Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/1/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa
File:                     3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa (raw, json)
Hash identifier:          dE/+kPX/3N4wTYPyXah7OAL+kFx/38qEmTv/Wyhhpoo=
Subject key identifier:   3F:57:3D:C0:D2:C3:A5:95:B9:70:8B:A9:37:33:C9:E7:93:21:CF:0E
Certificate issuer:       /CN=D8E55C69E69D8A1E2662122B8CE898AE2F2C242A
Certificate serial:       2AE84E87FF93E66FA007B7C96130D8E9F57E6065
Authority key identifier: D8:E5:5C:69:E6:9D:8A:1E:26:62:12:2B:8C:E8:98:AE:2F:2C:24:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8E55C69E69D8A1E2662122B8CE898AE2F2C242A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/1/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa
Signing time:             Tue 23 May 2023 19:12:23 +0000
ROA not before:           Tue 23 May 2023 19:07:23 +0000
ROA not after:            Tue 21 May 2024 19:12:23 +0000
asID:                     264297
IP address blocks:        168.197.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e8:4e:87:ff:93:e6:6f:a0:07:b7:c9:61:30:d8:e9:f5:7e:60:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E55C69E69D8A1E2662122B8CE898AE2F2C242A
        Validity
            Not Before: May 23 19:07:23 2023 GMT
            Not After : May 21 19:12:23 2024 GMT
        Subject: CN=3F573DC0D2C3A595B9708BA93733C9E79321CF0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:8b:10:c1:f0:16:59:a6:17:8d:3c:f2:13:
                    38:70:a8:9d:63:d8:18:db:b5:f3:87:1a:a4:3a:6c:
                    29:80:6c:4a:95:54:a4:ac:d7:de:0f:74:a8:ca:b7:
                    a0:c5:25:88:a3:19:dc:3e:8d:46:35:33:f3:06:e3:
                    36:eb:e6:37:fa:51:6b:e4:47:0b:d0:92:de:72:14:
                    72:73:59:72:3f:43:d9:a8:d2:81:34:d7:b4:9f:79:
                    ab:cd:fc:c8:c3:c5:91:09:0b:54:53:07:89:ef:ee:
                    f0:c3:8b:47:9e:c8:f1:0a:ad:78:33:31:c7:cc:eb:
                    1a:4f:1e:5f:8f:f5:e1:67:3e:77:29:2e:0c:5d:2d:
                    77:d9:c8:c8:b3:0a:ee:26:de:bc:9a:0c:52:fb:3c:
                    3f:23:77:4d:ae:8a:a4:e6:94:d9:6a:65:93:e6:47:
                    49:be:e4:c5:49:aa:0e:4b:ce:2d:04:f1:d0:03:a6:
                    e3:8a:0a:b2:ea:b0:03:79:14:d3:14:3c:f3:7d:97:
                    46:e0:b5:c0:6f:05:81:96:00:19:b4:26:6c:56:a6:
                    79:42:df:3b:15:fa:90:6f:e8:4b:36:b4:21:a2:83:
                    d2:98:57:4e:3d:8f:c5:fe:f4:d7:70:c6:07:49:4f:
                    73:04:42:51:4f:2d:e0:d8:93:51:b9:a4:1b:59:33:
                    37:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:57:3D:C0:D2:C3:A5:95:B9:70:8B:A9:37:33:C9:E7:93:21:CF:0E
            X509v3 Authority Key Identifier:
                keyid:D8:E5:5C:69:E6:9D:8A:1E:26:62:12:2B:8C:E8:98:AE:2F:2C:24:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/1/D8E55C69E69D8A1E2662122B8CE898AE2F2C242A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8E55C69E69D8A1E2662122B8CE898AE2F2C242A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/1/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:5f:ce:c9:31:b1:d4:61:20:77:5e:b0:1e:94:14:51:51:bd:
         5f:42:28:14:d4:50:0b:d0:55:62:20:fd:86:60:a8:29:b9:7b:
         cb:8a:2e:26:82:0a:ff:4e:a7:ed:cd:e4:ca:77:3c:4a:b0:aa:
         5b:a3:76:3c:a2:c9:dd:e2:38:68:3e:9d:a4:41:0a:b7:1a:af:
         b1:ab:16:57:97:d8:9f:c2:10:d7:12:74:7b:a0:b0:6c:64:4d:
         67:ae:50:7a:4e:7e:e4:d1:41:08:9e:51:f4:b0:a1:d5:55:da:
         60:b4:d3:e7:f5:6c:be:8f:aa:a0:81:2e:ed:67:78:8c:fa:41:
         50:5f:91:3a:c6:0c:e4:f7:da:fa:90:8d:e2:ca:f6:58:97:87:
         68:80:73:3f:ea:f3:07:0d:e4:7b:5d:a6:b5:9f:3d:e4:bc:54:
         06:aa:cd:15:aa:f8:2e:85:7f:b9:5c:49:48:3c:9c:0b:f9:8a:
         60:b8:d9:9d:9a:d6:d9:f9:57:ff:7b:a6:e6:f3:39:d9:9d:8b:
         3b:7e:a0:3a:2d:97:d8:9e:76:f4:5a:d2:f1:6f:ac:04:23:73:
         88:54:ee:37:e5:19:fb:11:c7:ba:ce:54:42:42:7a:22:7d:9e:
         04:95:ab:7f:85:d9:f5:57:96:fc:ca:74:b6:ea:37:a9:e1:46:
         50:69:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org