Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa
File:                     3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa (raw, json)
Hash identifier:          F/mtmB6KzMbFCW7GWI4ufqtPapQ1C1QuV1AB8rCoT3Y=
Subject key identifier:   A4:45:1E:73:D6:23:BB:CC:98:B2:C5:4F:14:6C:D6:6F:BB:A9:7A:05
Certificate issuer:       /CN=4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138
Certificate serial:       381619AF8067D63A53F114C77F65D15BE9839C3A
Authority key identifier: 4E:6D:A4:3B:69:CD:8C:7E:9E:C9:EF:84:3C:CE:24:BE:36:F9:41:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa
Signing time:             Thu 04 Jan 2024 13:08:27 +0000
ROA not before:           Thu 04 Jan 2024 13:03:27 +0000
ROA not after:            Thu 02 Jan 2025 13:08:27 +0000
asID:                     264891
IP address blocks:        168.227.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:16:19:af:80:67:d6:3a:53:f1:14:c7:7f:65:d1:5b:e9:83:9c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138
        Validity
            Not Before: Jan  4 13:03:27 2024 GMT
            Not After : Jan  2 13:08:27 2025 GMT
        Subject: CN=A4451E73D623BBCC98B2C54F146CD66FBBA97A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:95:25:2f:b1:93:36:f9:1f:60:02:0e:77:
                    ad:72:0b:a1:a8:14:b4:cc:5b:4a:c2:d8:56:2b:cf:
                    52:6e:56:d4:79:28:77:db:f2:59:6f:ba:93:71:80:
                    d7:d9:2c:34:52:3c:8c:98:3a:9e:af:52:ff:a1:e1:
                    f8:61:2d:29:1b:c0:d5:06:15:a9:5e:47:e8:82:bb:
                    8e:cb:ca:de:ed:29:c8:7e:75:8d:96:a8:eb:f1:fe:
                    60:21:d9:f1:07:35:93:bc:b6:b0:34:b0:bb:40:10:
                    bd:eb:74:65:9d:75:bd:0a:8f:30:30:5c:b3:4a:dc:
                    ae:86:5b:e8:8e:e6:c7:be:ba:72:b1:28:98:9c:3e:
                    52:80:6f:8f:85:86:f5:ea:33:36:6c:dc:04:c4:ba:
                    b0:50:c9:4d:e8:37:48:82:d9:03:04:97:76:83:a8:
                    5f:27:51:a9:44:2a:b2:d4:d4:e0:92:71:8a:fa:48:
                    5c:68:40:7c:76:79:d0:da:68:5f:f6:42:1d:04:72:
                    f3:74:b0:02:e4:d3:5b:3e:f0:26:ef:f5:78:5f:33:
                    dc:0f:65:d7:c1:40:32:90:7e:6e:cb:38:5d:63:a2:
                    82:ed:43:f8:75:4e:86:44:25:2d:28:fe:ff:1d:a3:
                    2b:d2:b4:7b:d6:f6:ff:52:8f:82:75:31:f0:4d:66:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:45:1E:73:D6:23:BB:CC:98:B2:C5:4F:14:6C:D6:6F:BB:A9:7A:05
            X509v3 Authority Key Identifier:
                keyid:4E:6D:A4:3B:69:CD:8C:7E:9E:C9:EF:84:3C:CE:24:BE:36:F9:41:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:cb:d2:7f:b4:88:3e:57:b6:90:72:be:da:48:42:90:bf:a5:
         e2:b6:4d:e6:e2:d3:43:a2:4a:e3:09:02:05:ee:4b:67:1d:36:
         c7:4d:11:87:74:7c:64:2a:95:df:12:9c:8d:92:62:be:79:d7:
         8f:d4:7c:ea:6e:d4:32:a1:23:6d:e2:56:3c:d0:6e:71:38:fb:
         1a:34:8b:c0:f7:84:3c:9c:1e:48:ef:9a:93:55:4d:e4:ac:bd:
         8e:5e:ea:c0:25:01:14:81:01:95:ab:64:8f:b8:42:b1:0a:c1:
         ae:27:24:41:80:5e:8c:e3:18:f6:67:d4:ea:85:b6:56:83:4c:
         9b:59:23:4d:b7:d8:dd:0f:01:a7:79:8a:9a:3e:76:60:1e:b0:
         f5:88:f5:bd:bb:50:32:d2:f3:bf:d7:8a:6d:f0:e4:83:61:e3:
         5f:ca:9d:3b:21:ce:f4:e6:2d:13:e0:c7:61:f9:4b:7c:ee:b5:
         56:ea:f9:81:92:6d:36:fa:9b:d5:46:05:45:12:12:8f:96:12:
         e8:5f:77:02:4a:ac:2c:05:68:76:f0:b8:b8:03:ea:12:73:aa:
         ad:1a:f0:5f:fb:f5:ff:0a:5d:a1:a3:61:6e:d9:cd:0f:0c:1f:
         55:81:f8:cf:68:b7:37:bd:99:81:88:70:1d:5e:90:d0:66:82:
         b9:3b:5a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org