Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3136382e3232382e3131362e302f32322d3234203d3e203238313938.roa
File:                     3136382e3232382e3131362e302f32322d3234203d3e203238313938.roa (raw, json)
Hash identifier:          XJG1tE0JPrZ9TnM3P9dnzXwUXuAD4BcVkSt99/McyLg=
Subject key identifier:   C8:63:FD:1A:67:D1:4D:FB:E1:F7:34:A4:07:55:43:54:C2:C8:C6:83
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       013EBFBCAEF25D06E7FE908B5AA02C273402DD49
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3136382e3232382e3131362e302f32322d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:26:20 +0000
ROA not before:           Mon 21 Aug 2023 20:21:20 +0000
ROA not after:            Mon 19 Aug 2024 20:26:20 +0000
asID:                     28198
IP address blocks:        168.228.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3e:bf:bc:ae:f2:5d:06:e7:fe:90:8b:5a:a0:2c:27:34:02:dd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:21:20 2023 GMT
            Not After : Aug 19 20:26:20 2024 GMT
        Subject: CN=C863FD1A67D14DFBE1F734A407554354C2C8C683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:53:b4:72:bc:46:d7:41:bf:5b:ed:53:cc:
                    22:a4:9f:1c:ae:50:b8:47:6d:06:cd:43:96:2c:c1:
                    49:47:0c:70:e0:45:c9:2e:fc:4d:43:36:37:39:8a:
                    b9:d2:c8:ef:06:23:9f:fd:eb:76:17:14:7d:9c:64:
                    25:15:22:68:c4:e5:86:9c:43:18:bd:06:31:2d:77:
                    5f:9b:89:f4:af:55:e0:45:22:75:88:a5:5c:12:3b:
                    d0:ee:48:9e:02:b5:3d:ff:b2:50:79:e3:98:30:45:
                    96:58:bd:26:80:d5:99:cf:27:f5:60:2e:bd:bf:51:
                    1c:c9:e0:41:2b:f9:ae:db:44:20:7f:10:9d:70:31:
                    d9:7d:a8:5a:75:e1:c7:1c:a8:d7:bb:88:94:f5:5e:
                    7e:84:15:7c:72:ca:e9:6e:c7:93:f8:05:b7:c5:96:
                    f1:bb:9a:70:22:4b:f6:d5:03:82:69:13:b9:85:88:
                    89:9b:e5:27:ea:5c:2e:da:3d:a3:5a:c8:8f:2b:47:
                    33:5a:10:ea:a9:e0:e4:47:cd:38:2d:36:68:bd:ba:
                    f9:45:5a:10:ec:24:ee:bd:c3:c3:cf:24:a4:4e:84:
                    1e:09:78:6a:fb:70:2a:df:7f:06:21:6a:be:78:79:
                    52:2e:81:18:68:d3:bd:ba:e4:b6:6d:6a:60:53:3a:
                    94:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:63:FD:1A:67:D1:4D:FB:E1:F7:34:A4:07:55:43:54:C2:C8:C6:83
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3136382e3232382e3131362e302f32322d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:7b:bf:4c:69:af:44:e6:58:f1:55:66:f4:d9:64:a3:2f:59:
         4f:a2:e2:3c:10:2e:a3:fd:4b:f9:ac:14:f0:41:3b:54:e8:a3:
         28:42:9e:ba:6c:dc:3f:44:42:3c:7e:22:b2:06:24:51:1f:3c:
         15:13:06:71:a3:b0:36:bc:d7:83:d4:36:95:68:eb:78:e4:96:
         34:37:e9:b4:91:28:21:a2:2c:8b:cb:7b:f7:ee:25:4b:07:12:
         13:c8:49:27:0a:69:bc:7c:eb:fe:c8:c7:84:90:93:57:6f:2e:
         3b:67:b7:97:c0:0b:1d:92:bc:00:d4:6d:41:ab:04:9f:05:a2:
         9e:a8:30:2b:34:a7:e1:71:d7:98:11:05:39:eb:dd:e7:dd:35:
         29:34:bc:a4:14:e1:8d:27:87:9d:ab:2d:f0:19:d6:aa:7e:1b:
         15:27:83:69:cb:54:7c:ce:fd:ba:53:66:eb:92:d1:12:e8:7d:
         a8:3b:39:2c:67:da:0e:9a:c5:37:e0:c2:2d:8d:14:1c:70:cc:
         4b:26:33:3c:7b:c5:25:dc:87:bb:cc:f4:37:71:d8:de:2e:2e:
         8f:68:d5:d8:f7:5b:08:84:6e:bb:cc:da:c1:29:ca:60:fc:38:
         b5:96:10:7e:5a:2c:cb:5b:2a:4b:5e:34:01:e0:cb:a2:95:7f:
         dd:00:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:17 2024 by rpki-client on console-fra.rpki-client.org