Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/3136382e3232372e3232342e302f32322d3332203d3e20323634383937.roa
File:                     3136382e3232372e3232342e302f32322d3332203d3e20323634383937.roa (raw, json)
Hash identifier:          7T5+eYDrcliBMurhE2iL9lgc7sAsFFEFPKsQ8Ce/iTo=
Subject key identifier:   23:0E:80:6C:1D:02:E5:E5:72:87:6C:0D:8E:9C:41:0E:BC:AF:C3:8D
Certificate issuer:       /CN=1892966DCC3CA1B5945851ED85AD90D42CB6E0BD
Certificate serial:       5C8141CD1A293FE463D15823A4F19A2E54348B36
Authority key identifier: 18:92:96:6D:CC:3C:A1:B5:94:58:51:ED:85:AD:90:D4:2C:B6:E0:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1892966DCC3CA1B5945851ED85AD90D42CB6E0BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/3136382e3232372e3232342e302f32322d3332203d3e20323634383937.roa
Signing time:             Thu 22 Feb 2024 17:02:24 +0000
ROA not before:           Thu 22 Feb 2024 16:57:24 +0000
ROA not after:            Thu 20 Feb 2025 17:02:24 +0000
asID:                     264897
IP address blocks:        168.227.224.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:81:41:cd:1a:29:3f:e4:63:d1:58:23:a4:f1:9a:2e:54:34:8b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1892966DCC3CA1B5945851ED85AD90D42CB6E0BD
        Validity
            Not Before: Feb 22 16:57:24 2024 GMT
            Not After : Feb 20 17:02:24 2025 GMT
        Subject: CN=230E806C1D02E5E572876C0D8E9C410EBCAFC38D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:10:02:e2:ed:fa:8d:be:9d:14:ab:28:32:
                    21:42:61:1e:a2:50:e7:41:9f:5d:2a:89:38:f1:dc:
                    99:8a:fb:38:45:fc:11:ba:f9:ff:24:00:44:d3:b6:
                    c7:f9:8b:42:64:05:d9:9f:57:b3:f3:1c:d0:f0:79:
                    c1:67:31:1d:8e:b2:04:b3:c6:b3:6d:85:8e:eb:76:
                    85:7f:cb:48:f0:8e:73:41:ed:7a:1d:89:10:40:c0:
                    7d:72:a0:d8:dd:23:93:75:9b:4b:d3:da:f2:62:72:
                    70:88:af:fe:0a:cd:f4:df:da:47:8d:65:45:a4:9a:
                    9a:2b:ea:87:12:59:8a:a4:94:08:94:ed:64:5b:b9:
                    01:1b:52:cb:92:c8:de:51:2f:00:cc:a0:99:83:08:
                    d4:74:25:b1:1f:24:7e:5b:b9:6e:59:b1:fb:d6:aa:
                    72:ef:8f:87:a1:ae:9a:88:22:df:b1:31:d0:8d:e9:
                    31:ee:a3:57:73:4c:de:ca:73:aa:e7:8b:95:e8:26:
                    2f:29:85:ff:75:0d:e3:cd:54:a0:b6:73:fc:e0:0c:
                    8a:36:de:8b:ed:1f:85:18:c2:26:42:e9:2e:44:de:
                    59:ef:e1:3e:fa:4b:41:05:61:58:3b:e6:fe:1c:3b:
                    4a:f5:0a:0c:a5:a0:13:7a:30:e8:27:fe:12:06:17:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0E:80:6C:1D:02:E5:E5:72:87:6C:0D:8E:9C:41:0E:BC:AF:C3:8D
            X509v3 Authority Key Identifier:
                keyid:18:92:96:6D:CC:3C:A1:B5:94:58:51:ED:85:AD:90:D4:2C:B6:E0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/1892966DCC3CA1B5945851ED85AD90D42CB6E0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1892966DCC3CA1B5945851ED85AD90D42CB6E0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/3136382e3232372e3232342e302f32322d3332203d3e20323634383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:61:f4:dc:7a:aa:2a:3c:c0:af:31:6e:14:88:ea:e7:0d:7c:
         3a:39:09:94:8f:85:8c:cb:c6:e8:52:fd:4a:ac:1f:47:6f:1a:
         68:7b:9b:b1:34:c4:48:33:b1:64:f2:b0:39:48:a4:8c:f0:25:
         38:c9:d7:fa:72:8b:ac:fc:13:d6:84:13:e5:3e:0e:84:9c:13:
         ce:35:b2:a8:1e:d4:49:cd:d8:d9:d3:f7:f4:80:5e:63:3b:da:
         a0:20:52:19:59:fd:1a:44:3a:4d:cf:2f:58:ff:6e:43:b2:de:
         fc:50:c1:55:3f:a9:79:21:98:0e:bc:02:18:b7:cc:24:34:1d:
         a8:c2:19:e7:c2:25:ff:e9:07:e8:ab:31:5b:a6:56:aa:78:ae:
         99:93:63:02:f6:bf:0c:1d:2f:80:36:93:6a:7a:4e:dd:97:af:
         77:82:18:59:3f:b8:db:fe:dd:0d:16:e0:00:7d:d8:2e:3f:4d:
         b0:2a:53:05:a3:b2:63:7b:7f:47:b6:66:90:85:13:42:d1:09:
         43:1b:f8:95:5a:6c:42:43:14:52:fa:98:6b:5b:9f:14:dc:ff:
         a7:12:f3:55:af:90:97:55:96:2e:c1:bc:cd:5a:56:a7:8e:08:
         ef:bc:73:c5:58:11:ff:8e:6d:2b:cd:8f:a5:cf:aa:c9:2c:16:
         fd:c9:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org