Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32322d3232203d3e20323638303333.roa
File:                     3136382e3232382e3138342e302f32322d3232203d3e20323638303333.roa (raw, json)
Hash identifier:          ahAuJN8dCCwhTFQh90HS9Q9VKq8FKj/DLOxI65NBUEw=
Subject key identifier:   06:B9:16:F2:B5:7D:F2:CA:63:CE:4D:D6:3A:02:E2:20:40:B7:96:D9
Certificate issuer:       /CN=E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B
Certificate serial:       1E47A81D481FF509D48D3CDC0E9CA9FE0DFAE37A
Authority key identifier: E2:81:98:F7:4D:3A:8A:80:6D:75:32:D0:F2:AF:2D:7F:43:A0:C9:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32322d3232203d3e20323638303333.roa
Signing time:             Mon 25 Sep 2023 17:54:48 +0000
ROA not before:           Mon 25 Sep 2023 17:49:48 +0000
ROA not after:            Mon 23 Sep 2024 17:54:48 +0000
asID:                     268033
IP address blocks:        168.228.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:47:a8:1d:48:1f:f5:09:d4:8d:3c:dc:0e:9c:a9:fe:0d:fa:e3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B
        Validity
            Not Before: Sep 25 17:49:48 2023 GMT
            Not After : Sep 23 17:54:48 2024 GMT
        Subject: CN=06B916F2B57DF2CA63CE4DD63A02E22040B796D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:fe:f6:a1:bd:e9:19:36:57:1d:d2:4e:f9:
                    12:d5:66:92:0e:7a:3c:c4:33:6a:67:72:29:4f:c0:
                    ae:a1:70:fc:c6:79:7b:54:0e:06:c0:fc:fc:a0:e5:
                    92:df:ca:bd:0a:d8:05:5b:b4:3e:1c:d5:42:29:82:
                    18:2e:16:f4:38:44:d6:09:c3:4f:bd:78:d8:9f:0f:
                    67:b2:31:cc:dc:ea:5d:40:a4:aa:86:f3:f6:55:fb:
                    30:1c:86:3c:e9:11:0e:cc:b9:c3:db:43:a5:7e:40:
                    fd:3d:64:e1:7c:03:e9:cc:fc:dd:a6:34:43:3a:49:
                    53:0a:34:0a:37:46:16:34:b9:a4:28:0c:31:7d:14:
                    4d:15:5d:be:8c:0c:6b:20:a2:0c:f5:be:73:db:4b:
                    27:d0:1d:44:85:53:9f:38:cd:eb:ab:90:21:ae:ee:
                    11:ba:1e:d7:35:e8:30:d6:44:24:9e:2d:49:ea:d3:
                    ce:a6:de:24:d4:97:ea:ee:84:a4:c6:55:2c:70:93:
                    00:78:c4:ea:96:b2:5b:cf:59:f4:fc:5b:c9:94:6e:
                    3d:bf:4f:57:05:3c:6f:1b:85:6e:de:19:78:d9:b8:
                    d8:f9:fa:1b:81:3c:d9:ab:27:32:b4:64:06:64:fb:
                    18:95:e5:47:95:78:da:8e:67:86:72:a3:aa:da:b6:
                    d0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B9:16:F2:B5:7D:F2:CA:63:CE:4D:D6:3A:02:E2:20:40:B7:96:D9
            X509v3 Authority Key Identifier:
                keyid:E2:81:98:F7:4D:3A:8A:80:6D:75:32:D0:F2:AF:2D:7F:43:A0:C9:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32322d3232203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:36:43:c5:0a:15:3c:38:a1:22:8f:f4:36:a1:11:a9:f5:3b:
         e3:81:14:f7:0f:a2:ce:dd:fd:61:fb:e8:cf:17:17:1c:a8:b2:
         8d:23:f1:bc:a5:13:97:d0:cb:b0:1b:7a:89:d0:df:5e:70:4b:
         e4:1b:05:fa:50:db:12:a6:d3:8c:d8:4e:2a:67:72:1a:ef:76:
         41:37:82:c8:89:ac:e9:30:9b:1c:39:ed:89:5e:60:68:ed:70:
         30:a1:b0:f2:2e:c0:e4:65:21:d1:c2:47:dd:8a:0f:35:7f:d1:
         89:f1:c4:89:50:1e:dd:62:8d:c9:04:59:1a:97:de:fa:4f:af:
         0e:25:ca:f8:4f:36:7e:49:dd:83:4c:4e:08:76:e2:7d:b9:6e:
         f0:d0:e2:d3:f5:08:32:84:6f:82:50:df:1c:43:5a:9f:ab:18:
         b9:3c:1b:84:19:55:40:6f:d1:ac:0d:70:11:f9:9c:2b:3d:e9:
         b0:6f:e8:94:48:7c:04:ee:a2:12:b0:73:5b:87:18:1f:78:62:
         74:b5:92:06:e4:e2:d2:77:9d:20:6f:74:d6:fc:46:b2:ff:e2:
         9b:0f:4b:6b:67:75:99:2b:99:24:ed:20:67:d1:ea:e0:7c:a1:
         ba:94:eb:c0:c2:3c:20:5d:86:38:27:d7:e2:15:aa:cd:cb:f9:
         68:c2:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org