Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3136382e3232382e3230302e302f32342d3234203d3e203238323130.roa
File:                     3136382e3232382e3230302e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          4fracSz500huQ1nOnv9g1btvymRJfYipBRXIQ6USRAo=
Subject key identifier:   59:05:28:6B:A1:3B:D0:81:4D:70:47:93:DA:42:1F:DD:E9:A6:AD:96
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       4B96092217901398AF11A9807599CDF61E3F0C08
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3136382e3232382e3230302e302f32342d3234203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:21 +0000
ROA not before:           Wed 28 Feb 2024 13:58:21 +0000
ROA not after:            Wed 26 Feb 2025 14:03:21 +0000
asID:                     28210
IP address blocks:        168.228.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:96:09:22:17:90:13:98:af:11:a9:80:75:99:cd:f6:1e:3f:0c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:21 2024 GMT
            Not After : Feb 26 14:03:21 2025 GMT
        Subject: CN=5905286BA13BD0814D704793DA421FDDE9A6AD96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:19:47:51:2a:ce:13:e7:43:5c:37:41:98:46:
                    97:e4:db:fd:a6:eb:29:ec:3a:02:a5:a8:f0:ee:60:
                    d8:4c:57:7f:b2:4a:73:a7:c3:9a:53:be:bb:a1:6d:
                    8a:70:5a:31:78:0f:32:d3:7e:f4:ed:c7:00:85:6e:
                    be:67:b8:e7:74:eb:f0:03:19:1b:9a:3d:ec:36:4d:
                    28:84:4e:d6:56:8f:2b:67:cc:9e:56:e5:86:7c:b7:
                    dc:d2:84:7c:b8:29:f6:af:cb:c3:c7:03:58:e7:ac:
                    32:ce:77:44:76:6e:68:ab:78:3a:a1:f5:6b:08:65:
                    73:48:9a:ff:48:f2:c1:a6:d0:7a:ed:6e:3b:b8:de:
                    40:b2:7c:83:a4:74:fd:2e:19:ec:3a:5c:37:a7:f6:
                    4e:fc:b8:02:66:14:49:25:46:40:aa:9a:24:1a:e4:
                    6e:3e:33:15:1b:8b:dc:1e:e8:35:91:56:58:6f:81:
                    23:a4:10:b2:2f:24:ac:45:97:85:ac:80:cf:cd:4f:
                    e3:e9:55:bf:d9:db:9f:e5:e8:a8:c7:cc:f1:1a:6a:
                    41:59:ea:5a:d3:6e:09:89:62:c2:f9:a6:34:4b:58:
                    1c:21:7c:9b:ea:91:1e:63:cb:d3:c0:8d:77:2e:2b:
                    5d:79:89:2a:d3:02:ca:78:d6:d5:d9:fa:f2:5a:22:
                    6a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:05:28:6B:A1:3B:D0:81:4D:70:47:93:DA:42:1F:DD:E9:A6:AD:96
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3136382e3232382e3230302e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d8:49:dc:3c:0b:4d:a7:52:32:20:36:d0:c8:b0:09:71:09:
         9d:c5:2c:f8:7c:d1:1f:b9:e8:b4:c7:db:7a:79:aa:d8:40:05:
         02:c1:75:06:f0:1a:0c:f8:8c:61:60:e2:d9:ca:ef:48:fc:e2:
         5e:29:fc:7c:10:51:9b:dc:15:8e:4d:d4:d2:17:ca:4c:70:c3:
         bb:51:aa:8c:c7:92:e9:40:e4:a1:a2:18:66:00:97:18:ef:8a:
         c4:07:5c:22:fb:d8:06:a6:4d:1a:1e:13:49:9b:2f:0a:e6:aa:
         fd:9e:21:f2:7f:d1:39:05:3e:da:d9:f8:d3:8e:4a:bd:37:6e:
         34:88:fd:f0:d6:33:3c:d3:d0:f4:a5:95:9b:f9:3c:2f:68:e3:
         24:fb:e7:37:5c:9b:5c:5b:09:c3:a8:51:2b:ab:88:71:9e:05:
         cb:f1:5b:9d:dc:bf:65:1d:08:10:24:43:38:e2:db:02:5e:23:
         40:d5:98:3e:2c:29:ae:d7:8c:1e:9d:6f:13:4d:d7:95:b5:b4:
         11:60:6d:3f:bb:2f:0b:90:a1:b8:a2:6f:93:3c:34:a8:be:6d:
         13:2e:d1:4c:43:ba:b1:11:d5:1d:29:4b:29:15:69:2e:15:ef:
         24:3f:e4:12:9b:2d:b8:64:87:04:25:0c:29:cd:8f:34:25:a8:
         a0:27:2c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org