Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137342e302f32332d3233203d3e20323633393234.roa
File:                     3136382e3233322e3137342e302f32332d3233203d3e20323633393234.roa (raw, json)
Hash identifier:          IbJvwoGuwEgpL+IZUzUHNOVPtOfhYiGJW7cDa9m8Agc=
Subject key identifier:   F8:71:44:4C:E0:46:79:61:C1:43:08:7F:A9:9E:35:36:4C:9F:FB:A8
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       5D7C7FE0061C0C20001BB61D0563E148F6E689A5
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137342e302f32332d3233203d3e20323633393234.roa
Signing time:             Tue 10 Oct 2023 03:11:24 +0000
ROA not before:           Tue 10 Oct 2023 03:06:24 +0000
ROA not after:            Tue 08 Oct 2024 03:11:24 +0000
asID:                     263924
IP address blocks:        168.232.174.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7c:7f:e0:06:1c:0c:20:00:1b:b6:1d:05:63:e1:48:f6:e6:89:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:24 2023 GMT
            Not After : Oct  8 03:11:24 2024 GMT
        Subject: CN=F871444CE0467961C143087FA99E35364C9FFBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:bd:ad:63:46:96:9b:90:cb:62:c9:3a:b5:
                    6e:9c:3d:b9:fd:10:b6:8e:16:0d:f1:b0:d8:a2:ae:
                    30:14:30:6b:cc:ad:88:94:2b:01:dc:ca:c5:ce:64:
                    c2:dc:d4:1f:3c:fb:ab:54:48:ed:e2:69:d4:a2:08:
                    d5:98:b0:65:f8:f0:85:9f:fb:f2:c7:5f:af:c0:03:
                    05:8e:9d:91:48:30:9c:e2:33:b0:01:9b:87:b7:b3:
                    0d:2a:b8:45:16:52:93:bd:85:42:69:57:5c:ef:8e:
                    cc:f1:3e:52:c5:eb:fa:de:3a:fb:7d:b7:20:c8:bb:
                    e7:f8:e6:13:e7:f7:a0:7b:e2:4a:12:44:60:ff:97:
                    0a:ac:51:a8:48:26:9d:a5:30:67:25:d8:a4:33:3f:
                    cc:28:fe:e0:5c:5d:a9:29:4e:f6:a7:9b:47:b9:c5:
                    ea:c2:c0:f7:4d:13:fb:63:98:e7:0b:70:80:6b:79:
                    2f:bf:dc:9f:ff:7b:af:9f:b0:a9:c4:8f:f1:f4:f0:
                    3c:56:ad:81:53:ae:3f:cd:0c:40:63:9b:8d:85:5b:
                    38:fb:b9:17:41:44:40:bd:0f:f8:be:8d:54:11:1f:
                    0b:6d:1f:4f:fa:ff:c9:be:d9:95:c6:3b:4e:39:86:
                    1d:a0:ff:3d:9d:a1:55:d3:6c:64:9a:4a:de:3b:be:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:71:44:4C:E0:46:79:61:C1:43:08:7F:A9:9E:35:36:4C:9F:FB:A8
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137342e302f32332d3233203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:c7:39:0b:f1:62:07:f4:db:f0:23:44:9c:8c:20:a3:d7:b3:
         a7:b3:1e:6b:81:0b:bf:d7:75:fd:5f:ac:a8:72:e3:eb:3a:a5:
         e2:21:dc:19:2a:32:88:3e:6e:49:c2:00:57:cd:98:bb:8e:28:
         cf:3e:71:e1:7f:51:8c:16:b4:23:07:b5:57:cd:98:0b:30:a9:
         66:22:40:75:41:df:43:c3:76:d3:65:74:a6:ce:54:9a:ee:c2:
         22:6f:e6:b1:eb:0c:2a:9f:dd:1d:f7:04:8f:07:43:ba:70:f7:
         6b:a4:b4:e7:46:67:f1:2f:3b:a0:b2:e4:d8:ea:7b:28:ca:5e:
         c7:2e:34:57:d7:9a:b5:45:e6:ca:c5:72:f4:b8:78:41:11:c4:
         25:52:1a:ee:fa:aa:df:14:f4:b2:ed:c6:48:0b:3e:8a:57:0c:
         21:3c:86:73:ed:25:6e:a2:d6:7d:a4:a9:fd:b2:99:ad:66:63:
         24:a3:fd:e2:4f:65:9d:48:3b:e5:7a:3b:6e:8c:1f:9d:18:7a:
         b6:f8:87:6e:f2:ab:b7:6d:70:6c:db:f6:ad:76:22:68:69:9a:
         8f:d5:c8:b1:36:ef:51:4b:aa:0a:e3:c6:3a:2e:db:9a:b3:f3:
         0a:ed:01:ef:3d:cf:59:13:a4:b1:9c:de:8c:88:6c:ef:6f:cb:
         cb:56:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org