Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3136382e302e3138302e302f32332d3233203d3e20323635323734.roa
File:                     3136382e302e3138302e302f32332d3233203d3e20323635323734.roa (raw, json)
Hash identifier:          MMCTYfjcCVRe+E1iTX+HQCtculHbg+zFW6mUjMpVoTA=
Subject key identifier:   85:89:8E:90:7B:9E:B2:55:0A:06:2B:47:7F:B0:2D:29:2C:7B:15:C7
Certificate issuer:       /CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
Certificate serial:       29F07C8091C85E0F398E67A9105548F8E7B7CF35
Authority key identifier: 36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3136382e302e3138302e302f32332d3233203d3e20323635323734.roa
Signing time:             Fri 22 Jul 2022 19:31:51 +0000
ROA not before:           Fri 22 Jul 2022 19:26:51 +0000
ROA not after:            Fri 21 Jul 2023 19:31:51 +0000
asID:                     265274
IP address blocks:        168.0.180.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f0:7c:80:91:c8:5e:0f:39:8e:67:a9:10:55:48:f8:e7:b7:cf:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
        Validity
            Not Before: Jul 22 19:26:51 2022 GMT
            Not After : Jul 21 19:31:51 2023 GMT
        Subject: CN=85898E907B9EB2550A062B477FB02D292C7B15C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:ae:e1:31:ac:fb:05:c3:37:81:b9:02:22:
                    c5:59:75:18:7b:e6:0d:28:c7:9a:0d:f0:b9:19:4a:
                    48:78:67:c2:45:c9:b1:72:7d:96:2b:c2:7f:3c:2c:
                    0e:1d:ca:aa:8b:86:f6:04:50:eb:52:9f:6f:52:c8:
                    1f:92:23:99:b9:9c:18:00:0a:bd:95:e8:56:78:40:
                    42:b0:6d:27:27:e9:23:fb:53:69:9c:09:b5:7d:bd:
                    5f:d6:12:94:2e:23:25:f4:cc:eb:26:9e:50:67:b2:
                    b9:54:3f:79:d8:f8:20:fe:69:35:56:e8:73:4f:71:
                    98:e6:fd:37:57:c9:3b:4c:ce:48:a1:f3:f7:90:3b:
                    e2:40:10:62:4b:5b:c3:bd:5e:4e:84:7e:49:bc:70:
                    6c:11:8d:ea:58:cc:2c:24:d2:80:8e:ec:70:1a:86:
                    f3:a5:b2:39:0b:cb:4a:50:dd:6e:0c:5f:1f:79:92:
                    ef:55:ff:4c:64:a0:1e:d1:e4:33:11:62:b4:2a:09:
                    46:9a:a1:28:d6:a4:8d:fb:46:33:67:91:3a:4c:d2:
                    16:58:61:24:0d:b6:a3:8f:d1:37:1d:83:3b:3c:7c:
                    39:70:46:5d:c3:7d:af:7d:b7:3d:82:66:cf:e7:35:
                    59:6d:3c:03:8e:18:61:54:32:01:88:ca:ec:a9:be:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:89:8E:90:7B:9E:B2:55:0A:06:2B:47:7F:B0:2D:29:2C:7B:15:C7
            X509v3 Authority Key Identifier:
                keyid:36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3136382e302e3138302e302f32332d3233203d3e20323635323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:50:dd:f6:71:58:5b:4e:c8:9b:c0:8a:bc:e2:bf:fe:a7:19:
         d0:6c:db:02:95:84:7e:85:db:a5:8f:28:7c:45:20:6f:bd:ee:
         84:36:99:c6:82:5b:92:22:2b:2c:54:e6:d6:e0:90:31:27:7e:
         27:9a:14:f5:cd:b1:88:d9:57:63:bb:fb:cc:ad:47:c2:04:fb:
         64:25:c4:6e:77:61:8c:dd:20:4c:fc:c3:48:fe:26:46:aa:06:
         11:2a:ec:b7:d9:06:56:10:6d:92:3d:ca:13:fd:e6:ab:b7:b1:
         24:2f:ef:06:d2:7b:b5:0b:87:0d:be:91:2d:92:78:f4:8e:d0:
         c6:f0:dd:56:4b:17:da:54:3d:42:3f:7a:ba:4c:e3:4c:ff:94:
         16:2b:6e:e0:a5:bd:1f:8c:aa:6b:98:6a:b5:48:c1:3d:66:c6:
         87:f3:6c:dd:7d:1f:22:34:e5:b7:d9:11:f2:c2:f8:a0:9c:81:
         25:05:4b:67:24:13:ac:50:ec:60:c0:17:8b:56:b3:da:c4:fd:
         e2:fe:f7:c8:7b:81:b2:7d:a7:47:e9:22:39:05:d1:b4:84:48:
         91:ca:ea:ce:d0:3a:58:ef:6b:07:a1:29:37:ae:cb:a4:fb:fb:
         06:36:dd:e2:de:09:0c:7c:56:71:67:b7:23:2c:79:34:74:fd:
         24:49:f1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org