Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3136382e3232372e3133362e302f32322d3234203d3e20323633353236.roa
File:                     3136382e3232372e3133362e302f32322d3234203d3e20323633353236.roa (raw, json)
Hash identifier:          CkZwYlMoSObFc3Roy20Cimy/giHBm56GD8ckz5Zl++I=
Subject key identifier:   DD:42:79:58:CD:9D:1F:6C:07:55:0F:73:DD:8A:32:2C:70:BB:C6:7E
Certificate issuer:       /CN=455C3B82FAE82A8C448BBEBBAD7E9F3CC25FF63A
Certificate serial:       3F98208BCEC1E42C8A8D0FD4C780908C3BAC9058
Authority key identifier: 45:5C:3B:82:FA:E8:2A:8C:44:8B:BE:BB:AD:7E:9F:3C:C2:5F:F6:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/455C3B82FAE82A8C448BBEBBAD7E9F3CC25FF63A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3136382e3232372e3133362e302f32322d3234203d3e20323633353236.roa
Signing time:             Fri 03 May 2024 14:47:14 +0000
ROA not before:           Fri 03 May 2024 14:42:14 +0000
ROA not after:            Fri 02 May 2025 14:47:14 +0000
asID:                     263526
IP address blocks:        168.227.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:98:20:8b:ce:c1:e4:2c:8a:8d:0f:d4:c7:80:90:8c:3b:ac:90:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455C3B82FAE82A8C448BBEBBAD7E9F3CC25FF63A
        Validity
            Not Before: May  3 14:42:14 2024 GMT
            Not After : May  2 14:47:14 2025 GMT
        Subject: CN=DD427958CD9D1F6C07550F73DD8A322C70BBC67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:1c:cf:be:c2:b1:0b:8f:4b:6a:2c:1a:73:
                    d5:e3:21:35:08:05:c4:5c:3a:67:78:27:af:86:a6:
                    46:ef:73:fd:03:b9:ad:6d:11:46:e7:b7:9f:2f:c6:
                    2b:26:c9:6e:ab:8b:e4:6d:4a:bb:0f:cc:f1:97:fa:
                    05:46:06:9b:49:5f:62:f6:23:10:71:2d:d1:c6:8d:
                    bd:9a:4c:af:a3:7c:96:94:ae:11:cd:41:06:52:8f:
                    df:85:9c:4e:86:21:5c:4f:60:8d:84:7f:15:bc:74:
                    b4:b6:03:5e:71:56:3e:39:3c:32:ad:79:d9:31:ec:
                    d7:e5:6e:3d:6c:4d:ca:cc:04:3d:bc:46:82:3e:ff:
                    dd:ab:49:a5:54:e3:56:fa:37:58:03:1e:ec:3f:d2:
                    d1:8f:64:16:91:90:a0:89:a5:6a:64:3e:85:aa:9f:
                    93:f1:3d:86:ce:03:5d:4c:fc:1e:5b:85:22:ef:62:
                    dc:d9:6d:b1:14:4d:49:fc:0c:37:3b:61:11:08:9f:
                    51:5f:d1:f8:33:72:6b:37:bc:95:21:0c:e6:3f:66:
                    78:22:ce:e0:5f:76:9b:21:ae:dc:cd:9f:44:d8:14:
                    b5:13:69:d9:7e:57:c0:a3:df:15:dc:da:d0:37:e8:
                    8b:1e:2b:51:d7:69:8e:5e:48:7e:37:7c:85:4b:f4:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:42:79:58:CD:9D:1F:6C:07:55:0F:73:DD:8A:32:2C:70:BB:C6:7E
            X509v3 Authority Key Identifier:
                keyid:45:5C:3B:82:FA:E8:2A:8C:44:8B:BE:BB:AD:7E:9F:3C:C2:5F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/455C3B82FAE82A8C448BBEBBAD7E9F3CC25FF63A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/455C3B82FAE82A8C448BBEBBAD7E9F3CC25FF63A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3136382e3232372e3133362e302f32322d3234203d3e20323633353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:56:a2:25:4d:b7:ab:1d:96:b5:19:bd:b3:68:52:f3:43:e1:
         97:19:84:6b:aa:46:f3:78:46:a5:10:4d:53:b4:b3:9c:a1:0f:
         f8:2b:6a:ca:f6:87:46:35:b7:b5:ac:8f:69:09:df:97:2d:19:
         9f:ef:f1:d5:55:cb:03:a4:ce:e5:f8:75:2e:de:9f:cc:c6:cc:
         6e:c5:48:ce:8f:b3:49:d4:64:0f:b1:fc:d7:6a:ed:b0:58:ef:
         45:70:d9:9e:11:ab:0b:dd:0b:08:c9:54:db:96:b8:ab:19:42:
         e3:99:00:77:a3:4f:b0:c7:14:e6:1f:59:eb:1a:03:f3:db:47:
         e9:07:24:1b:c9:7d:4a:33:7e:6b:21:5c:46:b1:d1:69:86:ef:
         36:c9:34:81:d3:5f:3e:2e:37:c2:b5:c7:65:3f:9f:ed:da:8c:
         6f:e7:7a:ad:32:7a:86:d4:c5:8e:15:9c:a4:d4:8d:02:40:13:
         4d:10:df:70:2d:4a:d5:90:ac:85:76:ab:bd:58:69:fc:be:28:
         5f:9e:b0:3c:43:13:b3:d7:8f:06:8f:cd:0e:de:4f:4c:27:2c:
         47:b1:7e:b6:43:06:1e:ac:08:db:62:aa:83:50:c1:79:09:cd:
         19:1e:da:7b:a7:f2:5a:44:7b:c3:b1:1e:6d:ec:2a:46:66:62:
         87:b6:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org