Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/3136382e3139372e35322e302f32322d3234203d3e20323632383830.roa
File:                     3136382e3139372e35322e302f32322d3234203d3e20323632383830.roa (raw, json)
Hash identifier:          hEfVmex9pXyYaHLBUXlxJVHRuXW6X5arVh5EB168MKY=
Subject key identifier:   97:28:59:7F:CE:9E:8F:F7:E6:29:E8:54:4E:52:59:5D:3B:E0:BE:23
Certificate issuer:       /CN=EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8
Certificate serial:       6078706AC60F0C6048FD61CFA12443740E853EAD
Authority key identifier: EA:D7:D3:53:8E:D3:01:22:68:FA:CB:5E:A4:CA:C9:AB:92:EC:52:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/3136382e3139372e35322e302f32322d3234203d3e20323632383830.roa
Signing time:             Wed 02 Aug 2023 18:16:40 +0000
ROA not before:           Wed 02 Aug 2023 18:11:40 +0000
ROA not after:            Wed 31 Jul 2024 18:16:40 +0000
asID:                     262880
IP address blocks:        168.197.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:78:70:6a:c6:0f:0c:60:48:fd:61:cf:a1:24:43:74:0e:85:3e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8
        Validity
            Not Before: Aug  2 18:11:40 2023 GMT
            Not After : Jul 31 18:16:40 2024 GMT
        Subject: CN=9728597FCE9E8FF7E629E8544E52595D3BE0BE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:ab:38:ff:b2:3c:6a:ee:6f:cc:9a:b7:c3:
                    54:2d:46:c6:16:2c:a9:0d:7e:a5:26:39:62:68:9a:
                    0b:75:2d:4d:1f:12:83:af:33:45:a1:aa:af:00:fa:
                    6d:1c:78:b8:94:c7:51:bd:2e:52:61:1f:7e:79:0c:
                    89:6e:76:16:d9:72:42:1a:14:02:b4:f5:a7:42:ba:
                    c8:34:7d:3e:1f:9a:2e:f5:9a:6d:82:77:58:8d:b7:
                    70:56:00:18:87:6d:70:4f:2e:ba:61:2e:e1:0b:3c:
                    c2:6f:f9:20:22:da:39:26:dd:f8:ad:f3:1d:c1:2a:
                    15:30:48:4e:da:40:8f:79:9f:91:97:37:e3:34:b4:
                    a1:8f:1d:74:91:10:a0:11:31:16:b7:6a:78:12:62:
                    53:75:f3:12:7d:dc:62:93:8e:66:c8:84:58:fe:dd:
                    25:e8:4e:81:bc:0d:a6:e5:8e:28:15:3a:6b:89:79:
                    0e:71:ba:59:4f:e9:c3:c2:ba:9f:20:ee:92:e8:eb:
                    90:b1:a1:77:aa:66:73:32:18:86:da:d6:0b:88:40:
                    36:e2:08:bf:94:a4:3f:90:8f:d8:e6:1f:6a:1e:9a:
                    83:34:5f:91:e8:91:5e:68:55:79:88:ae:ba:01:a4:
                    27:b1:a9:fc:57:b5:2a:66:51:d4:f7:e7:76:4d:bc:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:28:59:7F:CE:9E:8F:F7:E6:29:E8:54:4E:52:59:5D:3B:E0:BE:23
            X509v3 Authority Key Identifier:
                keyid:EA:D7:D3:53:8E:D3:01:22:68:FA:CB:5E:A4:CA:C9:AB:92:EC:52:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/3136382e3139372e35322e302f32322d3234203d3e20323632383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:70:e2:c9:d3:24:3a:bf:f2:e3:c0:61:c3:43:6d:09:ad:41:
         58:2e:37:60:67:f7:96:7a:4f:f5:97:f4:33:8d:fe:47:97:d5:
         62:90:e8:7e:db:36:9a:c0:fe:c5:4e:f4:52:d6:4a:7f:00:6c:
         ee:f2:e3:9c:0c:2c:f3:ce:e9:d6:2f:8b:dd:ac:8b:c3:65:aa:
         b3:95:d4:35:93:73:70:63:cd:81:4f:61:ea:e8:20:6e:bb:cf:
         76:7d:71:75:8d:eb:64:73:f3:a0:45:21:89:05:50:78:86:70:
         48:b5:5f:40:f7:75:b6:08:78:13:35:18:03:7d:03:90:13:16:
         a0:6e:cb:00:49:e5:60:2f:cb:f6:80:95:d0:ac:99:ff:c3:4c:
         16:4d:84:a0:0b:36:d6:79:3c:b7:36:98:db:5d:b4:f8:ff:5e:
         20:62:59:7e:5d:cb:78:1e:1f:78:f8:1e:f0:96:95:a1:27:f4:
         76:99:9b:bc:48:8b:f3:ae:72:99:e3:ae:f5:47:05:b3:84:36:
         44:50:c1:8c:0f:20:a4:6b:70:2f:71:04:8d:ea:6a:6b:7c:f6:
         5e:40:0b:e6:5c:c3:3d:37:f9:d6:d6:59:5f:36:aa:50:7e:df:
         bd:0c:72:ed:b6:82:8f:5b:6d:ec:fe:cc:f5:1d:c5:d1:06:df:
         15:d2:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org