Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/3136382e3138312e33362e302f32322d3232203d3e20323638313932.roa
File:                     3136382e3138312e33362e302f32322d3232203d3e20323638313932.roa (raw, json)
Hash identifier:          LTttsb+D91K5a3XYnaF5FdQqyLClWEKQVisKaPlOkC0=
Subject key identifier:   EF:0A:06:E9:BE:C5:28:C8:10:8C:57:9A:6E:17:F6:5F:52:07:4A:D5
Certificate issuer:       /CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Certificate serial:       4EF8109D6E93FD2A2293E6C50AEE1A89392563A8
Authority key identifier: DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/3136382e3138312e33362e302f32322d3232203d3e20323638313932.roa
Signing time:             Mon 14 Aug 2023 15:58:32 +0000
ROA not before:           Mon 14 Aug 2023 15:53:32 +0000
ROA not after:            Mon 12 Aug 2024 15:58:32 +0000
asID:                     268192
IP address blocks:        168.181.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f8:10:9d:6e:93:fd:2a:22:93:e6:c5:0a:ee:1a:89:39:25:63:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
        Validity
            Not Before: Aug 14 15:53:32 2023 GMT
            Not After : Aug 12 15:58:32 2024 GMT
        Subject: CN=EF0A06E9BEC528C8108C579A6E17F65F52074AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:bb:de:07:c9:fe:3c:2a:02:3f:e7:62:93:
                    b0:07:11:d7:1d:40:89:b0:a3:e5:ad:94:56:78:0a:
                    16:70:f0:2b:64:fd:ea:bb:0c:a9:9f:fa:04:2f:86:
                    8e:50:a6:65:f0:a8:d5:a4:3e:c8:8c:2b:44:de:32:
                    24:cb:90:ff:49:a6:6a:36:09:b9:ec:e2:ab:9c:2e:
                    37:8a:dd:87:fe:d5:5a:6a:16:2e:8a:1b:77:e2:10:
                    e5:db:4a:b4:06:e1:97:0e:06:00:d4:7f:92:70:70:
                    17:ef:13:62:28:3e:84:2b:32:a0:1f:ff:73:49:d2:
                    3c:4c:8f:ab:9b:ce:8b:a3:6b:15:50:cc:c7:53:9e:
                    86:a4:d4:99:d2:2c:61:3d:4c:c0:fb:c3:c6:99:d2:
                    94:28:4b:a9:80:03:ea:80:5c:d2:ae:39:93:8c:68:
                    03:74:bf:0a:7f:47:af:ec:4c:66:03:03:7b:54:ab:
                    00:aa:1b:9a:fa:9d:07:a8:7e:69:dc:b5:a8:4a:80:
                    45:2d:d5:4e:87:08:bb:5f:08:12:1b:62:df:de:11:
                    cf:75:f0:96:b8:67:4c:eb:b8:d6:3d:4f:57:0d:16:
                    60:e7:09:6e:d0:33:ae:ac:23:65:79:c1:1f:4e:d0:
                    20:e0:44:b1:53:a1:1c:2f:15:e7:7c:85:7c:65:e2:
                    3b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0A:06:E9:BE:C5:28:C8:10:8C:57:9A:6E:17:F6:5F:52:07:4A:D5
            X509v3 Authority Key Identifier:
                keyid:DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/3136382e3138312e33362e302f32322d3232203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:9c:fc:b7:7a:84:24:3e:99:62:f3:a3:72:d5:f5:2f:0e:50:
         a7:01:b6:fc:2b:38:15:53:a1:72:7f:f1:6d:78:9b:86:83:ee:
         67:dd:2e:90:44:0a:1c:22:dd:59:ac:da:4d:28:ab:53:1c:81:
         69:31:93:b4:20:4f:ad:42:35:80:e1:e6:10:d1:3a:c6:45:3b:
         a4:35:2f:bf:38:71:ab:db:07:f2:8f:2e:25:e6:a6:f4:53:3e:
         1f:1c:b9:d0:a9:d6:dc:85:8c:01:15:ce:b7:cc:ac:72:74:61:
         e0:18:e1:91:5e:ce:c9:97:95:29:f8:44:8b:ea:51:17:b8:0f:
         c4:c5:34:0f:fd:46:be:a3:a0:28:31:59:21:29:bc:c6:dc:21:
         22:89:91:f0:c9:f2:51:13:bf:a9:1a:5e:0a:b7:34:ff:6d:86:
         a5:1b:ef:fc:6b:a1:ef:ec:3b:bc:7f:00:93:bc:3d:6d:a5:c7:
         fe:fb:e3:58:1b:c2:48:38:97:19:89:b8:45:58:ba:56:da:3f:
         c3:64:14:13:46:62:6c:71:24:74:e7:c4:e4:5c:f6:bf:55:0d:
         09:ce:0a:77:99:90:5e:7d:47:86:14:f7:d0:db:67:9b:20:d1:
         fe:b1:47:95:64:4c:48:50:bf:f2:a5:b2:93:19:9c:99:23:bc:
         f3:3b:ca:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org