Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32342d3234203d3e20323638303333.roa
File:                     3136382e3232382e3138362e302f32342d3234203d3e20323638303333.roa (raw, json)
Hash identifier:          VoYRhnMQ70+p5dzFRyxQD4ZqGeCeLSNCkSM5LCwk5Bw=
Subject key identifier:   19:B2:8E:C7:5A:9C:A1:BB:FE:51:7E:A8:11:02:20:BC:DD:AF:59:52
Certificate issuer:       /CN=E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B
Certificate serial:       742A9C05C9EE557A94F3EB34033716C09036F580
Authority key identifier: E2:81:98:F7:4D:3A:8A:80:6D:75:32:D0:F2:AF:2D:7F:43:A0:C9:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32342d3234203d3e20323638303333.roa
Signing time:             Mon 25 Sep 2023 17:54:47 +0000
ROA not before:           Mon 25 Sep 2023 17:49:47 +0000
ROA not after:            Mon 23 Sep 2024 17:54:47 +0000
asID:                     268033
IP address blocks:        168.228.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2a:9c:05:c9:ee:55:7a:94:f3:eb:34:03:37:16:c0:90:36:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B
        Validity
            Not Before: Sep 25 17:49:47 2023 GMT
            Not After : Sep 23 17:54:47 2024 GMT
        Subject: CN=19B28EC75A9CA1BBFE517EA8110220BCDDAF5952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:36:54:93:da:b6:ba:9e:7d:21:69:91:fb:
                    0b:8d:27:c4:c9:9f:d0:d1:39:a3:c4:78:8f:f0:37:
                    00:66:2f:55:ed:60:f2:f1:fe:45:b2:7a:08:58:b3:
                    f9:05:71:f2:25:6b:55:45:fb:d3:15:f2:d0:51:16:
                    04:71:6b:b9:f2:d3:87:be:11:0e:9e:90:d8:19:07:
                    88:eb:a1:77:d1:e5:42:b5:0a:a5:21:a1:dc:b1:eb:
                    cd:93:4b:ac:c1:80:db:7f:5b:50:7e:a5:23:22:4c:
                    5d:db:c9:f4:33:6d:36:99:40:4e:ed:68:39:0e:75:
                    4b:df:61:a3:f2:de:6c:2e:04:84:bc:cd:15:50:0c:
                    3b:e0:1b:2a:fb:3f:d9:7b:f4:df:0e:7e:20:1b:12:
                    fc:23:ac:30:4a:64:15:e0:22:ff:fb:36:14:9b:9d:
                    ed:3d:96:7f:ec:2e:fa:d0:40:98:4a:66:81:ea:f8:
                    41:4b:22:fd:d9:41:84:c0:31:00:38:87:4f:d9:8c:
                    ca:ac:ff:b2:01:4c:e2:7c:ad:6a:31:e4:4c:e5:d3:
                    87:cb:52:30:7a:33:77:e6:bd:cb:f3:03:29:e3:30:
                    c8:39:d1:9a:7b:7d:fa:65:26:e8:5b:83:0f:5e:aa:
                    35:a0:e4:e0:ff:03:f7:5e:0c:f5:fa:7a:46:d7:fc:
                    3c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B2:8E:C7:5A:9C:A1:BB:FE:51:7E:A8:11:02:20:BC:DD:AF:59:52
            X509v3 Authority Key Identifier:
                keyid:E2:81:98:F7:4D:3A:8A:80:6D:75:32:D0:F2:AF:2D:7F:43:A0:C9:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32342d3234203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:8c:9e:39:58:ef:bb:49:d7:41:b4:60:ae:34:7b:e1:33:ce:
         1d:67:08:07:f1:b9:0b:db:b8:5f:e1:d7:e3:c0:b1:d0:25:30:
         52:f8:e1:56:8e:a3:ab:03:9c:10:84:c3:ec:b4:93:1b:3c:2d:
         55:4c:10:5a:ef:d7:b6:7c:fa:b3:6b:1c:6b:2f:9b:41:27:f0:
         4c:0d:9f:90:da:3b:5d:ea:76:e9:66:3f:74:f8:12:1f:18:36:
         b8:0f:45:63:07:e5:4d:94:31:1b:ac:71:7b:cd:01:44:43:78:
         35:82:bf:60:6c:35:d4:67:3d:72:db:7f:2c:3c:66:04:b4:4b:
         35:b5:3d:41:fc:6c:89:aa:c6:fd:0d:13:5e:f6:2c:e9:83:cb:
         00:df:28:29:bf:b7:48:09:f3:3f:79:d0:0e:6d:c4:cf:90:a1:
         7c:92:6e:62:e7:8a:d3:61:3c:0d:09:66:94:7b:5f:4a:cc:58:
         d4:9d:0d:a2:d1:b5:54:48:0e:9d:ed:84:b9:a2:3b:d1:a0:57:
         21:36:d8:22:46:b5:a0:15:3b:b2:5e:69:a1:f6:9b:06:96:6a:
         e8:6a:53:d2:f8:9f:8a:5a:d2:7f:57:39:68:ca:52:66:64:11:
         03:5a:a9:f3:5a:31:f5:72:99:7f:34:02:09:54:2b:f0:6c:51:
         0b:37:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org