Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa
File:                     3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa (raw, json)
Hash identifier:          /ES1nlpEiGFm1KUV7rGnWlKMt18tPx5dBlIN6oa/7MY=
Subject key identifier:   D7:6D:42:53:DC:58:9E:FA:58:12:25:62:F2:3F:7F:A1:23:26:F2:78
Certificate issuer:       /CN=D4C8F646F1ADB9F0D84282A75C65B603DDDE8365
Certificate serial:       2C374DCB34395EB08861EEC2622E68F5FBB4EBB9
Authority key identifier: D4:C8:F6:46:F1:AD:B9:F0:D8:42:82:A7:5C:65:B6:03:DD:DE:83:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa
Signing time:             Tue 20 Feb 2024 14:34:08 +0000
ROA not before:           Tue 20 Feb 2024 14:29:08 +0000
ROA not after:            Tue 18 Feb 2025 14:34:08 +0000
asID:                     264878
IP address blocks:        168.227.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:37:4d:cb:34:39:5e:b0:88:61:ee:c2:62:2e:68:f5:fb:b4:eb:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C8F646F1ADB9F0D84282A75C65B603DDDE8365
        Validity
            Not Before: Feb 20 14:29:08 2024 GMT
            Not After : Feb 18 14:34:08 2025 GMT
        Subject: CN=D76D4253DC589EFA58122562F23F7FA12326F278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fa:78:76:82:6e:91:b4:c6:c7:50:cf:af:a7:
                    14:35:9b:37:d0:ae:1f:10:17:b4:fe:7d:40:34:45:
                    15:42:29:59:6d:a4:df:64:e3:5c:fa:5c:12:ce:cc:
                    48:e2:20:02:a1:9d:28:82:0b:c1:2b:27:71:76:44:
                    a1:ea:db:34:6d:61:87:ed:00:9f:a5:63:25:d3:e6:
                    6d:00:e5:88:bc:c8:4c:11:e3:cc:40:07:d0:2c:11:
                    af:ec:e1:5d:e2:2c:51:fa:a4:41:32:a1:d7:17:f1:
                    5c:b5:52:37:cb:99:a4:a7:fa:0b:96:2b:41:58:c4:
                    68:86:f9:23:fc:79:f0:1a:9d:54:d8:a9:63:0a:b2:
                    44:0d:2c:ce:ac:d8:f8:77:09:b3:70:c3:85:0c:5a:
                    5f:cc:34:9f:1b:aa:02:a4:c0:8b:92:d8:4d:d3:aa:
                    1d:b2:cf:0b:80:7f:be:9e:29:69:0b:3c:b2:5b:fd:
                    7a:48:c5:93:1e:b7:c0:c2:7f:cf:87:bb:df:5d:b5:
                    db:e8:10:3c:92:a9:bb:e9:ff:3f:ed:77:2a:26:ec:
                    77:0e:59:18:bb:9a:d8:9e:ec:24:cc:60:4d:f7:52:
                    39:55:17:b3:6c:5d:f0:8d:0f:1d:29:92:48:93:e7:
                    4e:1a:08:36:eb:e1:3d:24:e6:c9:27:ea:f1:4a:5c:
                    68:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6D:42:53:DC:58:9E:FA:58:12:25:62:F2:3F:7F:A1:23:26:F2:78
            X509v3 Authority Key Identifier:
                keyid:D4:C8:F6:46:F1:AD:B9:F0:D8:42:82:A7:5C:65:B6:03:DD:DE:83:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:26:c0:a2:e9:21:5d:5b:b2:0d:14:97:ad:98:aa:fa:a3:4f:
         13:fd:0c:1c:f9:8f:8b:5d:15:b7:1f:fc:9b:b8:65:69:bb:c5:
         3c:c8:16:bd:c8:fa:c2:cd:82:b0:b4:a2:1c:86:45:5e:c6:ac:
         67:67:9e:3b:7d:09:1a:67:cf:a2:f4:0a:8e:03:fe:85:f6:e9:
         75:ef:a1:a1:a8:e2:70:c4:ea:df:99:d5:46:39:b9:ff:94:cc:
         04:55:99:d9:1c:79:ca:59:2a:c9:9e:8e:6c:3c:4a:7b:4d:18:
         7e:ba:26:80:8a:d0:f9:44:25:a8:5f:bc:db:88:c1:fe:0f:a6:
         81:94:c0:d1:4d:c8:26:84:4d:10:e6:f5:41:11:52:8c:58:bd:
         01:14:5e:30:f6:a6:da:29:86:44:3b:cc:13:98:ea:2b:75:14:
         3b:b8:12:45:d4:97:a3:3a:8c:fc:4f:25:29:8f:c3:73:cb:9e:
         bb:5e:bf:09:d8:ea:8a:f4:47:ce:10:49:cf:95:ed:2c:73:1a:
         9e:89:ce:eb:2b:f6:6a:6b:67:80:e0:35:90:0b:2c:55:01:04:
         cd:88:73:a9:56:8d:79:ac:89:56:e0:97:1a:83:e0:be:48:d7:
         ed:c9:8b:11:1e:9b:8b:58:2d:a7:25:2e:a9:ab:6c:fe:f9:c8:
         51:7d:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org