Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa
File:                     3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa (raw, json)
Hash identifier:          ewjormaXUmUuCjsWWT0psAetOwT06hhAOACFWlpKbLM=
Subject key identifier:   80:07:A1:F4:B4:DB:2A:59:0B:2B:9E:E3:BC:A5:97:D4:68:58:3E:C9
Certificate issuer:       /CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Certificate serial:       3BE194E883B06F0C10CEE46CE50DC3F65B0377BE
Authority key identifier: DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa
Signing time:             Thu 04 Apr 2024 13:52:29 +0000
ROA not before:           Thu 04 Apr 2024 13:47:29 +0000
ROA not after:            Thu 03 Apr 2025 13:52:29 +0000
asID:                     264891
IP address blocks:        168.227.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e1:94:e8:83:b0:6f:0c:10:ce:e4:6c:e5:0d:c3:f6:5b:03:77:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
        Validity
            Not Before: Apr  4 13:47:29 2024 GMT
            Not After : Apr  3 13:52:29 2025 GMT
        Subject: CN=8007A1F4B4DB2A590B2B9EE3BCA597D468583EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9d:f0:b8:01:04:dc:be:1e:1d:d6:88:09:94:
                    e9:82:16:9e:1a:72:f6:c0:17:ad:b9:03:51:dc:a4:
                    6a:02:57:32:24:50:e9:00:b6:83:b6:b0:a9:a3:aa:
                    33:cb:98:d9:bb:80:2c:ef:dd:55:35:0c:7c:30:91:
                    e2:1a:74:bd:81:ff:36:62:f5:cb:1f:61:c4:29:19:
                    5d:d9:33:3a:16:d4:44:ae:20:fc:1c:9f:23:70:b0:
                    84:1b:3f:7f:80:3e:41:d3:66:0c:42:74:45:8c:f0:
                    e3:3c:f0:ef:f9:ed:1d:47:d1:2c:08:86:64:12:94:
                    1a:9f:af:65:71:9f:56:ea:b6:2e:77:4a:41:7f:9e:
                    94:67:e3:cb:89:23:db:2e:bc:83:23:38:80:ae:32:
                    1c:02:9d:59:2c:4a:7b:96:03:7e:58:b8:d5:98:20:
                    03:8c:35:e2:e5:a6:c2:ef:50:f5:77:2f:50:a6:5e:
                    58:e9:1b:49:fe:6c:ac:ca:d3:69:d4:73:e2:43:1b:
                    5b:22:60:17:24:0f:b8:e2:69:8c:75:d8:40:9a:f8:
                    be:f2:b2:96:cd:3b:7c:5a:0a:d5:c6:2d:52:51:9a:
                    ec:49:fa:6c:43:f9:da:24:63:5b:a9:32:90:be:4b:
                    6f:35:49:f3:a1:cf:aa:a3:37:0c:c0:3c:07:14:db:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:07:A1:F4:B4:DB:2A:59:0B:2B:9E:E3:BC:A5:97:D4:68:58:3E:C9
            X509v3 Authority Key Identifier:
                keyid:DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:da:92:52:73:25:1d:70:4a:10:f1:a6:e3:72:bc:11:ed:05:
         27:5c:88:7c:9d:08:7a:1d:c0:67:a3:00:72:c3:c0:16:1c:9a:
         ec:6a:85:53:fa:4e:0d:13:0e:00:15:5e:b0:b6:21:12:99:f0:
         d5:65:1d:c5:be:7d:9b:a8:49:e8:3f:f3:02:69:54:95:6c:6f:
         3c:b5:bf:04:14:7a:c3:d5:d7:a7:d7:f4:31:66:7b:61:4b:fa:
         57:eb:a4:1a:5a:be:08:f9:5b:5b:8b:d3:f4:b0:59:07:3c:74:
         6c:63:53:5c:1c:99:db:ad:2e:3a:5a:d1:e7:7d:4a:f5:4e:d1:
         c3:10:33:28:1e:92:58:42:25:2b:e5:72:f8:e1:aa:36:68:82:
         78:a6:8f:b5:7f:b1:78:7a:54:b9:eb:7c:59:73:87:17:01:2e:
         51:11:62:94:42:0a:62:e0:67:a2:5f:ad:2f:1d:7c:81:70:ac:
         db:e0:41:18:82:44:8d:1c:e7:fa:1e:80:42:8f:54:7c:aa:25:
         c7:f2:91:aa:30:d0:cd:0d:e2:c0:0a:b4:9d:8e:36:e1:52:82:
         90:d8:e8:5b:e1:8c:6a:13:0e:6f:7f:c5:cf:96:3a:de:52:b9:
         e5:68:da:87:93:18:9b:d8:f3:eb:97:a8:e1:f4:ef:43:57:62:
         70:fa:4b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org