Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3136382e3232372e37362e302f32322d3232203d3e203532393430.roa
File:                     3136382e3232372e37362e302f32322d3232203d3e203532393430.roa (raw, json)
Hash identifier:          UlyrxB0jqRoAJAATw1lsl0A3rQKd3spp5pRmBcC4q+w=
Subject key identifier:   ED:8B:90:35:05:F3:45:3E:90:32:24:6F:81:55:7D:3B:A9:D7:AE:22
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       2A879005260DFEF23BAA87F24697A635BAF5453C
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3136382e3232372e37362e302f32322d3232203d3e203532393430.roa
Signing time:             Tue 22 Aug 2023 18:26:42 +0000
ROA not before:           Tue 22 Aug 2023 18:21:42 +0000
ROA not after:            Tue 20 Aug 2024 18:26:42 +0000
asID:                     52940
IP address blocks:        168.227.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:87:90:05:26:0d:fe:f2:3b:aa:87:f2:46:97:a6:35:ba:f5:45:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Aug 22 18:21:42 2023 GMT
            Not After : Aug 20 18:26:42 2024 GMT
        Subject: CN=3082010A0282010100EEC3F92C2346898D4CB35AE94D21A5455614D5788AE02253C82D2D0E4E8111560F87DC6433EB251EC5BAF1115497040E71213B4AA16F4FC6D8451217D2D5B5775F392B04DF4A8F6D47ADCC7128CA229912AFCCCF7D979E3FFAF1EC0F9F12CAA3627D76985DE63FE8E80CD2BC3148795F75D5C624AB2928F2242CC2C22775F8578E91072819BC6608C96BAD06EE039B8F4355BA308196AA73720B3A1F935FEA7C2504332D6FA2177B67DC2ABE725D38DBEC51170855FE06EC20D2C165F5DE574E3FEF0FAEE39B3591A5B129AE48C24BC71BC773631558DA458B6379E5F6B5850807078A1E2FAC952815F8CDCF0616C19433EBF27D58D3DFF8E3EBA4EDF661FFAD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c3:f9:2c:23:46:89:8d:4c:b3:5a:e9:4d:21:
                    a5:45:56:14:d5:78:8a:e0:22:53:c8:2d:2d:0e:4e:
                    81:11:56:0f:87:dc:64:33:eb:25:1e:c5:ba:f1:11:
                    54:97:04:0e:71:21:3b:4a:a1:6f:4f:c6:d8:45:12:
                    17:d2:d5:b5:77:5f:39:2b:04:df:4a:8f:6d:47:ad:
                    cc:71:28:ca:22:99:12:af:cc:cf:7d:97:9e:3f:fa:
                    f1:ec:0f:9f:12:ca:a3:62:7d:76:98:5d:e6:3f:e8:
                    e8:0c:d2:bc:31:48:79:5f:75:d5:c6:24:ab:29:28:
                    f2:24:2c:c2:c2:27:75:f8:57:8e:91:07:28:19:bc:
                    66:08:c9:6b:ad:06:ee:03:9b:8f:43:55:ba:30:81:
                    96:aa:73:72:0b:3a:1f:93:5f:ea:7c:25:04:33:2d:
                    6f:a2:17:7b:67:dc:2a:be:72:5d:38:db:ec:51:17:
                    08:55:fe:06:ec:20:d2:c1:65:f5:de:57:4e:3f:ef:
                    0f:ae:e3:9b:35:91:a5:b1:29:ae:48:c2:4b:c7:1b:
                    c7:73:63:15:58:da:45:8b:63:79:e5:f6:b5:85:08:
                    07:07:8a:1e:2f:ac:95:28:15:f8:cd:cf:06:16:c1:
                    94:33:eb:f2:7d:58:d3:df:f8:e3:eb:a4:ed:f6:61:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8B:90:35:05:F3:45:3E:90:32:24:6F:81:55:7D:3B:A9:D7:AE:22
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3136382e3232372e37362e302f32322d3232203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:23:e1:76:ab:02:2e:7b:bf:50:7d:d3:2e:1e:5d:b3:db:6e:
         cb:3f:c4:a0:b4:aa:ba:cb:b7:2d:3e:07:e5:48:9b:40:1c:5f:
         16:d7:a3:c3:0f:95:43:6b:0a:76:97:a3:0f:d7:fa:49:94:f8:
         3b:f6:58:e0:78:f0:23:00:b8:c3:5f:9e:36:6c:ba:28:14:77:
         55:b9:ee:e4:1c:89:e6:45:44:03:21:78:04:fa:f5:ac:89:44:
         0b:56:42:29:83:62:6e:12:15:64:ee:0b:dd:c3:44:29:bf:46:
         42:2d:be:97:e5:5d:7a:4a:70:44:37:e8:24:04:b2:ec:e3:da:
         c5:61:e3:60:b6:9f:54:f2:5f:93:98:ea:00:ce:95:40:ba:9a:
         22:37:aa:21:a0:35:bf:cf:14:80:11:7e:aa:8c:35:a7:a7:04:
         46:87:23:d2:d8:b2:86:e8:5f:ee:50:1a:c0:c3:b8:3a:d3:6a:
         c1:78:26:13:0e:2f:a8:1e:f5:21:5c:2a:5d:79:76:99:8d:03:
         90:34:81:b2:34:c7:9f:2a:2e:2f:2a:d1:50:0b:17:d8:01:1f:
         5e:8f:63:52:21:cf:3a:a7:c7:f1:c3:78:f4:db:5d:d6:c7:81:
         54:37:2b:92:25:e6:83:ff:61:19:e6:75:a5:9f:c0:52:08:af:
         6e:64:e8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org