Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa
File:                     3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa (raw, json)
Hash identifier:          qgT83Uo7a18rTBSza+YRwpraNOYLM+WRE7GRWVgwP9s=
Subject key identifier:   4F:58:00:FA:54:4E:F5:87:D1:B7:DF:09:C6:6D:3F:13:AD:9D:7B:72
Certificate issuer:       /CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Certificate serial:       08A1A36065F8FB910CF5978CDC79FD9A118F1DB3
Authority key identifier: DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa
Signing time:             Thu 04 Apr 2024 13:52:29 +0000
ROA not before:           Thu 04 Apr 2024 13:47:29 +0000
ROA not after:            Thu 03 Apr 2025 13:52:29 +0000
asID:                     264891
IP address blocks:        168.227.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a1:a3:60:65:f8:fb:91:0c:f5:97:8c:dc:79:fd:9a:11:8f:1d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
        Validity
            Not Before: Apr  4 13:47:29 2024 GMT
            Not After : Apr  3 13:52:29 2025 GMT
        Subject: CN=4F5800FA544EF587D1B7DF09C66D3F13AD9D7B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:16:fe:a4:9b:47:d9:0c:06:d4:5b:6f:ce:
                    a1:94:7e:a5:0c:e8:39:6d:8a:0b:04:ef:52:0d:e6:
                    ff:d7:dd:5a:63:eb:21:01:fb:42:d8:5d:54:bb:50:
                    ae:30:1b:66:ec:14:e1:24:b9:fc:87:b1:19:b8:42:
                    61:64:ad:f6:30:9a:1a:03:06:8e:ec:1c:c5:94:a4:
                    4f:9c:ab:51:ea:ee:c6:89:87:6d:7e:c8:00:ff:6a:
                    b1:05:6e:c3:98:ac:29:68:a7:27:4c:73:37:39:32:
                    73:7d:9c:83:bb:61:eb:79:a6:a9:bd:e2:ec:50:11:
                    38:97:d9:ec:59:8d:c7:17:e7:3b:7a:81:a2:f0:b0:
                    fa:99:e0:78:47:ae:ff:a7:d4:4b:87:68:db:cb:21:
                    63:dc:80:9e:f8:75:35:4e:39:e6:e5:83:27:cb:c3:
                    91:3d:7a:3f:c2:89:0c:4f:cf:6d:eb:aa:84:aa:7f:
                    27:9d:cb:78:94:78:7b:b2:00:37:53:44:ec:68:c2:
                    73:41:e6:b8:d5:76:1e:25:19:5f:c6:5d:a6:5f:f1:
                    c3:b9:52:c9:7f:bf:76:55:54:98:a2:67:31:61:43:
                    9c:f4:ac:18:a0:b1:79:be:06:84:4a:a9:07:3a:66:
                    a1:76:0d:a2:63:37:0d:e9:05:5d:5c:dc:27:99:d0:
                    e6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:58:00:FA:54:4E:F5:87:D1:B7:DF:09:C6:6D:3F:13:AD:9D:7B:72
            X509v3 Authority Key Identifier:
                keyid:DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:04:d4:d1:52:bd:4b:c2:fb:0b:f8:bc:0c:3d:73:c0:72:f9:
         3d:fd:ea:39:88:ae:2b:18:40:2a:bf:cb:b8:e9:75:c4:c4:33:
         b8:7f:46:83:f5:35:08:ff:b3:8f:36:f1:37:17:85:e7:c8:4d:
         bd:55:cc:d5:62:3b:e7:19:fd:99:02:33:93:74:db:bf:38:1c:
         91:59:a1:30:45:96:d0:17:4f:1f:df:1e:2d:d1:50:6c:0a:bb:
         51:5a:0c:8d:cd:e4:95:82:df:9f:6e:e0:b2:9b:8f:1a:ac:a6:
         2b:33:14:cf:36:00:cc:63:13:b5:ed:37:db:d0:f0:a0:56:43:
         8b:19:a8:8e:a7:cd:a3:0a:7f:84:14:08:24:40:26:6d:94:ae:
         26:2b:0f:ea:a4:f1:18:bb:dd:09:bf:15:94:60:bf:24:88:7f:
         5e:0b:53:e1:28:02:7f:87:1f:f3:d1:28:f6:40:46:a0:fe:16:
         e6:5b:c8:8a:b2:a4:2c:6c:56:ea:82:ca:8e:8e:a7:8a:f1:4c:
         13:63:9d:d4:1e:eb:7f:bc:5d:98:b8:08:12:1a:42:f7:fc:0c:
         87:24:46:8f:f2:0d:b7:a3:79:66:04:2c:18:ca:6e:bc:e7:01:
         8a:ce:ba:6a:84:5b:fc:05:11:53:e0:cb:7f:5d:b6:c7:03:95:
         91:1d:15:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org