Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3136382e3139362e32302e302f32322d3232203d3e203238323230.roa
File:                     3136382e3139362e32302e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          PIPXKLZ0RngSCSyQEf/LVFeHInv1C2NCOZRnYSVU5mQ=
Subject key identifier:   6B:4F:81:5D:FC:54:9C:03:BE:AF:85:CF:E6:3D:5B:E8:FC:63:1F:0A
Certificate issuer:       /CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
Certificate serial:       63E9C05CF1FC0E89E78908AC199594D6F73606A3
Authority key identifier: 8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3136382e3139362e32302e302f32322d3232203d3e203238323230.roa
Signing time:             Fri 16 Dec 2022 20:01:35 +0000
ROA not before:           Fri 16 Dec 2022 19:56:35 +0000
ROA not after:            Fri 15 Dec 2023 20:01:35 +0000
asID:                     28220
IP address blocks:        168.196.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e9:c0:5c:f1:fc:0e:89:e7:89:08:ac:19:95:94:d6:f7:36:06:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
        Validity
            Not Before: Dec 16 19:56:35 2022 GMT
            Not After : Dec 15 20:01:35 2023 GMT
        Subject: CN=6B4F815DFC549C03BEAF85CFE63D5BE8FC631F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:f3:bd:cd:62:6e:db:15:0a:13:7c:90:1a:
                    8a:bf:6b:1a:4d:4b:e6:e9:cb:70:44:d2:f1:0a:ae:
                    f2:d3:a9:24:30:44:7c:24:63:48:95:5e:bb:eb:bb:
                    8c:b9:70:58:39:ea:ba:b9:6f:aa:b5:bf:8e:53:c6:
                    77:e6:ef:77:62:58:32:23:4e:0a:c8:58:cd:8a:76:
                    a9:6d:f4:df:46:f3:52:33:35:61:79:96:84:65:12:
                    df:bd:34:12:1d:54:23:61:54:77:ef:57:3b:4c:c1:
                    14:e7:97:e3:70:ba:33:bf:f4:d0:66:f5:90:c9:e5:
                    7c:36:8b:0a:12:6b:c0:57:35:fe:ae:6c:fa:2a:d2:
                    94:2e:c2:98:a9:a0:9e:fe:e2:c9:97:79:74:a6:cf:
                    4f:84:04:18:f8:55:94:ba:f0:ab:ab:fa:c7:a7:92:
                    27:0a:a3:3b:3a:a6:ca:29:31:0d:56:7a:85:b4:e2:
                    50:fc:df:9a:b6:6e:cd:ca:dc:21:9a:15:d8:8c:31:
                    c3:f0:3e:f4:1e:d3:c1:0e:56:31:f7:fb:94:1a:9f:
                    1f:78:31:96:b1:83:31:9f:44:c7:9e:a3:a9:74:db:
                    e7:72:19:1b:9d:6c:7b:a5:b0:71:a0:f9:ad:f4:19:
                    cd:24:2a:48:02:2e:5c:6e:8f:ed:3f:6e:82:1f:21:
                    86:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:81:5D:FC:54:9C:03:BE:AF:85:CF:E6:3D:5B:E8:FC:63:1F:0A
            X509v3 Authority Key Identifier:
                keyid:8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3136382e3139362e32302e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:6f:d6:5f:2b:7b:55:96:9e:d5:b8:f6:8a:66:7c:f4:b7:da:
         00:cb:01:72:39:45:36:69:8c:9e:9d:a0:a1:47:49:c4:7d:de:
         19:a2:86:93:c7:f7:e5:df:8c:70:01:7b:e2:13:45:34:50:a3:
         f9:8d:f6:2a:04:a3:3d:a4:4a:5f:0b:5e:ef:ab:00:57:75:55:
         b9:9f:5d:e4:b9:ca:9c:be:07:6a:7d:53:9a:7b:98:ff:0a:25:
         c3:8e:9f:07:bf:8b:78:fb:40:dd:67:fb:65:60:a0:70:7b:05:
         4c:86:9a:ec:a3:33:61:9e:d3:63:3b:78:e8:8e:69:32:67:57:
         d4:32:70:33:a4:31:45:07:72:5d:9b:ba:a4:bf:27:ac:61:ad:
         c2:b8:cb:c6:61:21:d2:a1:4d:ef:21:51:46:65:46:d3:68:8e:
         65:a3:28:9e:24:b5:14:7c:37:df:7d:0c:e6:c1:9b:0c:c8:e6:
         34:47:f5:45:c3:8c:b2:de:0f:17:a5:21:e1:af:74:6d:69:0c:
         7b:79:1f:52:a3:6d:31:d9:fb:75:aa:67:1a:e7:40:b4:ed:9a:
         f3:9a:f7:c8:c0:0a:ce:61:f8:6d:e3:36:e6:01:ff:b2:f0:b9:
         b7:2e:59:69:92:5f:65:cb:e6:6f:ad:92:3d:d6:77:b8:db:29:
         f8:74:ae:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org