab:47:36:8a:c3:ee:81:
         43:c6:b0:25:d9:b3:97:d0:12:74:ee:da:37:20:f2:ae:6a:98:
         6d:ea:58:10:11:78:45:14:94:73:58:dd:3e:e5:27:37:2c:39:
         b1:33:e5:7f:64:10:83:96:74:3c:f9:a1:2b:84:32:70:02:a8:
         cd:05:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org