Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa
File:                     3136382e3232372e37362e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier:          MfDDX5yVAGVbI4YSH4txR0LITeI3TWj1iWM/h5WVjSI=
Subject key identifier:   82:F3:C3:62:73:65:3E:6D:EB:62:9E:AF:FD:69:AD:46:1A:C9:CB:7B
Certificate issuer:       /CN=58DCEB2BA8436334BE768AC3D425297AFC59F56B
Certificate serial:       64796210F0D723FA1EA2C208DF072A756174EB81
Authority key identifier: 58:DC:EB:2B:A8:43:63:34:BE:76:8A:C3:D4:25:29:7A:FC:59:F5:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58DCEB2BA8436334BE768AC3D425297AFC59F56B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa
Signing time:             Mon 25 Oct 2021 18:34:17 +0000
ROA not before:           Mon 25 Oct 2021 18:29:17 +0000
ROA not after:            Mon 24 Oct 2022 18:34:17 +0000
asID:                     52940
IP address blocks:        168.227.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:79:62:10:f0:d7:23:fa:1e:a2:c2:08:df:07:2a:75:61:74:eb:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58DCEB2BA8436334BE768AC3D425297AFC59F56B
        Validity
            Not Before: Oct 25 18:29:17 2021 GMT
            Not After : Oct 24 18:34:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:98:4f:cb:82:da:f7:c5:a9:eb:84:2e:5f:
                    65:1d:a0:28:7e:41:ba:cf:04:be:97:6f:91:5d:d1:
                    f7:06:35:20:4c:2c:c2:b8:79:77:f3:4e:c9:f9:67:
                    58:f5:16:25:98:a2:a5:f0:0b:51:aa:de:85:68:6f:
                    ae:00:d3:07:6b:2b:7c:b4:e6:f7:75:ef:f6:41:38:
                    92:43:d0:85:3b:a8:29:c5:e4:05:6c:4e:a9:a3:75:
                    9c:32:91:ae:b9:06:ee:36:c2:14:eb:65:4d:33:74:
                    41:8e:a0:92:0b:d7:c7:ce:10:9d:e6:57:af:22:33:
                    5b:51:8b:ad:13:04:d6:5c:59:f8:cb:53:55:96:a3:
                    eb:e1:7d:82:2a:50:e0:eb:2d:b5:d5:9a:3f:69:ff:
                    bb:bd:e1:17:b2:f8:b4:fc:dc:f0:77:be:7b:f6:76:
                    a7:8d:92:77:3e:fe:76:e0:94:09:47:17:0e:0b:04:
                    39:e7:a9:ce:14:f8:dd:ac:3e:5f:4e:c2:f5:81:b3:
                    70:e5:a0:42:06:d0:55:7e:ac:46:1f:fc:c6:e4:ea:
                    54:fd:c7:29:38:83:04:52:ac:bb:b3:12:59:e0:b1:
                    22:57:ed:ea:16:9c:3d:e9:85:a2:a3:79:7f:4b:b6:
                    42:38:5d:b7:68:0b:81:35:e3:98:81:0a:70:08:a1:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F3:C3:62:73:65:3E:6D:EB:62:9E:AF:FD:69:AD:46:1A:C9:CB:7B
            X509v3 Authority Key Identifier:
                keyid:58:DC:EB:2B:A8:43:63:34:BE:76:8A:C3:D4:25:29:7A:FC:59:F5:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/58DCEB2BA8436334BE768AC3D425297AFC59F56B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58DCEB2BA8436334BE768AC3D425297AFC59F56B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:86:f9:1f:6a:22:3f:bb:85:b1:95:23:8c:c8:0d:9d:9a:39:
         9f:50:d3:f0:b3:a1:a5:00:93:2f:c0:bf:01:38:70:8a:26:08:
         20:98:39:a9:fd:79:d6:67:44:c4:04:5c:f5:4e:33:e6:33:3a:
         9d:1c:dc:6e:10:b7:0d:b0:6f:3d:90:70:12:53:8c:87:20:00:
         4b:d1:3a:87:e0:9a:78:56:1d:d5:63:11:a8:f1:65:e2:91:bb:
         8d:63:45:54:60:b6:fd:82:c4:68:33:32:3e:fc:fd:86:04:18:
         aa:e3:ac:4e:28:b4:94:4c:d1:20:f9:19:38:1c:93:22:3c:ab:
         37:1e:32:9c:6b:cf:c4:d1:5f:56:08:5b:98:98:d0:b0:d9:d1:
         bb:a5:02:e3:bb:d7:2c:9a:bc:61:3d:62:e5:d8:2c:1d:55:d5:
         1a:40:ea:f1:ed:0e:17:2c:72:36:43:0c:fe:45:ab:33:d0:03:
         b3:52:76:cb:51:35:1a:9a:85:18:4a:3d:02:b4:a4:47:12:fd:
         02:a3:15:18:6e:85:5a:40:8d:4a:90:38:58:9b:66:74:2b:7c:
         68:44:ac:06:d4:81:95:5f:30:70:fd:6c:82:a4:97:fb:48:8f:
         ab:d2:0f:e0:44:d7:8e:4c:be:3e:9a:da:f8:85:60:00:07:48:
         fd:df:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org