Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/3136382e3232382e3134382e302f32322d3234203d3e20323634393533.roa
File:                     3136382e3232382e3134382e302f32322d3234203d3e20323634393533.roa (raw, json)
Hash identifier:          Agf4LXiY7bYLFitmWblTI1roptDAmA0mEb2mmH2FK8g=
Subject key identifier:   60:24:46:94:24:6B:18:BB:F2:C5:41:D6:40:8B:67:27:59:88:AB:D4
Certificate issuer:       /CN=1B1702BC517065A11637A946F3D5295EB223FCE1
Certificate serial:       245C9511A4046BB1276B933CA44EE93F61044F65
Authority key identifier: 1B:17:02:BC:51:70:65:A1:16:37:A9:46:F3:D5:29:5E:B2:23:FC:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B1702BC517065A11637A946F3D5295EB223FCE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/3136382e3232382e3134382e302f32322d3234203d3e20323634393533.roa
Signing time:             Mon 19 Feb 2024 23:00:49 +0000
ROA not before:           Mon 19 Feb 2024 22:55:49 +0000
ROA not after:            Mon 17 Feb 2025 23:00:49 +0000
asID:                     264953
IP address blocks:        168.228.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5c:95:11:a4:04:6b:b1:27:6b:93:3c:a4:4e:e9:3f:61:04:4f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B1702BC517065A11637A946F3D5295EB223FCE1
        Validity
            Not Before: Feb 19 22:55:49 2024 GMT
            Not After : Feb 17 23:00:49 2025 GMT
        Subject: CN=60244694246B18BBF2C541D6408B67275988ABD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:7c:a3:48:89:ba:a2:e9:11:d0:1d:2e:23:
                    c5:14:0a:9b:27:84:34:07:f1:ef:da:fb:0c:60:50:
                    e0:db:58:36:61:4b:dc:1f:9f:ae:8e:90:1d:94:a1:
                    05:17:5c:50:b3:ec:7d:0a:e6:38:6a:5d:3f:b1:08:
                    08:b3:17:25:f7:94:cb:e9:8f:65:c0:68:ff:97:1a:
                    53:e7:9c:4b:f9:1f:0d:91:95:bf:65:ad:f6:9b:82:
                    3a:57:bb:23:d7:9a:7f:6d:2a:02:51:a2:c1:53:66:
                    0f:18:3b:86:70:7c:68:3e:1e:54:96:3b:53:ac:62:
                    85:1b:62:2f:35:82:61:71:33:96:06:d3:7c:4a:31:
                    10:66:54:3b:c0:3a:b0:69:4d:60:74:fd:a8:05:c4:
                    c1:e6:25:ad:eb:d8:e9:02:f7:a7:b9:18:d9:aa:e5:
                    53:f7:c6:d5:c5:fb:81:51:a0:72:d9:92:ae:24:88:
                    64:30:34:3b:d0:a8:11:4b:eb:34:7b:5b:5f:08:76:
                    a3:53:4e:88:4e:42:78:ce:df:18:8e:31:e8:2d:66:
                    51:4f:26:a4:9a:a0:42:96:73:04:1b:e5:27:6b:06:
                    14:d8:34:be:0b:19:10:c6:18:8f:76:3b:26:61:95:
                    12:60:cc:8c:37:40:c4:2d:f9:49:63:ca:b7:db:55:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:24:46:94:24:6B:18:BB:F2:C5:41:D6:40:8B:67:27:59:88:AB:D4
            X509v3 Authority Key Identifier:
                keyid:1B:17:02:BC:51:70:65:A1:16:37:A9:46:F3:D5:29:5E:B2:23:FC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/1B1702BC517065A11637A946F3D5295EB223FCE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B1702BC517065A11637A946F3D5295EB223FCE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/3136382e3232382e3134382e302f32322d3234203d3e20323634393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:dc:6a:4f:a7:6e:c4:23:6a:bd:ef:88:c8:23:73:6a:c6:7c:
         53:c4:0c:51:fd:26:63:65:4c:a4:3a:b0:52:5f:c8:eb:3d:6f:
         f8:be:3b:20:33:7d:18:8e:c2:9f:15:11:d0:f0:01:40:00:49:
         05:5d:3d:06:70:ce:ff:84:49:a6:df:56:23:c1:aa:fb:33:1a:
         0b:a4:35:5e:f1:26:3a:74:58:d6:b0:6f:83:c3:8f:5f:f0:03:
         d5:f7:9c:8a:5a:7f:11:e5:86:e8:d9:27:d4:7f:e5:d5:58:7c:
         7d:c8:5e:17:4c:e0:11:dc:3b:aa:20:02:1d:c3:ef:36:0b:bf:
         7f:2a:8f:2b:9b:13:2c:8a:c5:ed:c1:1a:26:bd:0c:f9:af:ed:
         6f:2f:95:60:c1:d2:83:00:98:83:23:4d:a8:6a:a2:71:70:56:
         fd:4e:b8:e3:d5:e5:3c:6c:c1:7b:b5:e1:6f:cf:fa:d7:02:3f:
         1e:11:db:42:72:21:ba:bd:a7:a2:51:53:7e:ec:cd:bb:73:f1:
         15:94:a9:db:26:fc:73:b4:6e:3c:af:df:98:1c:9f:e2:5e:e7:
         0d:d1:df:33:90:4e:01:59:9b:89:cb:1c:7d:de:17:bb:0a:6e:
         36:2c:53:a8:a4:a1:e3:af:d9:4a:d3:95:64:3f:da:86:9a:0c:
         36:92:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org