Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33322e302f32322d3234203d3e203238313238.roa
File:                     3136382e3139352e33322e302f32322d3234203d3e203238313238.roa (raw, json)
Hash identifier:          GmK4j/On0A5Xye9m17w2fkEdQQanEHo6sK3vhKxA9AY=
Subject key identifier:   83:6D:1D:4B:0B:A4:E0:29:9E:F7:EA:D5:00:CE:1D:1E:8E:C3:D5:28
Certificate issuer:       /CN=797CE135C58690EA32B22DD52903C5FEFBAB4033
Certificate serial:       69F56C2873C69FBE8A9EAC87DDFC40318DAFA705
Authority key identifier: 79:7C:E1:35:C5:86:90:EA:32:B2:2D:D5:29:03:C5:FE:FB:AB:40:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/797CE135C58690EA32B22DD52903C5FEFBAB4033.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33322e302f32322d3234203d3e203238313238.roa
Signing time:             Thu 13 Jan 2022 16:31:01 +0000
ROA not before:           Thu 13 Jan 2022 16:26:01 +0000
ROA not after:            Fri 13 Jan 2023 16:31:01 +0000
asID:                     28128
IP address blocks:        168.195.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f5:6c:28:73:c6:9f:be:8a:9e:ac:87:dd:fc:40:31:8d:af:a7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797CE135C58690EA32B22DD52903C5FEFBAB4033
        Validity
            Not Before: Jan 13 16:26:01 2022 GMT
            Not After : Jan 13 16:31:01 2023 GMT
        Subject: CN=3082010A02820101009A65837DDBBBA2E04D33D81637E36D67B648364D5EF74F4F2F4C287E6662C4A25544849F992AEB66F1C0715DA4ACDF73A9DA7160462D6C3C9FC241BE531E4109349642D00E9C7313191D134A638CF5B6FD39C8DFCB14F4D1803988831557C51FB01D739D73CED36D5C27252FACD3234B59E736BE5E907A62EB7D709FD7C7B9D88D0D9BF36F8F2F4ABC9E88ECA4E6D6FECCE64CBC2836481F67538F1B4FF3F06BD1515777282F663014BB2BBCD361D378FFA19B46E1CE4A15CC9955C24F9EC20C8B3D2350361BB2141A1B53D93B5C983D4AE6EC0C250F3E6C96401EFE558625702D2101D2E6F386F153C40F3AAC6908508C08DE5F26D2137A22106242C30F6FF10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:83:7d:db:bb:a2:e0:4d:33:d8:16:37:e3:
                    6d:67:b6:48:36:4d:5e:f7:4f:4f:2f:4c:28:7e:66:
                    62:c4:a2:55:44:84:9f:99:2a:eb:66:f1:c0:71:5d:
                    a4:ac:df:73:a9:da:71:60:46:2d:6c:3c:9f:c2:41:
                    be:53:1e:41:09:34:96:42:d0:0e:9c:73:13:19:1d:
                    13:4a:63:8c:f5:b6:fd:39:c8:df:cb:14:f4:d1:80:
                    39:88:83:15:57:c5:1f:b0:1d:73:9d:73:ce:d3:6d:
                    5c:27:25:2f:ac:d3:23:4b:59:e7:36:be:5e:90:7a:
                    62:eb:7d:70:9f:d7:c7:b9:d8:8d:0d:9b:f3:6f:8f:
                    2f:4a:bc:9e:88:ec:a4:e6:d6:fe:cc:e6:4c:bc:28:
                    36:48:1f:67:53:8f:1b:4f:f3:f0:6b:d1:51:57:77:
                    28:2f:66:30:14:bb:2b:bc:d3:61:d3:78:ff:a1:9b:
                    46:e1:ce:4a:15:cc:99:55:c2:4f:9e:c2:0c:8b:3d:
                    23:50:36:1b:b2:14:1a:1b:53:d9:3b:5c:98:3d:4a:
                    e6:ec:0c:25:0f:3e:6c:96:40:1e:fe:55:86:25:70:
                    2d:21:01:d2:e6:f3:86:f1:53:c4:0f:3a:ac:69:08:
                    50:8c:08:de:5f:26:d2:13:7a:22:10:62:42:c3:0f:
                    6f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6D:1D:4B:0B:A4:E0:29:9E:F7:EA:D5:00:CE:1D:1E:8E:C3:D5:28
            X509v3 Authority Key Identifier:
                keyid:79:7C:E1:35:C5:86:90:EA:32:B2:2D:D5:29:03:C5:FE:FB:AB:40:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/797CE135C58690EA32B22DD52903C5FEFBAB4033.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/797CE135C58690EA32B22DD52903C5FEFBAB4033.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33322e302f32322d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:dd:b5:59:11:39:9e:ac:6d:b7:c5:3c:f2:53:e4:61:7d:37:
         de:6a:48:2c:a1:4e:d2:2a:ed:02:10:c0:a3:7f:09:cf:88:4a:
         28:a6:0a:c7:b8:45:fc:44:9a:d7:d6:fb:c5:e2:64:b0:f2:b6:
         38:91:ae:1e:43:90:d9:b7:59:18:5e:fe:79:7f:41:ae:be:2f:
         07:8f:af:6c:07:4b:51:8b:46:ac:79:d2:ed:b2:1e:39:15:f4:
         b2:9f:99:1f:67:92:d2:f5:08:f0:28:e9:0b:43:a8:38:4c:eb:
         eb:85:39:af:74:8a:ae:78:73:c9:6f:22:3c:3c:18:50:6f:69:
         3e:57:f6:0b:ac:4f:0c:c1:ab:c6:16:ba:15:07:6c:bb:37:66:
         63:09:2c:23:e2:82:19:3f:0c:ea:e5:f6:1c:92:f6:4b:06:b5:
         a1:3e:f5:d9:15:c8:fd:7b:06:eb:89:a6:03:bd:9f:5e:36:f8:
         1d:54:e9:fd:84:e2:8c:fe:cc:2e:59:b3:d2:80:41:7e:c4:99:
         38:57:4b:3e:d1:35:f2:c3:8d:9a:14:c1:96:f3:97:c3:d3:80:
         73:83:49:42:70:7e:8b:1e:bc:8b:6f:43:d0:e6:60:e2:a0:de:
         f0:52:67:e8:bc:a3:f0:24:13:ee:53:cd:a5:18:3f:f7:d6:e9:
         a5:e4:f3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org