Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/0/3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa
File:                     3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa (raw, json)
Hash identifier:          7Mfw3ElfgLT0jzYEVflDYSWnUQSW57OFsLTlbfG4aNw=
Subject key identifier:   B2:D2:E3:D1:4A:81:60:C3:F4:CA:81:05:47:E3:7F:ED:5E:AA:3F:A4
Certificate issuer:       /CN=9C93B5EBDF4BBD6E3BDEE159CA33B64B51E8D345
Certificate serial:       35B04131FED60E3F294CAA36BFC10D740507817A
Authority key identifier: 9C:93:B5:EB:DF:4B:BD:6E:3B:DE:E1:59:CA:33:B6:4B:51:E8:D3:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C93B5EBDF4BBD6E3BDEE159CA33B64B51E8D345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/0/3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa
Signing time:             Thu 29 Feb 2024 18:23:02 +0000
ROA not before:           Thu 29 Feb 2024 18:18:02 +0000
ROA not after:            Thu 27 Feb 2025 18:23:02 +0000
asID:                     264883
IP address blocks:        168.227.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b0:41:31:fe:d6:0e:3f:29:4c:aa:36:bf:c1:0d:74:05:07:81:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C93B5EBDF4BBD6E3BDEE159CA33B64B51E8D345
        Validity
            Not Before: Feb 29 18:18:02 2024 GMT
            Not After : Feb 27 18:23:02 2025 GMT
        Subject: CN=B2D2E3D14A8160C3F4CA810547E37FED5EAA3FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:3c:6a:85:c6:64:b9:cf:51:80:f7:17:53:
                    2b:5a:3c:d8:0d:17:74:82:8f:d3:36:19:69:7a:80:
                    24:ce:94:77:05:9f:bf:78:c0:9e:94:42:2c:7f:c3:
                    d1:79:b7:b2:d4:2a:db:38:c1:0b:bd:41:15:4e:6f:
                    de:14:ea:b0:e1:82:bb:a0:82:a6:04:2c:01:bd:02:
                    6e:98:a9:df:96:4b:72:82:28:02:7a:0c:77:c8:b8:
                    85:6b:20:44:8a:23:7e:c2:d2:4f:0c:92:56:91:b2:
                    ef:ce:a1:6c:5c:c3:0a:52:8a:71:c4:fb:f3:0c:5e:
                    6f:18:b5:95:df:f9:f3:89:f2:8a:e0:dc:82:31:ab:
                    c4:5c:ed:c8:8f:87:fc:3e:c5:00:bd:00:56:f7:95:
                    93:66:9f:90:4d:1a:ba:da:74:5b:fd:31:b1:3d:2b:
                    3d:24:b3:e8:ba:99:ef:9f:47:5d:cf:7f:5d:34:7c:
                    57:fb:1f:e8:b3:11:b0:5b:45:35:c3:91:0b:ed:87:
                    ec:42:da:74:69:9c:43:71:02:3b:7c:c5:f2:b7:34:
                    06:b2:8c:90:83:c2:0a:90:fc:4a:58:5d:46:d9:73:
                    bf:a9:57:8c:c8:41:32:2a:1f:70:98:38:18:41:a6:
                    3e:a2:8f:d9:ea:59:5b:93:be:4b:66:4f:89:65:aa:
                    5d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D2:E3:D1:4A:81:60:C3:F4:CA:81:05:47:E3:7F:ED:5E:AA:3F:A4
            X509v3 Authority Key Identifier:
                keyid:9C:93:B5:EB:DF:4B:BD:6E:3B:DE:E1:59:CA:33:B6:4B:51:E8:D3:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/0/9C93B5EBDF4BBD6E3BDEE159CA33B64B51E8D345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C93B5EBDF4BBD6E3BDEE159CA33B64B51E8D345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/0/3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:f3:72:ed:df:fe:50:f0:48:ab:7b:d1:9a:12:2f:ce:a0:5c:
         18:93:cc:71:44:4f:59:a3:75:a7:06:db:51:85:1e:3a:58:f0:
         77:ce:be:f6:59:17:a0:80:8d:d4:a5:06:66:d3:34:76:be:3f:
         f5:e0:1d:f6:46:8b:88:b5:4b:b1:5e:64:cb:f1:7c:ee:e4:de:
         70:45:db:a0:b8:d2:d5:c3:0b:87:27:1e:11:9d:7b:b3:c3:57:
         55:c3:e6:23:1b:a5:88:83:d5:ba:a8:95:55:e6:07:0e:7a:f7:
         67:63:68:fe:d0:1b:4a:ee:25:35:71:4c:35:12:4c:f7:74:e7:
         de:67:da:52:50:8b:01:07:9c:cf:c4:58:76:df:d4:62:db:57:
         8e:4a:42:6c:37:11:fc:36:48:ae:d4:9d:d5:f5:2d:32:7f:f2:
         5b:c7:43:50:a9:08:db:ee:8b:59:fa:50:11:f3:c7:19:fe:b3:
         c2:cf:8a:82:8a:21:67:33:10:75:6c:9a:f5:ad:6e:4e:9a:e4:
         a2:26:65:f5:4a:60:ab:d5:84:0b:65:cc:7b:91:39:aa:71:00:
         41:a3:ec:d1:0e:80:de:d6:81:c2:65:8b:59:79:0c:64:2b:86:
         7c:30:f6:b6:60:86:b6:29:47:3b:99:db:e1:1b:38:ac:f6:a4:
         fa:89:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org