Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3136382e302e342e302f32322d3234203d3e203238313436.roa
File:                     3136382e302e342e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          R8T+cvsyMHyyAKE4K72BAPA3q/Kie0mS3cR87Sv9IrU=
Subject key identifier:   C3:27:8D:D4:7A:08:B5:21:98:35:89:D7:40:83:16:D7:FB:A9:EB:7E
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       29F718B0F01B2036D71763CBD2CCA2AA175B5AB7
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3136382e302e342e302f32322d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:49 +0000
ROA not before:           Wed 21 Dec 2022 17:11:49 +0000
ROA not after:            Wed 20 Dec 2023 17:16:49 +0000
asID:                     28146
IP address blocks:        168.0.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f7:18:b0:f0:1b:20:36:d7:17:63:cb:d2:cc:a2:aa:17:5b:5a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:49 2022 GMT
            Not After : Dec 20 17:16:49 2023 GMT
        Subject: CN=C3278DD47A08B521983589D7408316D7FBA9EB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:5c:4e:99:dc:c5:76:55:46:86:1a:4a:18:
                    61:6a:fd:ca:81:6c:d9:07:03:a1:e9:2a:0c:4c:1f:
                    55:7e:19:e2:0c:18:10:97:49:a6:a3:73:5a:55:ee:
                    fe:78:42:c7:fe:82:5c:c9:54:19:48:ce:5f:b0:72:
                    d8:49:fc:43:86:94:57:14:e0:81:40:71:36:53:45:
                    1b:fa:6f:ea:12:21:f8:f8:95:01:cc:30:0f:d9:8b:
                    36:e7:50:6e:9a:ff:c4:ec:30:54:7a:62:19:5c:f0:
                    0d:6b:f7:db:59:67:5e:59:df:27:fe:f2:ae:92:1e:
                    e3:f7:be:62:34:6f:21:ea:71:91:d7:1e:78:58:50:
                    c1:49:9c:d3:bc:4f:19:45:19:af:bb:51:ef:51:fe:
                    42:34:72:ce:ce:0a:7e:12:e2:ad:65:4d:7d:50:75:
                    12:b5:1a:56:17:f3:cb:01:6e:2d:82:3b:7f:1f:c5:
                    b0:bf:b1:86:b7:1f:bb:0f:cb:ef:27:4f:78:4d:bb:
                    83:ec:d8:2c:a9:5a:13:5b:6c:84:a2:53:27:4e:0d:
                    46:32:34:d2:3b:6a:0b:56:5a:35:5f:3b:9d:98:cc:
                    48:88:52:7a:7a:3e:d5:2f:18:dc:ec:48:01:3c:a9:
                    87:1a:ae:49:49:e2:de:86:65:fa:ed:13:e1:d7:63:
                    65:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:27:8D:D4:7A:08:B5:21:98:35:89:D7:40:83:16:D7:FB:A9:EB:7E
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3136382e302e342e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:54:11:12:29:01:2c:18:d2:da:8c:d8:48:8d:da:e2:64:88:
         cb:4b:99:50:21:43:15:d6:b9:c7:ca:c1:14:14:33:02:65:8d:
         ea:25:bc:b5:75:7d:2a:27:0e:5c:be:f9:e4:95:b6:0d:d6:5d:
         0f:fc:33:fe:a7:cd:ef:19:7c:1b:42:0e:cf:2a:d4:eb:6a:23:
         52:e1:a1:7c:e1:27:15:4c:a5:1b:72:61:21:c4:a7:0b:35:dd:
         27:1b:02:b1:85:6a:64:21:55:5f:b4:03:4a:5c:bf:0d:aa:ad:
         a2:8f:19:ab:9b:cd:a5:53:d5:cd:d5:16:e9:89:7b:15:ec:e3:
         22:36:c6:10:c8:d2:2b:b5:03:ae:fc:02:b3:ba:6d:df:42:40:
         e7:66:26:40:8b:35:22:93:9d:c4:b5:9c:54:9f:30:16:92:68:
         27:7e:a3:76:65:3c:04:b7:10:ba:0c:dc:32:b9:31:e5:49:6b:
         25:62:a2:d6:f7:1f:9a:77:40:8b:61:7d:e1:39:8e:d2:75:31:
         4a:35:8a:a9:81:b9:0a:c4:6e:f4:b9:3c:ca:04:d8:27:fc:f5:
         11:63:7e:50:0a:55:79:e3:56:e9:b4:7c:1b:03:62:29:07:eb:
         cb:51:14:53:17:49:5f:79:4a:0a:ed:8e:9e:b6:4a:48:24:c9:
         52:71:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org