Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa
File:                     3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa (raw, json)
Hash identifier:          TQCIt1l7wznP8o8ebsk5sRXBiDr+tTvOYbzXgimWK3E=
Subject key identifier:   E1:C8:DB:7F:06:D9:F6:3A:45:B7:4E:66:1D:EA:45:2A:CB:A7:E6:A7
Certificate issuer:       /CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
Certificate serial:       78EEF113D0A20119547A96D8150997BAC46225AD
Authority key identifier: 1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa
Signing time:             Thu 31 Aug 2023 20:32:45 +0000
ROA not before:           Thu 31 Aug 2023 20:27:45 +0000
ROA not after:            Thu 29 Aug 2024 20:32:45 +0000
asID:                     265462
IP address blocks:        168.196.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ee:f1:13:d0:a2:01:19:54:7a:96:d8:15:09:97:ba:c4:62:25:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
        Validity
            Not Before: Aug 31 20:27:45 2023 GMT
            Not After : Aug 29 20:32:45 2024 GMT
        Subject: CN=E1C8DB7F06D9F63A45B74E661DEA452ACBA7E6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:ca:ef:39:c0:8c:bd:df:72:ef:48:93:2e:
                    4c:95:29:86:bc:a7:4a:f5:39:45:bc:bf:48:6e:0b:
                    e5:10:31:e4:7b:23:21:8c:3c:3c:97:b9:c9:1f:41:
                    bd:1f:de:8e:2c:e1:86:ac:d7:f2:0e:77:d3:cf:ae:
                    69:d9:a1:c3:92:81:13:c7:33:e1:6e:6d:13:07:56:
                    bf:16:e7:52:2f:42:10:21:d4:f2:7f:d9:89:2d:1d:
                    27:39:32:30:1b:22:20:1c:11:fd:4a:b7:ad:6b:88:
                    da:6d:9d:a0:e8:ea:b7:e6:3b:fd:8a:72:57:cd:aa:
                    05:a3:d7:2f:0b:24:78:42:69:58:71:e9:8e:45:9a:
                    06:cd:0e:c2:fa:79:40:c0:b0:f6:03:7f:f7:d1:3b:
                    5c:ef:1e:4e:ef:6e:6d:3a:61:44:15:14:c3:e5:3f:
                    d5:a8:94:ff:3c:fe:48:7d:28:fc:4b:21:ec:ca:9f:
                    0d:c2:42:d4:fe:17:32:2b:75:2b:8a:d5:8e:8d:12:
                    7e:cf:7d:ec:31:71:d7:04:a6:ac:41:65:30:13:26:
                    89:8b:86:fa:28:2b:35:96:88:1b:b4:0b:ec:03:a3:
                    1b:a2:df:21:6a:a5:f3:f9:f3:dd:a3:b9:10:2c:49:
                    43:c2:89:97:5e:09:55:1a:49:f0:c8:e7:c6:a5:a7:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C8:DB:7F:06:D9:F6:3A:45:B7:4E:66:1D:EA:45:2A:CB:A7:E6:A7
            X509v3 Authority Key Identifier:
                keyid:1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:37:67:10:95:ef:c8:d9:1d:48:57:a5:26:e1:f1:cb:78:e4:
         b8:57:7a:26:bd:21:57:4d:ff:99:17:40:7b:fd:f3:c9:b1:d9:
         64:2a:6f:ba:d1:cb:d3:d6:25:2c:f6:eb:fc:f8:e3:b4:46:66:
         46:24:42:b2:a3:04:23:22:cc:de:2b:93:20:d0:31:dd:ea:af:
         65:27:5f:00:23:92:ac:37:75:e0:aa:fd:0f:7a:21:26:03:0c:
         1b:1a:cc:e2:e6:ea:22:5d:e2:d7:8d:a6:6b:0d:a3:5d:78:d3:
         30:72:f1:40:08:a8:78:c7:5c:4b:62:c8:62:04:54:75:38:2a:
         4d:21:d3:28:01:1c:e3:be:85:08:fc:30:06:4f:db:de:09:b4:
         20:8b:d1:05:cc:5f:47:30:4a:a2:0b:ad:26:7e:82:e7:5f:a1:
         c7:33:5e:b1:4e:66:38:1a:43:d8:c3:10:e1:2a:79:8c:57:25:
         51:81:2c:6e:75:7f:02:74:a5:66:55:3d:8e:98:aa:cb:a1:98:
         0b:ea:25:72:c1:d4:81:a5:90:78:c0:b8:34:69:4c:ee:e5:eb:
         64:1d:07:de:77:a6:a0:50:19:b5:80:ad:b3:0e:c1:73:dc:43:
         53:de:59:1b:84:9c:f3:8c:39:06:71:4c:c2:31:dc:9b:09:92:
         34:2e:28:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org