Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33362e302f32322d3232203d3e20323638313932.roa
File:                     3136382e3138312e33362e302f32322d3232203d3e20323638313932.roa (raw, json)
Hash identifier:          IvnPcFu6ypT9iiyeVSNPuYDMQhgF2ph21gpp4IYxv+4=
Subject key identifier:   78:EC:8E:07:9F:3A:41:A6:AA:1C:73:2E:B1:70:3C:F1:71:2F:18:EF
Certificate issuer:       /CN=9196DD3555A3B15AB662F32F036A015CAC7C79A1
Certificate serial:       0345BCC690C03DD6CC729A82269288C3514EB3C4
Authority key identifier: 91:96:DD:35:55:A3:B1:5A:B6:62:F3:2F:03:6A:01:5C:AC:7C:79:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33362e302f32322d3232203d3e20323638313932.roa
Signing time:             Sun 27 Nov 2022 05:23:13 +0000
ROA not before:           Sun 27 Nov 2022 05:18:13 +0000
ROA not after:            Sun 26 Nov 2023 05:23:13 +0000
asID:                     268192
IP address blocks:        168.181.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:45:bc:c6:90:c0:3d:d6:cc:72:9a:82:26:92:88:c3:51:4e:b3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9196DD3555A3B15AB662F32F036A015CAC7C79A1
        Validity
            Not Before: Nov 27 05:18:13 2022 GMT
            Not After : Nov 26 05:23:13 2023 GMT
        Subject: CN=78EC8E079F3A41A6AA1C732EB1703CF1712F18EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:4d:ec:61:4d:af:da:10:c8:79:2a:45:75:
                    12:87:17:75:42:2a:77:09:06:c8:ae:00:b8:97:e6:
                    a2:2a:b4:c9:cc:a5:92:08:8a:16:f6:36:b5:02:06:
                    07:cd:9e:75:93:e5:b4:db:79:03:0e:1e:3d:80:f6:
                    eb:39:97:09:c8:c0:93:88:67:87:92:8b:8f:47:56:
                    5c:de:40:44:36:ac:f5:be:c7:76:f4:72:f3:cf:c7:
                    89:ae:b7:fc:8d:14:15:bd:ac:cd:03:36:c8:a5:a9:
                    56:3e:bc:8f:e7:5b:b4:e0:a4:4f:b6:4c:b3:3b:36:
                    e3:df:ef:d5:a7:3c:17:a2:e9:90:fc:c3:dc:03:4a:
                    52:0f:cb:8c:6c:4b:98:05:14:ff:5f:bc:4d:c3:ee:
                    5d:7f:56:6e:73:2a:fe:b0:1d:e2:80:4c:f1:7c:3b:
                    32:c8:f7:eb:34:05:81:d4:11:13:c6:02:d2:f4:29:
                    47:0b:5c:69:a1:3c:60:28:7a:46:74:d2:8b:d9:47:
                    bc:c7:cc:d5:d3:79:0f:fe:4e:a0:d5:7b:17:5d:e5:
                    65:87:aa:b8:73:2e:67:2a:eb:56:79:2a:48:e2:72:
                    c8:9d:5d:3f:d4:7a:57:cc:95:69:af:17:bf:03:3e:
                    ba:76:c9:ec:a7:81:f6:81:c3:bc:ca:af:e3:06:9d:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EC:8E:07:9F:3A:41:A6:AA:1C:73:2E:B1:70:3C:F1:71:2F:18:EF
            X509v3 Authority Key Identifier:
                keyid:91:96:DD:35:55:A3:B1:5A:B6:62:F3:2F:03:6A:01:5C:AC:7C:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33362e302f32322d3232203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:10:14:52:63:c8:4f:24:1d:4b:14:ca:1c:55:ca:ec:9b:1e:
         21:9c:20:ba:07:d4:dd:e4:b8:e9:ad:6e:b8:48:d9:bf:0d:1f:
         6e:3a:4b:9e:16:7c:9b:92:c6:62:73:b2:20:49:23:c2:4a:c2:
         4a:1e:33:21:28:48:07:dc:5d:42:7f:b1:5a:41:a4:41:d0:46:
         3e:35:d1:42:86:08:57:43:1b:bf:f3:96:21:1c:33:c2:0e:b2:
         7b:e8:da:dc:3d:7f:a7:e2:e1:de:75:7a:00:53:b7:bc:c0:b4:
         33:5d:01:4a:a4:27:0d:a1:db:ff:d3:ac:c4:45:3b:a6:95:44:
         37:b6:e6:9f:b1:47:6f:43:14:56:62:24:50:b8:ee:bc:0f:ef:
         e3:d7:ef:f0:e7:45:b0:8c:54:67:b8:3b:99:c4:25:9a:07:98:
         0f:56:61:07:72:0e:12:8e:1f:9e:5e:03:84:8e:7d:d8:fd:23:
         c6:6a:fc:aa:ff:5b:82:ba:a2:69:23:1e:1c:8c:ad:e8:0c:a0:
         05:86:83:03:91:ce:3c:3b:e0:97:d8:54:d0:ed:1c:60:dd:4a:
         ed:0b:46:ff:ce:14:72:42:a3:22:2f:0d:7d:1f:6b:54:b3:2c:
         ed:74:b4:61:24:52:91:02:d7:e9:57:83:81:23:2a:92:ff:ed:
         0d:34:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org