Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa
File:                     3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa (raw, json)
Hash identifier:          4Lrvrb3WxX8AE5IQVGzfrX7YESE89wrtt2x3BJal/VQ=
Subject key identifier:   01:72:AF:55:9E:D1:DC:5F:58:8E:F9:6B:4E:CB:B1:13:CA:2D:78:06
Certificate issuer:       /CN=4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138
Certificate serial:       10A13D1B9A494BC2753B1E3714BF557B98F21D6A
Authority key identifier: 4E:6D:A4:3B:69:CD:8C:7E:9E:C9:EF:84:3C:CE:24:BE:36:F9:41:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa
Signing time:             Thu 04 Jan 2024 13:08:27 +0000
ROA not before:           Thu 04 Jan 2024 13:03:27 +0000
ROA not after:            Thu 02 Jan 2025 13:08:27 +0000
asID:                     264891
IP address blocks:        168.227.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a1:3d:1b:9a:49:4b:c2:75:3b:1e:37:14:bf:55:7b:98:f2:1d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138
        Validity
            Not Before: Jan  4 13:03:27 2024 GMT
            Not After : Jan  2 13:08:27 2025 GMT
        Subject: CN=0172AF559ED1DC5F588EF96B4ECBB113CA2D7806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:d3:7a:3b:d1:73:c5:ca:4e:89:81:0f:a2:
                    57:c3:f4:aa:1a:e7:37:0f:e5:9b:9f:01:d9:f9:dd:
                    fd:44:1b:1c:18:4d:a8:b5:70:72:8e:b4:bb:40:6b:
                    9b:3b:78:f8:d5:6d:3b:7a:80:ab:9d:ec:26:46:5b:
                    44:bc:8c:ee:01:8a:51:30:9d:40:a0:84:3f:46:88:
                    a5:4f:11:02:2c:26:6a:03:a5:e0:2a:c7:5f:da:16:
                    cf:cb:c6:4e:57:3a:ae:29:a8:2d:10:22:ee:9b:5a:
                    f2:31:05:c8:3c:a4:e2:3f:78:2c:7e:5c:e5:7b:54:
                    84:0c:52:67:a3:b9:b2:11:03:99:3b:6d:ee:d4:df:
                    bf:6a:c5:b2:1f:32:8f:2c:fd:4f:bb:15:46:da:a7:
                    f7:f1:04:f4:79:83:26:89:d1:01:ee:fd:00:7d:87:
                    14:4d:20:cf:7f:a9:f7:75:5c:77:4f:47:b1:ce:ea:
                    08:cf:b7:4a:b9:f0:87:57:06:36:35:32:ea:c2:34:
                    11:51:80:2d:07:f1:4b:d7:82:a7:b4:e7:9a:b7:99:
                    37:6c:d7:1c:1a:14:db:53:a0:2a:29:92:8c:9c:51:
                    ee:50:64:1a:e4:14:15:3c:d1:70:4c:57:b4:34:cc:
                    91:71:e7:a6:ec:66:14:7e:df:b2:e7:88:2a:c8:d1:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:72:AF:55:9E:D1:DC:5F:58:8E:F9:6B:4E:CB:B1:13:CA:2D:78:06
            X509v3 Authority Key Identifier:
                keyid:4E:6D:A4:3B:69:CD:8C:7E:9E:C9:EF:84:3C:CE:24:BE:36:F9:41:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:e3:99:87:df:6e:3e:c6:15:66:78:61:7e:4d:b7:90:2c:62:
         ef:f4:86:56:7f:86:0f:04:32:93:bc:04:56:80:db:22:7b:a6:
         90:3c:27:75:ea:36:a4:b4:75:6b:f0:5a:9b:d8:83:48:2a:c0:
         d5:58:66:f8:07:7b:96:a0:45:f3:95:2b:a6:08:82:91:ab:8b:
         d6:a9:8b:41:1f:9a:68:07:06:36:64:d2:5e:a2:da:2d:fd:46:
         03:cd:b7:17:01:de:27:06:7c:be:59:5a:be:3a:60:18:f4:d6:
         75:f1:20:d5:47:fb:4a:47:3e:e3:5e:32:58:57:83:d3:77:ce:
         81:39:1a:6d:f6:ec:dc:c2:b7:24:6d:ae:58:43:cc:c6:5a:43:
         5e:c0:47:6e:08:66:0a:95:6a:ee:a5:b2:e2:1e:e6:3e:4f:ad:
         2c:14:c1:a7:60:02:9b:58:7f:b6:e2:7d:46:a1:99:09:5d:db:
         ac:38:18:28:0c:7f:89:6f:22:69:e6:f8:7f:60:a0:d1:98:93:
         d1:16:fa:e4:5f:08:24:19:1b:f9:07:41:cf:bf:08:f1:c3:b5:
         fb:61:f1:e0:08:9a:f7:4a:b9:4e:bb:53:0e:19:d8:11:db:07:
         6f:42:5a:af:5c:91:26:17:61:cc:98:32:1f:60:7f:ac:82:d9:
         f9:d1:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org