Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa
File:                     3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa (raw, json)
Hash identifier:          Xs2I02T/YtMuIUoj46sFpdgNaw6Yert2OPjo+TQevM0=
Subject key identifier:   28:9F:E1:E1:72:D0:51:AE:BB:D7:62:1A:F4:BD:30:C5:37:C8:22:77
Certificate issuer:       /CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
Certificate serial:       49D080E743D96039616B04AE255A89D62842D319
Authority key identifier: 95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa
Signing time:             Fri 28 Jul 2023 17:42:24 +0000
ROA not before:           Fri 28 Jul 2023 17:37:24 +0000
ROA not after:            Fri 26 Jul 2024 17:42:24 +0000
asID:                     265364
IP address blocks:        168.205.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d0:80:e7:43:d9:60:39:61:6b:04:ae:25:5a:89:d6:28:42:d3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
        Validity
            Not Before: Jul 28 17:37:24 2023 GMT
            Not After : Jul 26 17:42:24 2024 GMT
        Subject: CN=289FE1E172D051AEBBD7621AF4BD30C537C82277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:41:8f:de:1d:aa:74:d4:76:99:94:80:3f:9c:
                    b3:d0:6c:af:2f:f1:26:8a:ee:db:24:e0:3f:d5:fa:
                    f0:ac:5a:c2:d4:7e:cb:83:45:5e:cf:4d:41:f7:c5:
                    1b:5d:06:3c:fd:96:7a:77:1b:b9:83:64:cd:fc:6c:
                    6d:75:9b:a5:95:46:70:c9:16:8f:9b:c3:57:74:d3:
                    05:d2:d5:ec:cf:fb:dd:26:eb:48:04:65:6a:45:d2:
                    20:b7:72:da:f8:76:43:6f:89:25:ff:53:f2:21:3c:
                    89:13:79:2d:4c:6a:8a:85:a1:ba:ce:dc:81:4f:7a:
                    6a:49:21:74:e4:7c:4f:77:21:98:bb:c4:26:52:92:
                    09:fc:16:98:af:16:4b:1b:d1:57:83:33:99:2f:79:
                    e4:48:3d:79:d3:d0:cc:da:8e:55:45:a7:da:92:9f:
                    5f:f0:1f:23:2c:6a:75:09:b6:7c:59:6e:cc:f8:54:
                    6f:cc:19:35:93:95:30:cd:68:2b:13:a7:31:e8:c5:
                    c8:f1:5d:46:4e:16:a6:22:ff:4e:17:41:23:98:b6:
                    58:ff:d5:49:34:79:92:2f:ca:cb:c3:5d:5c:58:3e:
                    21:de:44:e7:40:74:75:c5:46:8a:bc:69:5c:ae:69:
                    13:15:87:1e:e4:00:33:b8:aa:7c:68:76:48:30:89:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9F:E1:E1:72:D0:51:AE:BB:D7:62:1A:F4:BD:30:C5:37:C8:22:77
            X509v3 Authority Key Identifier:
                keyid:95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:f6:d3:dd:2d:4d:92:ef:03:4c:1a:a7:00:0b:0a:e9:e9:fb:
         08:ea:e8:05:c0:18:f8:96:a1:38:03:90:dd:6f:8a:4e:a7:3d:
         a9:fd:c9:5d:13:21:79:51:cd:b0:df:86:b3:b6:89:75:a2:5d:
         be:cb:48:e6:df:df:f7:1d:c0:7b:72:18:8d:91:9e:d8:2d:d1:
         5b:0a:dc:65:32:2b:12:01:dc:17:5d:cc:4b:d8:e2:e1:df:c4:
         05:ca:46:3e:16:8a:6b:ab:4b:b0:ac:2d:69:47:be:ef:cb:3e:
         2a:be:9d:46:c9:36:d1:53:76:e4:7d:99:be:82:83:b1:74:fb:
         e3:07:54:69:39:40:21:d6:8b:eb:26:1d:76:09:48:c6:7b:c2:
         22:c1:55:8c:12:a9:a1:f6:06:7b:a0:76:5e:65:2e:e6:6f:da:
         77:f8:4c:d2:c8:b8:0d:f6:be:4e:fe:59:56:5a:0d:7c:3d:65:
         fa:c2:1f:eb:a7:24:5c:3d:32:9c:ef:92:b4:58:2b:88:12:6e:
         2b:8a:81:14:1b:46:b1:b6:bc:4e:a5:3d:49:58:fe:41:90:7a:
         7c:53:22:29:75:7c:af:59:1b:8e:eb:36:34:e8:87:b9:1a:5b:
         00:bd:00:b6:9a:d3:35:9d:14:46:37:77:42:bb:8a:f3:6e:1c:
         4a:6c:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org