Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3332203d3e2033333536.roa
File:                     3136382e3139352e3131322e302f32322d3332203d3e2033333536.roa (raw, json)
Hash identifier:          xzuiH2a9muUpobpggDxlFQTRp8usQleth2hfZUxOyHA=
Subject key identifier:   52:84:D8:D8:62:CA:3F:A2:3B:5C:04:6D:1A:7F:B8:51:9F:D8:D3:9B
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       44ADD644FD6F2C2C3836D51D38D48DEFB8D4D1DF
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3332203d3e2033333536.roa
Signing time:             Thu 23 Nov 2023 17:10:15 +0000
ROA not before:           Thu 23 Nov 2023 17:05:15 +0000
ROA not after:            Thu 21 Nov 2024 17:10:15 +0000
asID:                     3356
IP address blocks:        168.195.112.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ad:d6:44:fd:6f:2c:2c:38:36:d5:1d:38:d4:8d:ef:b8:d4:d1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Nov 23 17:05:15 2023 GMT
            Not After : Nov 21 17:10:15 2024 GMT
        Subject: CN=5284D8D862CA3FA23B5C046D1A7FB8519FD8D39B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e9:cb:d9:35:89:80:4b:a3:8d:8a:42:f6:ec:
                    f1:79:3e:93:9d:74:34:26:80:16:3c:bd:77:e3:73:
                    be:66:9d:79:ff:3e:3a:f8:40:6b:9e:13:b5:b2:8e:
                    b7:0f:ab:9b:d3:cd:47:e6:79:11:ad:89:24:bd:99:
                    f4:d3:9f:2a:15:89:b6:09:99:75:47:c7:07:a0:1e:
                    52:f1:e8:9c:33:47:bd:f8:95:2f:17:62:35:8e:6e:
                    e0:3a:71:16:9d:4c:c1:38:4c:8c:ca:51:a9:4c:5f:
                    00:f4:44:44:c2:7e:f5:4f:da:1d:ed:b6:91:9f:65:
                    c7:e0:91:c5:5d:67:6a:b6:32:13:11:8a:06:e7:47:
                    24:12:a6:04:8e:76:97:2d:23:06:82:f7:43:f5:c6:
                    87:90:da:6d:9b:98:a4:e8:f6:51:87:b9:b8:01:bc:
                    cd:37:b3:92:e3:55:05:72:a6:e7:d4:c2:7e:87:69:
                    89:b1:30:4d:94:39:f1:bb:01:02:fb:ee:da:6b:a7:
                    30:82:07:31:a9:96:fd:c3:43:d5:34:43:ec:26:29:
                    31:49:c3:03:12:34:0d:6c:17:73:cf:ae:22:3e:1e:
                    e5:f1:39:32:70:2e:4b:26:da:9e:98:e4:89:5c:a8:
                    8d:76:5c:a0:62:6a:29:af:89:cf:fd:8a:6e:c1:37:
                    dd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:84:D8:D8:62:CA:3F:A2:3B:5C:04:6D:1A:7F:B8:51:9F:D8:D3:9B
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:9f:a3:92:c1:34:08:22:0e:b3:a8:32:9c:e6:c9:f9:05:
         e3:cc:05:ac:6c:38:08:3b:58:9a:56:1e:bd:93:f6:1e:a4:cf:
         48:20:80:91:c9:11:e2:95:78:fb:c9:5c:1e:08:e5:20:3a:5f:
         49:ef:3f:75:98:a9:23:4a:bd:9f:86:3b:7d:8d:69:aa:de:f0:
         99:49:e5:33:b9:25:91:71:3f:d5:51:dd:66:b2:88:9a:3e:37:
         68:27:45:00:bf:cc:67:a6:cd:e2:67:d7:a9:52:42:37:2c:2d:
         42:ae:19:84:c2:2b:cd:b7:f7:24:cb:4f:5e:9b:11:8e:5d:f8:
         4a:97:be:26:57:57:e5:dc:64:72:e1:29:56:7d:2d:ae:66:7c:
         fc:95:1a:ea:e1:d1:7b:de:08:2b:d1:f3:c8:80:f8:f7:e8:76:
         fe:3c:07:24:1c:a6:db:d6:94:34:f7:65:a2:c7:e7:a8:28:0d:
         dc:10:cc:20:38:d7:fe:b8:84:dd:60:5c:82:5f:ba:72:0d:59:
         e6:35:41:31:b1:b5:ff:4e:6c:a9:97:55:69:34:d1:34:dc:16:
         48:da:1a:10:a7:a8:77:6c:48:ad:d8:fb:6e:c8:32:6a:d0:ca:
         68:c6:6c:ee:d6:69:33:a3:d3:7e:d4:fc:f6:df:38:e6:d9:a6:
         9c:3a:f0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org