Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137322e302f32342d3234203d3e20323633393234.roa
File:                     3136382e3233322e3137322e302f32342d3234203d3e20323633393234.roa (raw, json)
Hash identifier:          bU0ZZ6pb3t821Lk3IO/+ThQn9IvAN4aolznOjDeyzPk=
Subject key identifier:   A3:97:36:EA:0C:A6:6E:21:52:7D:41:9D:CC:4F:16:E4:FB:CD:00:68
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       5A0D4A5046CC3B117901DB1B2041D0C5D12A78F4
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137322e302f32342d3234203d3e20323633393234.roa
Signing time:             Mon 07 Feb 2022 12:09:18 +0000
ROA not before:           Mon 07 Feb 2022 12:04:18 +0000
ROA not after:            Mon 06 Feb 2023 12:09:18 +0000
asID:                     263924
IP address blocks:        168.232.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0d:4a:50:46:cc:3b:11:79:01:db:1b:20:41:d0:c5:d1:2a:78:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:18 2022 GMT
            Not After : Feb  6 12:09:18 2023 GMT
        Subject: CN=A39736EA0CA66E21527D419DCC4F16E4FBCD0068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:79:77:5d:0a:9e:71:c2:ad:44:58:39:1b:
                    73:3d:f7:58:ec:1c:23:10:f8:82:8b:90:18:b9:3e:
                    c5:10:12:d3:1a:86:ab:46:31:5f:a8:5b:77:a4:da:
                    90:e4:81:3e:89:06:91:67:6b:50:33:70:60:e8:c9:
                    e8:a8:84:3a:ab:ad:ab:1a:34:96:15:29:75:37:94:
                    87:e2:e3:d6:c4:f6:66:1e:f5:7a:a0:ca:2a:d3:76:
                    fe:fe:75:bc:f5:1f:dd:d1:79:09:17:86:cf:09:7d:
                    04:b9:df:7d:71:05:84:69:b3:15:6b:c6:7c:c6:4e:
                    95:70:6c:6a:24:8a:9c:14:bd:04:52:c2:bf:63:21:
                    0e:0c:03:c2:80:ed:a2:84:38:1f:18:96:d7:9d:34:
                    04:6f:2c:37:58:21:02:8b:e6:ee:a5:50:a0:5c:48:
                    d9:3e:a7:8e:27:0a:57:36:73:de:bb:fd:9a:2d:3a:
                    64:93:27:a5:0d:09:bc:b8:cd:6a:9f:b4:bc:8e:61:
                    1b:74:20:ec:b1:b2:b8:50:ae:c4:08:0f:3f:20:3e:
                    97:65:1d:33:0a:0b:30:49:01:30:3e:d0:4f:af:f2:
                    b6:6d:5f:77:82:23:a1:a3:60:a2:8c:eb:ac:ac:8e:
                    f6:e1:1b:69:8a:67:b6:c1:9c:3e:1e:7f:b5:cf:30:
                    b4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:97:36:EA:0C:A6:6E:21:52:7D:41:9D:CC:4F:16:E4:FB:CD:00:68
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137322e302f32342d3234203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:55:9d:55:54:5e:32:cb:ac:bd:f0:a5:19:c8:e2:04:2f:a7:
         f3:8a:f3:cb:0e:82:98:3d:2d:80:ff:b7:78:b7:04:1d:30:31:
         60:8e:c3:77:74:e4:80:1a:65:31:b0:4d:6c:5e:9d:b2:69:62:
         10:ee:19:49:9a:37:f9:cc:3d:e7:9d:94:17:76:b8:84:64:ec:
         7b:a8:54:8c:cc:7a:6e:e9:ef:31:1c:49:12:75:01:53:cf:28:
         b8:b9:e2:7d:40:c4:42:1e:7e:8f:1c:5f:4b:13:cf:66:67:cd:
         b6:bc:08:9f:5a:f0:45:d3:55:21:34:83:5a:62:b6:a7:d3:61:
         b8:42:62:ef:05:a7:b3:3f:f3:88:ee:21:2a:b7:b2:6b:37:23:
         e0:05:61:e7:28:fe:2d:86:62:06:20:7e:0e:df:da:25:5f:78:
         1b:f3:52:31:ba:4d:0e:26:df:7b:9b:e2:fb:b9:bd:40:1f:bc:
         92:36:cf:dc:ae:a1:79:18:fd:0c:aa:90:40:02:71:af:ec:e9:
         d1:e7:09:ed:76:73:e4:2e:c6:ba:f9:e0:3d:0e:ac:55:1c:2c:
         a8:32:dd:26:a9:9e:b3:f7:c9:27:39:84:74:04:be:57:02:39:
         92:ec:e6:66:59:f0:38:04:11:5f:6a:b8:46:f8:88:b1:0d:e0:
         eb:1e:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org