Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3134382e302f32322d3232203d3e20323632343933.roa
File:                     3136382e3132312e3134382e302f32322d3232203d3e20323632343933.roa (raw, json)
Hash identifier:          IKFLOR/pGrxnmJ7I+FBeYaL3jkF/R4hFvJqU+NqBGJs=
Subject key identifier:   85:A0:11:22:D0:E2:B0:87:56:11:5E:2D:F0:2C:B7:A5:18:22:30:F6
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       47459C34C116554296A63E5C941AE512466AC54E
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3134382e302f32322d3232203d3e20323632343933.roa
Signing time:             Mon 08 Apr 2024 20:10:47 +0000
ROA not before:           Mon 08 Apr 2024 20:05:47 +0000
ROA not after:            Mon 07 Apr 2025 20:10:47 +0000
asID:                     262493
IP address blocks:        168.121.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:45:9c:34:c1:16:55:42:96:a6:3e:5c:94:1a:e5:12:46:6a:c5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr  8 20:05:47 2024 GMT
            Not After : Apr  7 20:10:47 2025 GMT
        Subject: CN=85A01122D0E2B08756115E2DF02CB7A5182230F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:d3:2d:b4:b8:fa:25:22:18:be:f1:be:44:
                    dd:03:47:d5:b9:5c:76:4f:18:81:42:63:c0:8e:0a:
                    c0:03:10:14:04:c7:c9:88:04:97:ad:5c:3c:ca:2a:
                    75:01:9c:d6:20:2e:bc:f4:67:c8:92:f4:a0:0d:90:
                    9f:be:e3:79:7d:d4:ed:4b:df:20:e5:1e:a7:77:18:
                    42:02:d6:70:dc:65:2e:04:ad:7e:5f:5b:92:82:45:
                    dc:80:a5:02:7d:f0:85:98:7e:27:94:de:ff:30:63:
                    d4:f9:7c:15:d3:d2:26:03:3d:91:cf:79:94:fe:e6:
                    76:b1:7f:ef:d8:c0:5a:f5:1e:59:60:ae:b6:f7:08:
                    df:18:78:ee:94:cb:dd:f1:34:de:05:49:83:15:00:
                    39:d3:f1:17:13:b3:7c:c8:9d:99:ef:b6:1c:32:55:
                    e8:9c:0d:16:cb:37:0d:92:85:27:40:55:11:19:3a:
                    9d:b1:88:a3:97:7a:af:cb:6a:30:cb:72:6f:90:b0:
                    35:18:ad:fd:3f:54:07:88:a6:6f:f7:56:db:e9:0f:
                    a5:9b:9e:c4:b3:0e:98:a9:37:2b:ce:a0:8f:94:ae:
                    68:fd:ea:72:90:e9:49:04:73:b2:bf:0f:cd:75:46:
                    85:80:3d:78:a3:4a:c3:3e:9e:43:e3:e1:83:4e:2d:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A0:11:22:D0:E2:B0:87:56:11:5E:2D:F0:2C:B7:A5:18:22:30:F6
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3134382e302f32322d3232203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:18:3e:c5:46:b4:40:d4:fb:84:c0:83:6a:84:2e:87:cc:f7:
         bd:50:39:08:d5:c7:bf:d9:77:3a:0a:41:58:7e:7e:fd:f2:29:
         d5:05:67:18:4e:42:14:3d:81:80:b2:b0:54:a2:52:ab:e3:c9:
         0a:db:11:c5:85:f4:b0:44:b4:bd:0f:24:9f:07:0c:40:c9:92:
         9c:87:ce:c9:05:f7:67:20:c4:32:f7:ec:36:89:9f:80:b8:43:
         64:f3:c1:cb:5a:03:95:10:e8:19:5c:58:80:e8:f0:43:5e:4d:
         41:9f:51:81:08:28:47:e3:57:8a:fe:73:80:85:0e:d6:32:b8:
         d6:66:fd:7a:6f:8b:71:4a:41:84:07:51:6a:3f:ec:33:e1:e7:
         d0:6b:06:7d:80:27:35:3e:58:85:69:04:76:3a:10:54:1d:d5:
         3e:f3:c3:bd:ec:49:5e:cd:ce:06:5d:37:6c:47:fc:c8:72:58:
         88:e1:46:81:5c:8b:2f:30:42:47:ee:59:a4:7a:d8:a7:5e:19:
         84:df:c0:b6:58:78:98:58:73:20:5a:77:90:f9:d3:d7:dc:a6:
         e2:8e:46:2f:ba:5b:c8:93:82:ac:12:bb:69:bf:be:11:18:e3:
         fe:17:50:ed:0c:38:8d:17:0e:6c:a7:48:b7:01:36:b3:3f:e2:
         d6:77:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org