Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/1/3136382e3232382e3138342e302f32332d3233203d3e20323634393237.roa
File:                     3136382e3232382e3138342e302f32332d3233203d3e20323634393237.roa (raw, json)
Hash identifier:          Q1JD1rV1ldejL2Et44fjSFCbRbvac0zQMxPzDtzrFEA=
Subject key identifier:   79:8F:21:7F:BF:A7:3E:58:77:AE:79:1C:95:7D:D8:DA:D6:D3:72:90
Certificate issuer:       /CN=D45B377837D2178AD2D91A89FD6AE9E521588910
Certificate serial:       4A7A5D17B1CCCC4755B37896261BE49172815C7E
Authority key identifier: D4:5B:37:78:37:D2:17:8A:D2:D9:1A:89:FD:6A:E9:E5:21:58:89:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D45B377837D2178AD2D91A89FD6AE9E521588910.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/1/3136382e3232382e3138342e302f32332d3233203d3e20323634393237.roa
Signing time:             Tue 26 Jul 2022 20:50:57 +0000
ROA not before:           Tue 26 Jul 2022 20:45:57 +0000
ROA not after:            Tue 25 Jul 2023 20:50:57 +0000
asID:                     264927
IP address blocks:        168.228.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7a:5d:17:b1:cc:cc:47:55:b3:78:96:26:1b:e4:91:72:81:5c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45B377837D2178AD2D91A89FD6AE9E521588910
        Validity
            Not Before: Jul 26 20:45:57 2022 GMT
            Not After : Jul 25 20:50:57 2023 GMT
        Subject: CN=798F217FBFA73E5877AE791C957DD8DAD6D37290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:0b:71:de:70:e0:ae:73:99:f1:91:02:a0:
                    0b:ff:ca:12:92:70:0f:6d:62:c6:e4:ea:bf:22:77:
                    0b:4e:ed:3c:60:85:84:6d:6f:dc:b9:87:46:8a:60:
                    b2:04:c5:3a:03:a4:7b:a6:84:77:74:79:3c:5d:cf:
                    ec:9d:98:8e:6f:b7:5d:b6:c5:b8:34:09:0b:ac:d5:
                    69:17:ac:20:0b:f1:15:53:bb:b9:7c:83:cc:f8:f7:
                    ed:14:29:0e:9b:5e:6c:e2:5c:d2:8c:cd:bb:79:49:
                    09:e3:57:88:0d:71:13:40:81:96:f8:6d:db:45:02:
                    4d:ad:90:d4:8c:91:78:c1:f7:72:80:18:3b:19:23:
                    b2:dc:ae:44:fc:06:73:ad:1b:37:6f:63:13:3e:d3:
                    f8:b6:5d:96:68:6f:4f:ba:6b:0e:b0:39:c7:75:55:
                    c5:58:89:57:82:fb:35:d0:a8:4a:8d:81:16:1f:9a:
                    55:ce:22:bf:4d:96:e0:e3:93:76:a2:36:e4:bd:0f:
                    e7:8f:c7:5f:de:51:07:a4:4c:df:e7:99:63:44:b6:
                    36:a3:d9:af:02:aa:18:cd:48:ee:54:c0:19:dd:de:
                    0a:57:c5:36:0d:99:db:79:b5:28:22:bb:3d:ca:99:
                    f2:b4:9e:5d:13:82:46:0b:56:f1:1e:41:20:c9:9e:
                    de:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8F:21:7F:BF:A7:3E:58:77:AE:79:1C:95:7D:D8:DA:D6:D3:72:90
            X509v3 Authority Key Identifier:
                keyid:D4:5B:37:78:37:D2:17:8A:D2:D9:1A:89:FD:6A:E9:E5:21:58:89:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/1/D45B377837D2178AD2D91A89FD6AE9E521588910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D45B377837D2178AD2D91A89FD6AE9E521588910.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/1/3136382e3232382e3138342e302f32332d3233203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:75:48:fa:de:db:80:3f:81:6e:5d:97:81:6a:4a:32:71:d2:
         b5:ea:ad:9b:6b:48:94:91:a6:f7:fb:65:56:04:ef:e3:a9:d8:
         ad:e7:e0:dc:1c:e6:61:ad:7c:d4:8a:ac:a6:23:b5:0c:07:7b:
         14:ab:49:28:0d:eb:40:fa:57:cb:64:37:98:68:a6:c0:35:7f:
         fb:0a:47:b1:0c:7f:a5:8e:41:e4:ad:40:78:f7:ae:64:41:2f:
         c8:d4:f7:bf:00:89:9a:2e:82:32:f3:45:35:41:a5:bc:6e:ad:
         a9:5b:77:60:b8:4a:b1:fe:43:b5:59:6d:8c:4e:42:03:0e:e7:
         7c:73:f2:86:90:9f:d8:55:dd:e2:6c:ac:67:3d:01:78:64:1a:
         5a:1a:65:06:ca:f5:2b:cc:42:c4:82:92:49:0a:91:ed:63:61:
         ac:16:6c:dd:bf:c3:3e:bf:72:c7:8d:8a:e8:d6:bd:f4:de:29:
         80:81:ca:9e:34:6a:83:93:80:29:aa:c0:56:06:1b:80:36:17:
         11:59:1c:08:f7:97:c7:7a:15:8b:87:01:85:8e:0c:6c:17:06:
         fb:57:3e:15:1a:f1:6d:c9:a8:9e:03:18:f9:1f:8e:3b:52:04:
         1f:74:95:2f:7a:36:98:8f:d8:6c:e2:f5:71:eb:4e:78:38:4a:
         9f:33:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org