Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/3136382e3138312e3136382e302f32322d3234203d3e20323635333338.roa
File:                     3136382e3138312e3136382e302f32322d3234203d3e20323635333338.roa (raw, json)
Hash identifier:          8oEfggvpMQLn8JHtzpuJYczRSJwqOa3yOfLRe5fkJWo=
Subject key identifier:   42:7D:BC:BC:BD:97:34:35:27:05:FA:F9:A3:8C:7D:26:16:F4:AE:28
Certificate issuer:       /CN=C3EFDFE04774A66D55883520CCE25EDF13AB92DF
Certificate serial:       5927E3FF4F63A02C7037E637005AE4A019864AEA
Authority key identifier: C3:EF:DF:E0:47:74:A6:6D:55:88:35:20:CC:E2:5E:DF:13:AB:92:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3EFDFE04774A66D55883520CCE25EDF13AB92DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/3136382e3138312e3136382e302f32322d3234203d3e20323635333338.roa
Signing time:             Sat 26 Nov 2022 12:50:55 +0000
ROA not before:           Sat 26 Nov 2022 12:45:55 +0000
ROA not after:            Sat 25 Nov 2023 12:50:55 +0000
asID:                     265338
IP address blocks:        168.181.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:27:e3:ff:4f:63:a0:2c:70:37:e6:37:00:5a:e4:a0:19:86:4a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3EFDFE04774A66D55883520CCE25EDF13AB92DF
        Validity
            Not Before: Nov 26 12:45:55 2022 GMT
            Not After : Nov 25 12:50:55 2023 GMT
        Subject: CN=427DBCBCBD9734352705FAF9A38C7D2616F4AE28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:61:2b:87:a7:61:39:4f:b2:81:fc:3d:0d:
                    3a:78:22:ea:c0:2c:6b:9d:04:7f:03:98:43:f6:6c:
                    28:b6:bb:5d:63:62:d9:b8:c7:99:4a:81:dd:4d:22:
                    4e:0a:5d:ea:af:b8:1f:48:9b:3c:e5:2c:89:38:68:
                    1c:7b:82:90:67:2f:20:51:a6:bd:e2:8a:bf:06:3a:
                    75:3c:ce:5a:64:a6:34:3d:7d:88:22:2b:64:76:45:
                    c7:15:a5:a1:e7:fc:a6:fd:ef:b5:8c:fb:73:e0:4a:
                    c8:6b:5a:de:94:fa:8f:c0:22:94:e6:f2:98:6a:47:
                    d1:d3:70:07:8a:33:81:2c:c9:df:93:2e:d9:6d:ad:
                    cc:1e:a2:e4:56:39:96:8d:2a:9a:90:7a:1d:cb:77:
                    12:95:67:49:7d:b3:28:ca:f9:2d:cd:ce:f8:74:31:
                    e0:54:67:7f:f2:95:23:34:39:9a:01:e4:35:bb:a3:
                    12:47:18:30:12:a5:b3:e9:89:ed:0e:d2:12:05:5a:
                    ad:b2:5e:f0:7d:53:02:fc:d7:27:54:8a:3d:03:35:
                    85:0b:31:6d:07:20:90:f7:c6:43:62:07:25:c5:30:
                    db:a6:1d:a4:02:6a:98:24:dc:fc:44:71:6c:77:89:
                    57:a2:4c:34:b8:a1:43:c2:dc:56:32:2e:f3:66:e0:
                    b4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7D:BC:BC:BD:97:34:35:27:05:FA:F9:A3:8C:7D:26:16:F4:AE:28
            X509v3 Authority Key Identifier:
                keyid:C3:EF:DF:E0:47:74:A6:6D:55:88:35:20:CC:E2:5E:DF:13:AB:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/C3EFDFE04774A66D55883520CCE25EDF13AB92DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3EFDFE04774A66D55883520CCE25EDF13AB92DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/3136382e3138312e3136382e302f32322d3234203d3e20323635333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:5c:e7:5f:c9:48:aa:26:0a:cc:17:3f:1b:4b:66:f3:55:fb:
         be:96:2d:41:49:b6:7b:cd:ad:e2:2a:80:f4:2d:71:a4:ff:a6:
         ad:73:14:a9:9e:93:2a:27:30:5f:be:a7:a1:83:03:50:29:c4:
         2d:7f:c4:0d:89:95:1b:d7:4f:35:f5:61:0b:34:a0:f0:e2:f1:
         59:27:16:73:f6:c6:b8:f9:75:dc:54:a1:a1:94:08:fb:f8:4b:
         44:1c:ce:ac:f5:a5:1a:ab:04:17:3c:30:00:ac:ef:7a:84:be:
         3c:70:5d:d6:cd:e3:16:0b:ac:6d:af:5c:eb:43:02:b7:ef:db:
         71:e3:b6:c8:ba:63:79:1a:7b:b0:ba:30:11:b1:f6:27:35:c2:
         b8:19:aa:55:d7:00:63:34:30:2a:75:0e:1a:c3:09:e4:e2:2c:
         ee:ff:68:fa:d8:3e:0d:77:e7:34:cc:05:9d:0c:5e:87:58:5e:
         3e:9a:5e:52:c2:8c:40:20:ef:91:fa:5c:d2:87:01:db:18:fb:
         5f:ba:65:85:c7:47:46:20:65:5a:cb:06:0d:e3:00:c8:32:5e:
         0b:4b:86:3e:5b:a8:ca:7b:2a:9c:87:4d:47:cf:06:cc:ba:8c:
         fe:2d:39:b1:b9:29:78:80:01:aa:86:db:6c:2a:13:18:16:0e:
         23:df:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org