Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/3136382e3232372e3232302e302f32322d3234203d3e20323634383839.roa
File:                     3136382e3232372e3232302e302f32322d3234203d3e20323634383839.roa (raw, json)
Hash identifier:          dlQD78DbSFdMnrAZ1K+n6r1ZS8RGckQi2FQb1eXOMyw=
Subject key identifier:   A7:C4:75:E9:D1:DB:7A:61:75:B6:6B:A9:30:5D:71:9C:83:42:22:7C
Certificate issuer:       /CN=6B1752AA3446916E5297A6E09C7C08107A973A4C
Certificate serial:       1FA6B44AF9ED780186D46749E457BA8DCA0C06B1
Authority key identifier: 6B:17:52:AA:34:46:91:6E:52:97:A6:E0:9C:7C:08:10:7A:97:3A:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B1752AA3446916E5297A6E09C7C08107A973A4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/3136382e3232372e3232302e302f32322d3234203d3e20323634383839.roa
Signing time:             Thu 04 Apr 2024 16:01:40 +0000
ROA not before:           Thu 04 Apr 2024 15:56:40 +0000
ROA not after:            Thu 03 Apr 2025 16:01:40 +0000
asID:                     264889
IP address blocks:        168.227.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a6:b4:4a:f9:ed:78:01:86:d4:67:49:e4:57:ba:8d:ca:0c:06:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B1752AA3446916E5297A6E09C7C08107A973A4C
        Validity
            Not Before: Apr  4 15:56:40 2024 GMT
            Not After : Apr  3 16:01:40 2025 GMT
        Subject: CN=A7C475E9D1DB7A6175B66BA9305D719C8342227C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b5:dc:6e:90:02:37:48:b9:a6:95:d3:98:f1:
                    13:2e:bd:72:2d:35:64:5e:f7:91:db:10:09:15:36:
                    12:e9:f3:3b:3b:47:74:e8:64:11:d7:5f:db:c0:59:
                    d7:df:c0:44:41:6e:05:f7:eb:cf:d6:eb:24:4b:08:
                    ef:47:da:ac:0c:8f:11:a2:5f:5c:f9:1e:e5:95:c2:
                    bb:3c:9a:c7:15:dc:50:0f:18:99:6f:71:18:66:8c:
                    9d:90:82:d6:aa:91:1c:db:ec:3a:75:d8:8e:7c:22:
                    6a:30:77:e9:0c:6f:b1:e0:ac:17:9d:6a:d5:cb:ef:
                    e1:d2:bb:41:57:f8:9f:4f:50:8e:ea:08:f4:83:f5:
                    21:df:2f:d7:e9:08:50:88:af:11:74:60:45:8b:09:
                    36:11:2b:5a:45:96:62:b8:85:14:09:39:68:3e:78:
                    2c:6e:06:07:4b:cc:b3:5f:84:35:d2:bf:13:cd:a6:
                    f7:f1:43:ff:81:28:4a:23:87:85:ff:d2:26:7b:4c:
                    2e:e9:42:66:b0:9c:61:19:65:69:de:5b:d5:8d:0f:
                    65:b4:d9:bd:d9:ad:a6:0d:49:19:85:80:f0:52:00:
                    fe:71:25:04:48:04:44:ac:27:d9:52:bb:25:69:45:
                    38:1e:3a:f2:86:aa:a5:78:13:af:c9:3e:df:2b:1c:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C4:75:E9:D1:DB:7A:61:75:B6:6B:A9:30:5D:71:9C:83:42:22:7C
            X509v3 Authority Key Identifier:
                keyid:6B:17:52:AA:34:46:91:6E:52:97:A6:E0:9C:7C:08:10:7A:97:3A:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/6B1752AA3446916E5297A6E09C7C08107A973A4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B1752AA3446916E5297A6E09C7C08107A973A4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/3136382e3232372e3232302e302f32322d3234203d3e20323634383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:9c:a8:3a:d3:fc:6c:ed:5b:7b:61:65:36:2f:d6:29:46:a0:
         83:4c:de:d7:57:77:3c:c0:4c:1e:40:ac:f2:ac:a2:bc:6f:b7:
         6f:9c:49:d5:60:04:e0:9f:0f:c4:44:c1:c1:35:3a:b3:b6:14:
         d9:59:cd:b7:d8:0f:9f:3e:00:92:0d:f8:ca:c2:09:65:66:e2:
         29:a2:7e:25:b3:1e:50:41:a9:b4:1b:8c:f9:02:da:ee:cb:8a:
         1b:93:7c:d2:ae:6d:a7:34:c9:46:a8:8f:18:e0:2a:00:2f:73:
         a4:dc:3d:96:16:02:2e:4d:a5:bd:99:e2:84:b5:13:34:97:f5:
         05:e7:0f:7a:c1:42:1a:7d:58:2f:fd:77:7d:e5:ab:3b:9f:55:
         4b:50:fc:bf:2e:ee:e4:be:5f:5d:c7:06:b7:61:f6:e6:87:1a:
         75:62:89:18:c3:49:6e:ce:a0:22:c2:b0:ae:b4:a7:25:5e:58:
         0e:0d:81:2c:b6:ee:c4:fb:7a:3f:d7:8c:61:7e:08:60:e2:24:
         d4:13:25:81:2d:1b:11:cd:00:b6:e5:5e:27:92:df:8e:85:65:
         ca:4a:c6:12:53:b1:6c:eb:92:18:51:2d:f0:11:16:3e:d2:43:
         22:f0:e2:1b:ef:5e:04:d0:5e:c8:d7:76:74:5e:06:49:4e:70:
         e8:a7:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org