Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa
File:                     3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa (raw, json)
Hash identifier:          kCVU4JAgr+ig1C6Ju9FN9/xe83Q1r0fSOBlJYU9Zfcw=
Subject key identifier:   A0:AF:16:6F:02:CF:55:B2:C9:24:88:87:FB:67:4C:72:90:6C:A9:72
Certificate issuer:       /CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Certificate serial:       02D26C0E21483A237416D70C76EAC1B2BBDDC597
Authority key identifier: DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa
Signing time:             Thu 04 Apr 2024 13:52:29 +0000
ROA not before:           Thu 04 Apr 2024 13:47:29 +0000
ROA not after:            Thu 03 Apr 2025 13:52:29 +0000
asID:                     264891
IP address blocks:        168.227.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d2:6c:0e:21:48:3a:23:74:16:d7:0c:76:ea:c1:b2:bb:dd:c5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
        Validity
            Not Before: Apr  4 13:47:29 2024 GMT
            Not After : Apr  3 13:52:29 2025 GMT
        Subject: CN=A0AF166F02CF55B2C9248887FB674C72906CA972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:66:b4:36:9a:28:cd:6a:e1:8f:90:21:94:ea:
                    ec:ae:78:5f:33:c7:f1:aa:be:0d:0b:f1:28:05:3e:
                    05:22:b8:f8:65:4b:92:42:0b:5f:8b:f1:57:66:af:
                    ce:3b:95:40:b5:e2:0b:27:73:7f:dc:04:e5:78:d7:
                    45:0c:fd:9f:ac:7a:d7:ec:0e:db:3a:00:22:2c:b9:
                    07:bf:fe:a3:95:b9:a4:b5:00:18:61:89:16:d9:d0:
                    b7:cc:cf:68:62:3d:0a:0a:37:50:73:15:f9:12:17:
                    b8:e0:42:fb:e9:18:fb:30:29:16:66:90:b4:0e:33:
                    fb:86:88:7a:a2:79:26:5d:d1:a7:0f:84:49:75:7e:
                    ba:b3:97:04:4c:59:1c:1a:8e:b1:5d:b9:a0:b4:21:
                    58:6b:94:7a:bd:0e:42:20:99:3c:81:38:8c:21:8e:
                    e0:d3:44:83:fc:9c:cd:df:77:ab:05:36:e6:27:95:
                    7b:2e:6f:74:3d:45:20:27:32:ac:77:72:cc:7d:31:
                    28:00:2f:4a:48:9a:e8:10:ad:eb:6c:14:d6:a2:51:
                    d8:87:2d:86:1e:e4:92:d6:d3:c0:32:cd:d2:bb:3a:
                    48:06:4a:c2:7f:af:f0:ea:c6:e5:49:67:b7:4d:86:
                    7e:e3:53:ec:56:34:43:de:77:cf:a1:fa:5c:68:7f:
                    69:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AF:16:6F:02:CF:55:B2:C9:24:88:87:FB:67:4C:72:90:6C:A9:72
            X509v3 Authority Key Identifier:
                keyid:DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:23:bf:f3:d1:f3:76:2c:5a:4f:52:e7:17:c4:3d:24:52:e1:
         80:b8:5a:c7:6c:05:46:d1:39:65:43:f5:a8:77:00:81:a7:cf:
         83:65:04:93:2c:9b:85:62:52:f0:93:51:a2:45:b6:c5:06:19:
         ea:b3:d1:b7:1f:77:5f:4a:00:70:2a:04:e7:86:93:60:41:24:
         ab:cc:f8:71:3d:84:f1:7f:27:b5:56:55:78:d2:98:43:38:fd:
         0e:fc:18:73:ca:e8:5a:49:09:70:5f:b5:17:a5:9b:e8:15:5b:
         49:7f:c9:19:bc:c9:8d:7d:16:af:4e:ee:96:da:5b:2a:0e:e1:
         f5:02:49:81:75:f5:99:70:17:c5:d2:78:03:fc:3d:10:8b:71:
         05:f9:b6:a9:bc:f9:b9:fb:41:5b:78:a8:ff:6b:e1:da:79:8d:
         80:4d:17:c1:2b:68:be:1c:09:a3:0d:32:2b:e3:a5:1e:71:c1:
         12:f9:ff:7c:d0:cd:82:02:f6:7a:1e:6d:9b:10:b1:27:ca:87:
         88:14:3e:7e:f0:9a:e3:23:20:19:04:04:ba:50:84:b6:fa:cb:
         d1:35:bc:45:81:50:77:7d:c1:4c:d5:ee:52:94:70:b9:09:c6:
         26:76:2a:b3:58:47:13:b0:85:06:c8:81:02:bb:44:59:bd:e4:
         d2:3f:58:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org