Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3136382e3232372e38342e302f32322d3234203d3e20323633353434.roa
File:                     3136382e3232372e38342e302f32322d3234203d3e20323633353434.roa (raw, json)
Hash identifier:          gYfwWr3CFAmZcLKONmi4kSCNEYvWNYHhchS/f+j8WIo=
Subject key identifier:   FF:F5:B2:F1:CE:2D:1F:B2:7B:9E:F8:81:AC:58:2C:16:D6:71:3E:89
Certificate issuer:       /CN=E66153261DF76D7AF85F0116373381AC74E0188B
Certificate serial:       639E739882B384C8252D0ED6FFC62BD59EFCB4E0
Authority key identifier: E6:61:53:26:1D:F7:6D:7A:F8:5F:01:16:37:33:81:AC:74:E0:18:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E66153261DF76D7AF85F0116373381AC74E0188B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3136382e3232372e38342e302f32322d3234203d3e20323633353434.roa
Signing time:             Tue 06 Jun 2023 13:10:16 +0000
ROA not before:           Tue 06 Jun 2023 13:05:16 +0000
ROA not after:            Tue 04 Jun 2024 13:10:16 +0000
asID:                     263544
IP address blocks:        168.227.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9e:73:98:82:b3:84:c8:25:2d:0e:d6:ff:c6:2b:d5:9e:fc:b4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E66153261DF76D7AF85F0116373381AC74E0188B
        Validity
            Not Before: Jun  6 13:05:16 2023 GMT
            Not After : Jun  4 13:10:16 2024 GMT
        Subject: CN=FFF5B2F1CE2D1FB27B9EF881AC582C16D6713E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:46:ec:dc:85:94:ed:82:39:f9:be:d0:10:
                    41:59:57:72:49:f8:f1:da:15:cb:11:f8:b0:fd:8d:
                    9c:95:5f:c8:03:9f:e2:45:7e:ff:65:a3:07:6a:f9:
                    42:4c:d2:59:f3:13:30:5e:d5:d8:60:ba:59:b8:ec:
                    c6:2c:4b:d1:54:79:95:e5:5f:a4:a1:e7:0e:dd:11:
                    4f:81:4e:3f:53:2d:2d:69:32:93:3a:52:93:35:25:
                    24:1e:b7:2f:eb:3a:ff:88:a3:ce:f1:f0:84:6e:19:
                    12:43:7f:3f:1d:be:f1:df:d3:88:17:67:af:e5:23:
                    c6:7d:1e:ea:95:7e:b5:c1:ad:fe:79:41:15:a6:81:
                    48:53:a4:8a:30:4b:20:69:15:1f:94:10:27:2e:5e:
                    79:05:79:9c:f4:2b:70:6c:ea:ea:b9:c8:87:20:98:
                    17:14:69:68:7b:29:98:e8:03:f3:72:b5:17:2e:3f:
                    4e:e2:0c:0d:ed:29:17:7e:18:1e:1c:54:7c:a2:4b:
                    1b:19:a1:e8:5c:9d:dc:5b:81:03:5e:62:aa:85:a2:
                    3f:fc:1a:85:09:60:6e:d7:7c:fd:22:c8:c3:71:f9:
                    25:a3:ae:3a:c7:6d:c2:5f:3d:33:81:b4:8f:b0:1b:
                    11:97:95:9a:5f:90:7a:e9:85:d4:d1:ea:2f:67:f1:
                    71:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F5:B2:F1:CE:2D:1F:B2:7B:9E:F8:81:AC:58:2C:16:D6:71:3E:89
            X509v3 Authority Key Identifier:
                keyid:E6:61:53:26:1D:F7:6D:7A:F8:5F:01:16:37:33:81:AC:74:E0:18:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E66153261DF76D7AF85F0116373381AC74E0188B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E66153261DF76D7AF85F0116373381AC74E0188B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3136382e3232372e38342e302f32322d3234203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:d7:d5:ea:9c:40:2d:66:0b:69:43:f8:fe:9e:9f:f8:95:56:
         22:3f:ee:9d:9d:f7:bd:7d:10:8f:0c:61:84:60:9d:2d:f2:90:
         5a:0e:d9:42:2e:a8:03:f6:f9:71:88:fb:f7:d0:43:61:70:8c:
         53:dc:6e:8e:5f:fd:cd:f5:12:95:0a:5d:d0:2c:da:a3:7b:c7:
         07:a6:53:e4:c6:9f:83:20:87:be:7d:03:88:39:4d:1f:ee:ad:
         b3:d3:6b:65:ae:8d:65:d5:21:02:f6:e8:61:97:0d:d0:eb:4e:
         49:9c:10:9c:e4:62:e7:87:e8:38:b0:24:31:d1:c5:b4:3c:e7:
         e1:78:da:51:68:14:22:8d:10:63:eb:40:44:95:dd:0d:6f:c7:
         9f:db:49:04:81:e7:58:91:9b:75:62:74:34:be:d4:22:24:8b:
         1e:86:6a:bf:ec:53:cd:37:4c:d0:02:83:a2:04:6a:3f:85:98:
         eb:cf:f7:22:56:ce:31:13:31:0a:bc:72:73:47:88:16:06:02:
         4d:3c:a1:39:93:4f:39:9f:ba:91:9c:61:d9:c1:9a:a3:41:37:
         d3:28:a9:2c:47:d6:d8:d1:ed:89:db:b4:d4:c7:25:37:b1:04:
         6b:cf:d3:a0:f5:f8:55:a7:ef:98:b9:1b:75:8c:81:93:7f:bc:
         68:d1:3b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org