Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3136382e3139362e35362e302f32322d3232203d3e20323632393038.roa
File:                     3136382e3139362e35362e302f32322d3232203d3e20323632393038.roa (raw, json)
Hash identifier:          GH5ugdP1p/fgpeNKPrjgYImPvYUBM+2evTp88YqUxWg=
Subject key identifier:   82:4E:4E:2D:C7:73:5A:7B:D6:EF:94:9F:28:97:F3:DC:4A:03:C4:32
Certificate issuer:       /CN=380AE62845C4468F9462327C41A0D22DA68054FD
Certificate serial:       0C4C8B0669E311B5B7D6B4BF0C2AAE7F79CF8076
Authority key identifier: 38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3136382e3139362e35362e302f32322d3232203d3e20323632393038.roa
Signing time:             Mon 22 Jan 2024 19:49:32 +0000
ROA not before:           Mon 22 Jan 2024 19:44:32 +0000
ROA not after:            Mon 20 Jan 2025 19:49:32 +0000
asID:                     262908
IP address blocks:        168.196.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4c:8b:06:69:e3:11:b5:b7:d6:b4:bf:0c:2a:ae:7f:79:cf:80:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380AE62845C4468F9462327C41A0D22DA68054FD
        Validity
            Not Before: Jan 22 19:44:32 2024 GMT
            Not After : Jan 20 19:49:32 2025 GMT
        Subject: CN=824E4E2DC7735A7BD6EF949F2897F3DC4A03C432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:e3:69:07:bc:95:c8:a2:1a:d1:f0:b5:37:
                    52:87:b1:02:9a:c5:47:b6:87:1c:b5:15:32:14:cf:
                    9c:e6:33:f2:33:7e:b3:10:00:45:f1:e3:31:80:73:
                    f2:a2:52:64:42:4d:c6:14:2c:9f:5d:ea:7f:c8:98:
                    de:95:22:40:c5:ee:da:5a:1a:8a:9d:6c:81:1f:d2:
                    8a:05:94:24:31:b6:a9:7d:6c:c4:0a:f1:1a:ac:ab:
                    21:c4:36:3f:b3:e6:d9:17:3a:d6:ab:98:98:4c:dd:
                    d8:e3:cd:04:22:70:c8:4d:16:96:c5:18:99:70:5b:
                    3f:68:90:52:4a:29:a5:d7:60:ca:e9:fa:8e:a5:9b:
                    74:05:b9:9c:cf:50:16:9f:5c:87:de:0d:9f:a7:43:
                    5d:b8:f4:7f:1b:d9:1d:be:24:73:5e:3a:a8:c6:68:
                    2c:f0:83:ba:39:3f:79:92:45:13:13:f7:95:a7:eb:
                    6d:9b:08:38:16:55:11:16:f5:32:e1:67:f9:17:75:
                    a5:ed:57:06:f7:23:b8:75:d3:70:30:c9:a9:2c:e5:
                    70:88:d6:06:ca:9f:52:50:98:81:8e:dd:ca:93:c5:
                    00:41:33:a4:8c:18:be:1c:bb:4e:8c:9a:9a:b3:cd:
                    2a:26:38:c7:3b:1d:a4:1e:9e:2f:1d:bd:03:2a:36:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4E:4E:2D:C7:73:5A:7B:D6:EF:94:9F:28:97:F3:DC:4A:03:C4:32
            X509v3 Authority Key Identifier:
                keyid:38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/380AE62845C4468F9462327C41A0D22DA68054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3136382e3139362e35362e302f32322d3232203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:24:0f:d0:a1:9d:c2:dc:a7:9d:ca:4c:d7:d8:47:3d:39:ce:
         78:60:7d:b3:97:4f:03:da:9c:84:ad:f5:46:32:e9:d9:90:aa:
         8e:1c:22:3b:c7:2f:6a:10:f2:c4:9b:56:3f:18:f3:8c:e6:52:
         aa:90:1a:77:67:99:71:13:cf:df:ec:11:b5:6f:7e:6f:1c:a3:
         64:0e:cd:d2:60:a4:2c:aa:e9:39:37:e7:79:bf:eb:ff:b2:12:
         e7:65:f1:ae:69:78:66:f1:74:7e:53:40:ff:8e:ed:0a:bc:4c:
         92:6e:f6:58:f9:e9:2d:b6:c7:68:7d:e3:49:47:cb:8a:63:a9:
         1c:ba:9c:00:45:8d:52:b3:b3:d7:06:d0:5e:aa:95:48:4e:ec:
         18:3a:d4:da:de:64:4e:6d:19:97:a3:20:b8:9e:7b:88:f2:17:
         7a:32:36:7d:d8:df:b6:2b:67:12:61:84:4e:84:11:c2:8a:38:
         91:a0:35:f7:39:a5:2b:29:2a:52:a7:8c:d5:3d:f9:e7:7c:c8:
         85:aa:c4:2b:9d:cf:14:31:53:c5:d1:66:74:f5:7d:c7:01:9c:
         37:87:f8:15:15:69:85:36:e5:3e:e2:84:47:f5:27:9a:7c:6b:
         5d:0f:dc:04:31:1b:e3:70:4b:04:a3:43:ad:09:da:8f:5b:fb:
         38:0e:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org