Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32342d3234203d3e20323638303333.roa
File:                     3136382e3232382e3138342e302f32342d3234203d3e20323638303333.roa (raw, json)
Hash identifier:          SP6EvWP/IY276UZBzjV/f+Qy7pCC7fBZ9GyauSodmnQ=
Subject key identifier:   40:7D:1F:80:1C:B3:E4:1D:A5:24:CA:C7:20:2D:0E:4A:31:1A:C3:CF
Certificate issuer:       /CN=E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B
Certificate serial:       4A7CEDD94ED43E623D177CCA53434FC3A76A8BEE
Authority key identifier: E2:81:98:F7:4D:3A:8A:80:6D:75:32:D0:F2:AF:2D:7F:43:A0:C9:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32342d3234203d3e20323638303333.roa
Signing time:             Mon 25 Sep 2023 17:54:48 +0000
ROA not before:           Mon 25 Sep 2023 17:49:48 +0000
ROA not after:            Mon 23 Sep 2024 17:54:48 +0000
asID:                     268033
IP address blocks:        168.228.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7c:ed:d9:4e:d4:3e:62:3d:17:7c:ca:53:43:4f:c3:a7:6a:8b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B
        Validity
            Not Before: Sep 25 17:49:48 2023 GMT
            Not After : Sep 23 17:54:48 2024 GMT
        Subject: CN=407D1F801CB3E41DA524CAC7202D0E4A311AC3CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:69:bc:bb:f7:92:dc:e4:eb:c3:80:c2:75:
                    3b:00:8d:ab:3a:96:23:ef:bf:a4:8a:9d:79:1f:5f:
                    57:69:6e:da:6b:b5:2d:3e:09:b0:ea:7c:9d:69:f1:
                    f4:54:55:2e:91:6e:53:3f:96:ca:70:a4:c8:fb:1e:
                    28:8f:96:ed:97:8c:2b:83:45:56:69:a1:29:93:4c:
                    4b:20:85:35:6c:c9:c0:c2:7a:cb:97:25:47:a2:1a:
                    78:41:ba:7c:69:c4:e2:c7:59:c5:4b:28:9c:25:8b:
                    84:9f:ad:24:fe:6b:66:39:6f:d4:a8:b1:e9:33:cf:
                    ac:53:4a:ca:4e:d9:a4:54:bb:fd:80:6c:69:ed:99:
                    69:35:88:1b:bd:6a:cb:33:69:cb:d6:9f:36:6e:c9:
                    c6:4b:73:0e:1f:9b:57:56:42:17:98:ea:5f:d2:3f:
                    90:66:ee:f9:89:2b:c8:aa:77:bb:ed:e0:8a:98:0b:
                    f1:2c:de:bf:0b:36:d0:b4:5b:9f:19:0f:e8:a5:6a:
                    7b:5f:9a:85:de:9d:ec:1d:52:7b:5a:c1:1c:30:4b:
                    65:b5:e7:51:6a:47:be:83:a3:2b:aa:b2:73:85:73:
                    f0:6f:44:06:0e:5f:61:02:75:6a:c9:ac:0b:c2:af:
                    c0:09:56:83:63:b1:c2:fd:81:7f:bf:3d:21:f5:9a:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7D:1F:80:1C:B3:E4:1D:A5:24:CA:C7:20:2D:0E:4A:31:1A:C3:CF
            X509v3 Authority Key Identifier:
                keyid:E2:81:98:F7:4D:3A:8A:80:6D:75:32:D0:F2:AF:2D:7F:43:A0:C9:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32342d3234203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a1:a6:ae:83:29:ac:a8:d0:9f:80:8b:7d:14:7d:e3:d2:99:
         c5:fa:f4:c7:1e:08:23:be:df:7a:79:5e:bd:2c:63:b1:91:d9:
         98:0e:2e:5a:c1:c4:d1:04:af:55:ce:ee:ad:f1:7f:ff:da:90:
         6f:21:d8:67:53:4a:47:8e:ac:b1:60:da:66:bd:e7:d3:06:7c:
         0b:c7:c6:63:a6:58:21:b8:52:e2:6d:07:e2:44:7e:20:3b:98:
         19:80:7c:96:0e:51:5d:3d:f2:34:3a:ce:0c:ea:e0:fe:7b:12:
         e3:29:27:44:4a:e0:82:94:3a:44:e9:5b:6d:c5:bc:af:8f:44:
         c7:18:51:d2:ab:4c:1b:d0:51:a4:cc:39:73:88:28:ac:42:37:
         c2:a3:7e:8f:1f:93:50:15:f0:01:b1:55:ba:92:c7:21:b0:15:
         c5:b9:ad:39:33:45:6d:10:6b:07:52:03:1b:a7:d6:ff:07:2a:
         76:2f:66:3c:67:8a:87:06:94:ee:22:19:3d:95:60:11:2c:b4:
         58:9b:61:55:ec:08:5d:cc:c4:03:39:e3:87:4c:6d:6d:fa:61:
         b9:4b:73:9a:0f:75:14:74:b4:17:fe:6e:15:94:fe:ca:fc:19:
         93:ab:2a:a7:b5:07:f2:a8:38:b2:49:f7:7b:95:dc:84:8d:8b:
         d6:2e:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org