Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232322e302f32342d3234203d3e20323633343231.roa
File:                     3136382e3139352e3232322e302f32342d3234203d3e20323633343231.roa (raw, json)
Hash identifier:          oBst/jIbgKz74boZHZVaDVaP+bsrNihzFDQXdEdxOek=
Subject key identifier:   80:58:AE:31:6C:65:7B:38:B5:F4:22:90:E4:E8:81:16:CD:60:32:01
Certificate issuer:       /CN=411194BD84722FD252C79F3307A7C3ACFDC84782
Certificate serial:       5E887129E02D0199EEBC3BF6722347C0E24BD8B8
Authority key identifier: 41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232322e302f32342d3234203d3e20323633343231.roa
Signing time:             Thu 13 Apr 2023 20:21:45 +0000
ROA not before:           Thu 13 Apr 2023 20:16:45 +0000
ROA not after:            Thu 11 Apr 2024 20:21:45 +0000
asID:                     263421
IP address blocks:        168.195.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:88:71:29:e0:2d:01:99:ee:bc:3b:f6:72:23:47:c0:e2:4b:d8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Validity
            Not Before: Apr 13 20:16:45 2023 GMT
            Not After : Apr 11 20:21:45 2024 GMT
        Subject: CN=8058AE316C657B38B5F42290E4E88116CD603201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:49:7c:b5:e6:81:e5:28:5a:35:43:6e:fd:
                    16:91:8b:d2:4f:6d:d6:76:5e:80:35:b6:68:20:d7:
                    62:26:4d:75:61:67:86:cb:08:f9:a7:e8:dd:b0:74:
                    64:79:6d:7d:85:22:7c:70:84:d1:3a:51:14:4a:6d:
                    84:3c:57:1a:89:b8:c1:ca:11:6d:f8:db:3a:c7:f7:
                    75:f4:86:f2:ac:89:8f:86:a8:38:3c:9b:ed:ab:ad:
                    ec:e6:94:68:16:9a:79:d5:53:e3:1c:f8:7f:d8:bd:
                    e9:2f:33:ea:2b:1b:28:02:24:3f:94:0e:0f:24:5b:
                    d5:37:c8:bb:aa:e8:8e:12:fd:35:79:08:0d:ae:3c:
                    a8:bc:26:f0:0f:c0:f5:a8:07:b8:91:c1:11:bb:dc:
                    12:48:c4:a7:fa:0e:7a:b8:c7:34:25:3c:75:ab:59:
                    c4:ab:ff:56:2c:4e:ea:6e:04:32:24:fc:b0:7e:38:
                    08:dc:2c:68:b0:95:84:94:49:0b:49:fe:df:1b:b1:
                    fb:da:9a:0f:ed:5f:fe:53:db:e5:c9:b5:24:16:c4:
                    32:c3:55:27:49:20:e6:5c:00:62:3f:cc:a5:e8:39:
                    0d:3f:b0:fa:3b:23:73:d8:d5:ea:cf:cf:09:6c:14:
                    04:26:db:2d:6c:ca:74:dd:da:12:3b:75:06:10:58:
                    ca:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:58:AE:31:6C:65:7B:38:B5:F4:22:90:E4:E8:81:16:CD:60:32:01
            X509v3 Authority Key Identifier:
                keyid:41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232322e302f32342d3234203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c3:77:c7:c6:26:6b:67:7a:f8:f1:e2:78:7f:a7:97:9f:7c:
         d7:98:5f:4b:72:72:1a:2f:21:9c:e4:1f:55:ba:1c:9d:09:d4:
         91:e4:ee:9f:da:be:da:e8:4d:e6:3b:6e:71:80:ea:36:79:e2:
         6d:92:6e:d3:e7:f4:df:76:25:de:61:4d:0d:94:e1:23:97:82:
         a6:78:86:15:f2:5f:81:87:13:7a:4d:61:54:50:22:bb:18:b7:
         66:05:a5:6d:3c:81:ff:62:c2:90:6a:42:ef:04:55:f4:92:f3:
         0e:a4:00:1d:22:c0:64:33:5a:7e:e2:a0:79:12:a0:80:1c:94:
         b4:b4:85:ce:b5:86:ad:e7:35:5e:31:45:35:eb:69:34:25:01:
         04:fd:ae:7d:5d:70:12:2b:16:ec:f0:8a:44:de:b3:dc:74:c5:
         8b:2c:e2:33:ea:29:36:b2:62:1e:92:b4:33:47:28:d1:5e:c9:
         2b:68:a9:c1:ab:9f:e9:49:25:b0:d1:35:b8:3c:b0:29:f8:16:
         0b:2a:78:c2:cb:d8:02:e7:40:b8:64:37:76:f6:42:60:29:3a:
         94:5f:f5:a3:9b:87:59:f9:77:26:93:2e:f5:6b:0e:a1:4f:2a:
         5d:cd:51:28:02:36:0f:6b:88:34:83:09:5a:11:6e:d6:1b:fd:
         4b:ec:53:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org