Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa
File:                     3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa (raw, json)
Hash identifier:          YfOHE5etf8UrqXByx9oEPAOZLWIs2TvoCBx4ZL9C08Q=
Subject key identifier:   D6:DA:29:93:46:25:AA:AB:1F:00:38:57:63:36:BF:8E:9F:F8:73:D8
Certificate issuer:       /CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Certificate serial:       1FC4C9D5F7017F0351FE7B60DE10601F8CC1A3B7
Authority key identifier: DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa
Signing time:             Thu 04 Apr 2024 13:52:29 +0000
ROA not before:           Thu 04 Apr 2024 13:47:29 +0000
ROA not after:            Thu 03 Apr 2025 13:52:29 +0000
asID:                     264891
IP address blocks:        168.227.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c4:c9:d5:f7:01:7f:03:51:fe:7b:60:de:10:60:1f:8c:c1:a3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
        Validity
            Not Before: Apr  4 13:47:29 2024 GMT
            Not After : Apr  3 13:52:29 2025 GMT
        Subject: CN=D6DA29934625AAAB1F0038576336BF8E9FF873D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:52:7b:3a:bf:08:57:98:37:57:24:8f:35:f2:
                    9b:99:6c:a0:82:f0:63:58:4f:9b:14:48:92:e2:b9:
                    2a:b6:bf:bd:e7:58:67:71:b1:33:2d:a9:a1:21:0a:
                    e0:12:a1:2f:bd:34:6d:26:97:01:2a:d8:cd:a8:52:
                    01:56:d3:e7:86:6a:de:22:fa:85:9e:a0:cd:c4:6e:
                    0d:d8:00:a8:f8:da:12:6d:9e:b4:1f:ba:35:15:cd:
                    8b:e2:8b:56:8f:ef:2c:ae:0d:e6:a5:14:2e:20:c9:
                    30:20:90:a6:27:97:15:01:37:39:59:75:a8:43:b5:
                    af:37:d0:c3:15:2b:c6:66:60:9e:1e:37:80:62:1d:
                    c8:85:65:3d:c6:51:4f:3b:4e:7c:4b:9b:d1:a8:ef:
                    e1:e4:c9:3f:50:d9:d2:bf:07:51:69:cb:71:95:6f:
                    1c:a1:38:0e:ad:d1:44:36:b1:9d:64:31:76:3c:f8:
                    fe:85:a7:96:30:c6:be:33:63:b8:16:71:6b:63:89:
                    b7:b9:74:3f:63:0b:f0:5b:19:f1:50:5a:c1:dd:87:
                    97:8b:a4:e9:3e:1b:ae:0a:c0:f4:c9:5f:68:fd:68:
                    e5:62:14:a9:aa:96:7d:9c:34:a4:d7:6b:2a:90:b0:
                    69:6f:3f:14:b1:5f:1d:b1:45:a6:4d:58:01:6d:bf:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DA:29:93:46:25:AA:AB:1F:00:38:57:63:36:BF:8E:9F:F8:73:D8
            X509v3 Authority Key Identifier:
                keyid:DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:e6:5d:ee:04:6b:65:66:45:3c:ba:7c:f9:ee:04:ab:ad:f1:
         9b:c1:5d:21:37:5c:7f:d0:a1:19:6b:08:b0:7c:6d:29:ab:4d:
         41:f4:5c:13:99:c3:69:eb:44:65:ca:a0:35:25:d6:59:db:3f:
         d8:17:ca:05:60:a9:39:23:99:55:a8:e2:4c:62:c5:ab:36:d5:
         13:5f:10:88:e3:09:1a:99:44:33:79:99:da:25:59:df:c1:af:
         e3:91:15:91:04:ef:b3:c5:46:3d:19:b9:b5:27:d5:66:f7:85:
         fe:a9:ee:4b:48:60:b7:c1:e9:44:1a:63:40:67:5b:68:bc:0d:
         3e:92:3c:f4:6a:d0:a6:4e:3b:af:62:ed:a9:7d:c5:11:83:47:
         bd:8d:9a:20:11:dd:24:ec:9c:f5:40:4c:1d:58:11:a1:9f:ed:
         cb:64:30:38:37:dd:dd:2b:04:bb:b8:9e:5d:b9:ab:58:d6:e0:
         f5:5b:96:9f:6f:1a:85:3d:b1:c6:c7:a6:e9:27:b6:bd:d8:55:
         b6:ee:81:61:1c:3e:9a:1a:8b:1a:ed:c6:99:4b:c8:43:fd:1c:
         64:7b:5d:88:e0:ee:76:47:d9:77:6c:73:59:4c:7c:c1:fc:c5:
         7c:2b:67:a5:2e:5f:35:ec:9b:ef:44:84:d1:b5:02:bd:15:95:
         39:9f:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org