Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3136382e3232382e3230302e302f32322d3234203d3e203238323130.roa
File:                     3136382e3232382e3230302e302f32322d3234203d3e203238323130.roa (raw, json)
Hash identifier:          GYpCW7kNd3uv+F9yGOZBxpSivX4jWmIC3vlpPCTfDtE=
Subject key identifier:   D9:90:BD:86:F1:C0:D4:3A:73:C9:65:4C:71:E7:3E:5F:E3:C2:C6:3F
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       5C14DA396B6C51E393D8C4051160F5F188FCA629
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3136382e3232382e3230302e302f32322d3234203d3e203238323130.roa
Signing time:             Tue 12 Mar 2024 18:59:53 +0000
ROA not before:           Tue 12 Mar 2024 18:54:53 +0000
ROA not after:            Tue 11 Mar 2025 18:59:53 +0000
asID:                     28210
IP address blocks:        168.228.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:14:da:39:6b:6c:51:e3:93:d8:c4:05:11:60:f5:f1:88:fc:a6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Mar 12 18:54:53 2024 GMT
            Not After : Mar 11 18:59:53 2025 GMT
        Subject: CN=D990BD86F1C0D43A73C9654C71E73E5FE3C2C63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:64:e2:ea:c5:a8:29:d0:a6:9d:75:18:66:
                    b2:09:b1:f2:d0:f3:67:1a:3f:a1:6f:06:91:21:e0:
                    80:9d:13:b9:6d:04:ba:37:ab:f6:db:17:0c:a1:b5:
                    a2:f5:a0:65:32:17:45:e8:8d:15:9f:36:a3:0c:a1:
                    87:55:94:be:f2:9e:cc:40:0f:96:9b:2a:b5:d4:74:
                    f9:d5:78:99:83:f7:ad:71:eb:4e:62:13:0c:af:52:
                    f8:2f:43:67:b2:e2:13:01:1a:2b:b8:03:45:ba:f3:
                    77:2a:71:f7:23:5f:7a:fb:6e:3f:d6:13:4d:ff:2a:
                    67:c8:7f:28:ae:ef:e3:11:ce:f7:cd:cf:d4:70:7d:
                    3f:a9:20:3f:f8:99:32:97:8b:5e:3d:4a:9d:17:78:
                    0b:27:af:50:8e:06:8d:0d:69:08:4f:4e:61:33:22:
                    62:7d:fd:88:2e:c5:d3:ac:67:49:46:ef:49:18:07:
                    7e:34:45:be:84:73:95:e2:88:1b:09:16:3c:0c:b4:
                    f3:60:2a:58:92:cb:ad:f3:0e:68:96:e2:b2:04:83:
                    be:62:a1:c3:d5:35:a0:32:ba:07:55:ec:0f:53:20:
                    17:6b:42:2a:53:ab:19:aa:b7:c0:5b:ac:7e:63:60:
                    37:cd:f7:76:6f:5c:4b:d2:db:4a:8f:39:cd:ac:6b:
                    82:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:90:BD:86:F1:C0:D4:3A:73:C9:65:4C:71:E7:3E:5F:E3:C2:C6:3F
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3136382e3232382e3230302e302f32322d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:b9:40:ec:67:c8:cd:36:f5:be:41:5f:51:24:34:f8:80:
         78:1d:d3:15:43:0b:ea:b2:e1:29:d7:e9:d7:63:a3:dd:04:bb:
         b4:db:08:0b:53:6c:0f:43:a2:6c:22:6f:db:1b:ff:af:d2:05:
         95:73:40:88:fa:17:a7:20:c6:28:9e:62:2d:4b:bc:ea:80:65:
         9b:96:e7:d1:12:af:5f:c8:ea:8c:b5:e2:74:52:61:4d:24:2d:
         1a:7d:57:c5:3b:29:04:7f:af:fa:9d:a5:21:67:f9:7c:c1:c9:
         88:80:e8:df:e8:2c:9c:0f:0a:41:06:a6:b0:5b:61:f6:84:be:
         63:0f:17:42:8e:a9:99:79:f0:ef:1a:9f:f7:4e:9b:14:ca:09:
         c2:82:4b:b8:c0:4b:d3:d7:6f:ad:c9:c9:5f:40:df:49:ed:1c:
         17:27:97:80:ee:e0:ce:ba:f7:8b:55:f2:a8:2b:71:a7:e0:02:
         af:4f:f2:1b:ac:db:19:53:73:a0:8b:25:e1:ca:65:17:7e:ed:
         55:7e:6c:4a:1e:ec:68:26:22:63:78:a7:89:0b:d3:84:37:dc:
         2d:4f:35:43:5d:4a:38:99:51:15:84:e2:43:bd:32:8b:d6:3d:
         4b:9a:26:4a:8d:92:b3:67:c8:49:f3:ed:a8:c6:2d:4c:67:f3:
         c2:03:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org