Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa
File:                     3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa (raw, json)
Hash identifier:          pIxDciVnqn3/Be0XgfdxgBaQDHxsI6kK+d+8AmWcBUU=
Subject key identifier:   F5:74:EE:78:6C:A6:F8:41:64:A6:4D:E7:4F:B2:CF:DD:06:02:4C:18
Certificate issuer:       /CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
Certificate serial:       5CE0B34F323409E5F79BDB7A152E63CF139BBB81
Authority key identifier: C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa
Signing time:             Mon 30 Oct 2023 13:28:22 +0000
ROA not before:           Mon 30 Oct 2023 13:23:22 +0000
ROA not after:            Mon 28 Oct 2024 13:28:22 +0000
asID:                     28334
IP address blocks:        168.227.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e0:b3:4f:32:34:09:e5:f7:9b:db:7a:15:2e:63:cf:13:9b:bb:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
        Validity
            Not Before: Oct 30 13:23:22 2023 GMT
            Not After : Oct 28 13:28:22 2024 GMT
        Subject: CN=F574EE786CA6F84164A64DE74FB2CFDD06024C18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:12:3d:9e:56:35:ea:35:fc:99:c3:d1:d9:
                    84:06:23:cb:07:1a:2f:48:f3:b2:23:75:70:f5:fb:
                    f5:0f:63:40:59:66:9c:18:45:32:57:9d:80:1b:7f:
                    63:27:f0:6d:f1:91:f6:9f:ea:d5:60:78:3b:2b:42:
                    1f:b3:6b:b3:bf:3b:29:5b:26:61:fc:bd:0e:d7:3f:
                    dd:77:d1:b5:70:b2:4e:53:b6:73:fe:e0:2d:ee:ea:
                    42:73:b3:61:2b:a6:29:81:b4:5c:81:64:7e:20:05:
                    19:20:d3:09:ff:70:78:f2:df:ab:d9:eb:58:41:88:
                    9f:53:77:2a:8f:1f:d3:ac:59:43:07:9d:1a:00:28:
                    db:d6:44:8c:02:0f:ca:d0:ee:64:88:51:a8:12:54:
                    72:cf:b8:8b:5b:88:bd:15:73:dc:ce:9e:21:52:30:
                    69:45:05:23:67:d0:8a:fb:58:67:ef:17:27:35:51:
                    cf:a0:5b:8b:b4:fa:be:b5:d8:3e:2c:32:32:40:f4:
                    6f:be:b2:53:44:94:fe:b1:8f:91:05:33:0e:64:fd:
                    53:65:70:b8:35:a4:bf:a8:05:d4:ff:de:dc:de:82:
                    08:40:d0:0a:58:9c:9d:20:a0:23:83:fe:85:63:cb:
                    a9:95:91:e5:ac:a1:2b:85:60:6c:00:04:09:54:72:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:74:EE:78:6C:A6:F8:41:64:A6:4D:E7:4F:B2:CF:DD:06:02:4C:18
            X509v3 Authority Key Identifier:
                keyid:C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:58:e6:2d:64:12:1f:5f:59:10:e8:de:98:f5:43:3b:ae:fd:
         4d:6f:a7:fa:66:2c:87:fc:3b:76:ab:1f:8e:91:3e:40:d5:f9:
         a7:a7:ea:34:ea:3e:ae:31:67:68:16:35:7a:81:3d:12:03:aa:
         52:4d:fb:b3:0c:01:78:66:6a:8f:4d:75:02:4f:4e:76:2d:6a:
         b2:5a:b5:f2:20:b8:ee:6e:08:7e:10:7a:8a:53:a7:c1:87:3a:
         8a:e4:fc:f1:63:1b:41:93:b7:74:b0:25:55:f4:ec:67:fc:dd:
         99:87:76:13:9f:fc:0f:17:46:f8:08:47:8c:5e:86:ba:db:a5:
         ae:d9:df:4b:db:4d:53:14:70:f4:75:9b:0f:5d:9d:9c:40:6f:
         37:72:6b:4f:3e:04:50:8e:1e:e6:1c:2e:8b:c0:93:d4:21:a8:
         c3:9d:e9:c7:ec:55:de:8d:db:12:92:32:a0:aa:cb:33:a2:6c:
         35:52:ec:42:49:48:36:18:ac:c8:52:7b:d1:d1:dc:78:57:eb:
         f1:72:c6:29:13:64:eb:c4:c7:29:c2:18:83:c9:32:96:57:b7:
         61:fc:78:84:f5:b4:a1:20:d5:24:61:a1:5e:79:a0:b5:b8:34:
         7a:fd:a0:ac:a5:0b:3b:68:fd:4c:cc:de:ca:30:0b:df:5d:a2:
         1c:fe:ac:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org