Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/0/3136382e302e33322e302f32322d3234203d3e20323635323232.roa
File:                     3136382e302e33322e302f32322d3234203d3e20323635323232.roa (raw, json)
Hash identifier:          LKSKsDyYIpp47291z+nIu6blp60EmZFL+zoG90s6Vws=
Subject key identifier:   A9:10:83:FB:97:CD:19:C1:43:94:B6:82:17:47:6D:4D:22:96:99:AD
Certificate issuer:       /CN=ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607
Certificate serial:       78E450FD4F6DEA3A6B5E058BBBDE9564A8A12B0A
Authority key identifier: AC:CC:A6:3E:7F:5C:F9:6D:1B:DA:D6:96:47:DD:C1:F5:33:9B:46:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/0/3136382e302e33322e302f32322d3234203d3e20323635323232.roa
Signing time:             Fri 22 Sep 2023 02:52:40 +0000
ROA not before:           Fri 22 Sep 2023 02:47:40 +0000
ROA not after:            Fri 20 Sep 2024 02:52:40 +0000
asID:                     265222
IP address blocks:        168.0.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e4:50:fd:4f:6d:ea:3a:6b:5e:05:8b:bb:de:95:64:a8:a1:2b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607
        Validity
            Not Before: Sep 22 02:47:40 2023 GMT
            Not After : Sep 20 02:52:40 2024 GMT
        Subject: CN=A91083FB97CD19C14394B68217476D4D229699AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:91:28:73:1d:38:a7:3f:b9:77:46:b0:c8:7d:
                    27:52:fb:be:0e:90:6e:02:33:96:8c:03:0a:2c:17:
                    0d:f5:07:e7:5a:a7:c7:75:f2:68:a6:42:cc:65:fb:
                    9c:92:a9:21:de:04:a3:03:ca:bb:1b:c6:a8:a8:1f:
                    40:cc:ce:5b:ad:90:2e:df:3a:a5:0a:55:81:1e:d3:
                    3c:0d:78:ef:0e:9a:8c:71:61:d2:08:1d:84:6d:6f:
                    05:e3:30:bb:a2:bf:eb:91:d4:a9:70:9f:d4:dd:66:
                    af:0d:56:80:90:5f:ad:f5:56:be:46:ee:f3:48:31:
                    25:e5:08:b6:df:e8:23:86:8b:ae:5f:c2:22:0f:3a:
                    f9:c0:0e:2c:d2:94:1d:f4:ee:d8:d9:8a:80:6e:3e:
                    39:a1:95:e9:5e:c7:df:f5:c9:f6:43:08:54:43:8a:
                    60:cd:3f:21:fe:5f:99:9f:c8:fd:c7:fa:c7:15:74:
                    5e:87:c2:b3:93:9b:09:69:41:42:80:a7:5f:32:80:
                    82:89:aa:c4:cf:0c:74:7b:e3:88:84:56:53:9c:fd:
                    e3:ad:3e:d7:8a:c0:51:1f:75:09:d1:2a:ca:51:d7:
                    ee:54:ad:b4:6d:14:b4:91:62:7d:38:d4:65:15:e3:
                    5b:f8:22:79:f6:18:e7:62:25:6d:ba:9a:f2:7a:60:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:10:83:FB:97:CD:19:C1:43:94:B6:82:17:47:6D:4D:22:96:99:AD
            X509v3 Authority Key Identifier:
                keyid:AC:CC:A6:3E:7F:5C:F9:6D:1B:DA:D6:96:47:DD:C1:F5:33:9B:46:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/0/ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/0/3136382e302e33322e302f32322d3234203d3e20323635323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:4a:f3:30:34:80:86:56:82:21:60:9a:fd:79:ce:91:4f:0b:
         26:0f:c0:b2:f0:bc:ff:ac:c5:bb:b8:e6:99:4f:ee:9c:cd:da:
         c3:10:48:3d:c5:21:65:f2:6f:b3:2f:5d:0d:a3:20:46:78:b6:
         d6:ec:46:5d:98:6c:e4:b0:52:48:59:9c:01:30:bc:ff:fd:68:
         50:6b:2c:9d:38:d5:5d:c7:8f:12:b8:e3:06:3b:a6:06:33:92:
         df:42:3e:d1:b4:df:0a:09:25:55:a6:59:f8:8e:dd:bf:1f:da:
         c0:6e:14:e6:c2:09:23:09:a4:b1:b0:e9:be:25:cc:3a:0b:da:
         8d:fb:97:53:78:bd:42:ad:0d:94:cc:a8:1a:99:2e:12:33:2b:
         cc:7b:58:01:4a:e7:90:df:06:65:23:3f:41:a2:cf:8b:3a:da:
         9a:ce:54:76:3f:f0:d8:ad:d0:90:2b:27:7a:b9:31:b0:bd:ed:
         04:97:62:13:2a:78:bd:d2:29:e4:2b:b3:9a:50:8f:ed:2d:83:
         7d:f2:58:89:a8:3c:be:07:4b:fa:fb:bc:d4:80:11:99:f5:73:
         ec:d2:47:94:1c:d7:ad:13:9e:58:a2:7c:d7:58:54:bb:78:28:
         c2:2b:fa:00:f7:ac:94:1e:df:7b:2b:a6:71:18:42:11:e9:fe:
         7a:5f:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org