Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/3136382e3232382e38342e302f32322d3234203d3e20323033.roa
File:                     3136382e3232382e38342e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier:          dp6iQS7woTPS1GcLM1UcoVwXRha/MIuzaUeIjLCogsQ=
Subject key identifier:   8B:D8:C0:E1:8F:E9:58:06:BA:D5:D9:4B:F3:03:8D:16:ED:74:13:81
Certificate issuer:       /CN=A4DB82B6922BE0F6B48B94197346368ADF87F112
Certificate serial:       06E0B99BFA61B3F2AEE8C444CCD7357C3C4E0D12
Authority key identifier: A4:DB:82:B6:92:2B:E0:F6:B4:8B:94:19:73:46:36:8A:DF:87:F1:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4DB82B6922BE0F6B48B94197346368ADF87F112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/3136382e3232382e38342e302f32322d3234203d3e20323033.roa
Signing time:             Fri 14 Jul 2023 13:36:19 +0000
ROA not before:           Fri 14 Jul 2023 13:31:19 +0000
ROA not after:            Fri 12 Jul 2024 13:36:19 +0000
asID:                     203
IP address blocks:        168.228.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e0:b9:9b:fa:61:b3:f2:ae:e8:c4:44:cc:d7:35:7c:3c:4e:0d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4DB82B6922BE0F6B48B94197346368ADF87F112
        Validity
            Not Before: Jul 14 13:31:19 2023 GMT
            Not After : Jul 12 13:36:19 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:b1:78:f7:0d:41:b8:00:69:40:de:11:cf:
                    f3:b5:86:5e:e7:ed:29:96:9e:b5:35:f8:96:77:40:
                    3e:6e:81:d5:1c:1f:5b:8b:33:f2:99:ef:55:69:27:
                    28:a8:c3:98:1f:9e:be:d1:00:1e:3f:1e:5c:d5:22:
                    eb:43:72:87:29:da:2c:4c:50:30:6b:59:bd:41:52:
                    3c:64:e9:57:d5:54:e7:8f:56:a6:bf:d9:0d:9c:79:
                    91:f5:cf:cb:39:84:43:46:9c:4b:bb:10:98:ff:b4:
                    6b:9b:2a:b1:97:7a:ef:77:a0:78:3d:4b:4d:d3:b8:
                    86:5b:94:1f:8e:66:a4:bb:24:cf:93:88:de:7d:b1:
                    80:64:07:13:4b:93:80:7b:de:1a:d0:8e:cb:f6:84:
                    58:85:11:c8:cc:0f:59:1f:71:01:f1:27:12:dc:ca:
                    93:ae:31:29:66:ff:38:44:ab:ab:0f:06:9b:68:9c:
                    69:16:79:37:65:01:84:00:86:a4:8d:e2:b0:51:e2:
                    9e:ca:83:c2:13:41:c2:53:eb:93:5d:16:85:1d:8b:
                    fe:12:e0:fd:61:c6:67:f1:bb:6e:31:f7:7a:a7:67:
                    96:08:07:cb:05:71:2a:57:11:f8:9c:1d:b8:9e:ff:
                    38:76:f9:2b:04:70:0e:52:6e:99:40:ee:4d:ea:0e:
                    72:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D8:C0:E1:8F:E9:58:06:BA:D5:D9:4B:F3:03:8D:16:ED:74:13:81
            X509v3 Authority Key Identifier:
                keyid:A4:DB:82:B6:92:2B:E0:F6:B4:8B:94:19:73:46:36:8A:DF:87:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/A4DB82B6922BE0F6B48B94197346368ADF87F112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4DB82B6922BE0F6B48B94197346368ADF87F112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/3136382e3232382e38342e302f32322d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:b0:ff:db:ba:27:0e:36:85:45:b9:4e:48:c2:c0:87:b3:58:
         cf:89:0a:03:0a:50:77:30:02:25:d8:95:2d:56:2c:52:11:58:
         6d:88:58:28:83:5d:16:58:ed:1e:41:d9:54:ad:55:10:58:68:
         44:63:c1:c3:9c:e0:c1:0a:2d:5e:ce:90:c9:63:26:13:92:f7:
         25:30:dd:4c:f0:e2:9c:26:69:bb:d6:b9:a8:0d:99:b7:b4:ff:
         94:67:77:af:94:5b:9d:ea:c6:1b:16:d6:15:98:a0:0a:41:86:
         f7:e6:0e:34:79:16:54:9e:a0:cf:b7:66:84:ac:a6:c5:d4:af:
         b5:e1:7a:ab:a6:69:f3:08:1f:aa:38:5b:be:35:a0:c7:7d:2a:
         71:21:0c:9b:2e:c5:0e:b4:f8:1b:c2:4d:d9:02:21:3b:ec:e5:
         d0:f8:6e:9d:5b:0a:70:4b:86:d1:bb:2b:eb:ed:45:c0:b3:a5:
         c6:1b:3d:aa:03:46:e9:c3:97:c3:72:db:83:9f:79:dc:40:be:
         c1:33:d3:26:86:3d:9c:14:8e:33:1a:be:d7:b6:5b:cb:73:f0:
         34:c9:6e:09:93:61:3a:a6:d3:47:7c:8f:77:c8:5f:ee:24:df:
         95:2f:74:00:f6:e2:73:33:61:5a:5a:3e:dd:4b:85:87:6d:3a:
         5b:b7:14:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 19:25:56 2024 by rpki-client on console-fra.rpki-client.org