Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/3136382e302e3136382e302f32322d3234203d3e20323635323537.roa
File:                     3136382e302e3136382e302f32322d3234203d3e20323635323537.roa (raw, json)
Hash identifier:          gD5GvEbtVsaX7wRQNM+aD2GfvxVOXca/5NcLkyMtOJ4=
Subject key identifier:   92:61:4D:FD:3B:A8:A8:55:85:B7:E1:87:7C:D0:B5:FF:DD:BC:67:A4
Certificate issuer:       /CN=1F683E17DBD2821BE147258DABB9735B7258ECE2
Certificate serial:       47CAA84399827F513226B78B9284761934EBE4B6
Authority key identifier: 1F:68:3E:17:DB:D2:82:1B:E1:47:25:8D:AB:B9:73:5B:72:58:EC:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F683E17DBD2821BE147258DABB9735B7258ECE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/3136382e302e3136382e302f32322d3234203d3e20323635323537.roa
Signing time:             Thu 21 Jul 2022 14:09:05 +0000
ROA not before:           Thu 21 Jul 2022 14:04:05 +0000
ROA not after:            Thu 20 Jul 2023 14:09:05 +0000
asID:                     265257
IP address blocks:        168.0.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ca:a8:43:99:82:7f:51:32:26:b7:8b:92:84:76:19:34:eb:e4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F683E17DBD2821BE147258DABB9735B7258ECE2
        Validity
            Not Before: Jul 21 14:04:05 2022 GMT
            Not After : Jul 20 14:09:05 2023 GMT
        Subject: CN=92614DFD3BA8A85585B7E1877CD0B5FFDDBC67A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:5e:5f:7e:cb:5d:b3:83:fe:d5:f1:26:90:
                    01:3a:41:7a:0a:ef:58:e0:63:ef:53:14:b9:6d:38:
                    dd:11:42:56:33:40:a2:dd:e0:d0:30:b4:a2:fb:3f:
                    e0:3c:d5:34:77:29:53:c7:6f:42:9e:da:12:76:14:
                    1c:c0:d9:6f:c6:f1:41:3b:a6:81:80:f9:77:cf:b2:
                    fd:dc:db:a3:ba:76:37:5c:d0:7c:6f:91:01:15:7f:
                    2d:c7:01:1f:7b:c4:49:74:ea:f7:83:7b:e8:4d:20:
                    b1:27:8c:33:94:b7:c2:bd:0e:92:75:39:9e:6b:c6:
                    94:c4:cd:14:49:b6:c8:24:b1:66:16:0d:90:14:30:
                    ff:51:8d:5a:73:32:ff:0f:3d:80:8c:60:f8:9b:fd:
                    7a:fe:44:f6:88:26:64:8b:eb:40:2b:5e:31:34:ba:
                    3b:7e:29:53:26:9d:89:0f:34:46:7f:20:46:d6:d4:
                    68:b9:98:03:90:45:17:ef:e7:0c:a7:86:1f:60:79:
                    31:5b:59:80:bd:9f:ee:4f:20:57:76:09:2f:5e:f1:
                    3e:0c:ea:21:0f:b3:ab:a1:2b:c1:b7:d6:d1:83:e5:
                    d5:4c:98:c2:5c:10:c8:e0:79:e3:28:e9:19:da:95:
                    23:ce:d9:80:e3:0e:0a:5b:82:65:88:91:ed:0c:aa:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:61:4D:FD:3B:A8:A8:55:85:B7:E1:87:7C:D0:B5:FF:DD:BC:67:A4
            X509v3 Authority Key Identifier:
                keyid:1F:68:3E:17:DB:D2:82:1B:E1:47:25:8D:AB:B9:73:5B:72:58:EC:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/1F683E17DBD2821BE147258DABB9735B7258ECE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F683E17DBD2821BE147258DABB9735B7258ECE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/3136382e302e3136382e302f32322d3234203d3e20323635323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:2e:ca:cb:37:6e:ec:f8:a6:1c:a0:3a:21:05:f8:50:77:eb:
         6e:f5:92:8a:d5:c8:ce:44:fc:ec:f5:e8:df:d8:aa:ee:21:71:
         d9:f5:5b:f4:d9:c3:ee:22:d5:b0:97:19:6f:47:f5:65:03:0e:
         bc:1f:08:0f:0b:06:be:51:0b:8c:26:c9:78:45:a5:b2:ca:ce:
         d1:64:c7:32:dc:41:2d:84:6c:27:1b:d1:1d:69:d5:ab:9f:dd:
         9c:cd:60:0e:22:a6:a8:cd:3a:75:02:b2:3a:1b:15:3f:a0:92:
         8f:c3:37:14:3b:d5:0a:e1:70:71:32:60:62:96:84:71:53:72:
         9c:86:f0:95:5d:63:fc:05:cb:ae:cd:a3:36:40:c5:a5:4f:6c:
         24:0e:0c:79:c4:f0:8d:56:91:05:47:05:5a:df:fb:16:55:81:
         47:51:7e:0b:03:fa:d3:12:ac:77:85:bd:4d:fe:5f:47:37:36:
         3c:5f:09:73:b1:b9:04:eb:af:35:b1:1e:da:3b:d8:c9:da:52:
         8b:35:d6:b9:bd:0f:80:ca:33:06:5f:7a:4a:93:b5:5c:92:4e:
         ae:42:fa:4d:f4:a8:86:24:59:70:c5:50:c0:f6:b6:24:1e:b3:
         b4:65:4b:23:94:75:13:74:dc:22:f6:2e:a0:cb:2a:77:c3:86:
         cf:99:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org