Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa
File:                     3136382e3232372e37362e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier:          dUriebcG4JSyiDO/PSU7mGm9uWelmPoh5MrkjU8T8aU=
Subject key identifier:   7A:D8:A1:E0:07:F0:68:50:AC:EC:2F:49:C6:FA:57:CA:72:78:10:47
Certificate issuer:       /CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
Certificate serial:       794B8700D65C98DC7EBD1F34A5275B9F1B0A39E8
Authority key identifier: 9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa
Signing time:             Fri 03 May 2024 21:03:00 +0000
ROA not before:           Fri 03 May 2024 20:58:00 +0000
ROA not after:            Fri 02 May 2025 21:03:00 +0000
asID:                     52940
IP address blocks:        168.227.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4b:87:00:d6:5c:98:dc:7e:bd:1f:34:a5:27:5b:9f:1b:0a:39:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
        Validity
            Not Before: May  3 20:58:00 2024 GMT
            Not After : May  2 21:03:00 2025 GMT
        Subject: CN=7AD8A1E007F06850ACEC2F49C6FA57CA72781047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:74:86:c9:8e:c9:3b:23:51:ca:1d:10:31:
                    94:af:39:9e:98:5c:2d:27:91:75:d5:89:8c:54:15:
                    2e:68:6c:e0:7d:3f:8f:28:26:29:72:db:4f:2a:62:
                    b1:16:6d:ae:f9:85:93:83:21:77:2c:a1:13:5d:f7:
                    60:cb:a4:0e:0e:78:59:5b:b0:f7:27:cc:54:d0:87:
                    88:a7:61:c1:8f:1c:6e:c1:f9:53:45:91:d0:81:ad:
                    41:ad:b2:5c:d3:fa:ca:c9:58:d9:4c:28:55:54:ba:
                    97:ae:2a:37:3c:60:d4:68:31:47:e0:49:f0:3a:fd:
                    9a:a6:79:ed:1d:47:a3:8b:f9:77:86:d2:57:50:f5:
                    56:f6:f0:43:94:09:7c:7d:9d:1c:9c:1b:ac:1f:d9:
                    44:c6:1f:ef:ed:46:c3:6f:90:61:d8:b0:f6:c7:16:
                    6b:c3:a2:0c:5a:6e:af:b0:0b:73:af:1d:5a:93:4a:
                    67:e9:f6:00:e4:bd:47:64:2a:29:f4:bb:b1:0e:f6:
                    2a:af:81:67:1f:3f:12:74:86:a0:68:a3:a2:cb:e1:
                    30:3d:c9:00:9f:50:bb:21:ec:56:38:fd:68:f8:e6:
                    60:e6:80:8c:24:97:e7:1c:83:e3:c5:74:2e:89:78:
                    54:fe:ce:48:5e:18:73:a5:89:a8:2e:b6:72:04:05:
                    f7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D8:A1:E0:07:F0:68:50:AC:EC:2F:49:C6:FA:57:CA:72:78:10:47
            X509v3 Authority Key Identifier:
                keyid:9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:48:ba:57:43:87:c4:67:a3:32:4d:31:8a:27:cf:48:29:b3:
         51:4b:5c:57:0d:ee:40:76:bc:93:2c:ca:75:7d:4b:3e:a2:17:
         6e:85:f9:19:52:8f:a3:6a:5c:2c:71:42:84:c8:89:8a:a7:31:
         4a:b7:d2:ae:eb:bb:ef:27:ec:a5:c2:76:64:20:01:f4:34:d9:
         d8:b4:50:f7:41:54:37:b1:72:65:05:62:ad:26:24:38:20:56:
         80:af:7e:8a:84:05:e1:12:f0:7a:95:70:56:10:10:04:82:3c:
         10:e1:96:79:1f:5f:1e:fd:08:47:3c:1b:89:3c:7c:3e:59:ff:
         cc:df:2e:ca:0b:df:80:32:f8:9f:47:d5:2b:bd:1e:8f:54:ad:
         5c:66:a2:82:2f:db:20:0b:cc:1d:a8:36:98:46:6c:09:80:25:
         7d:b4:f0:ec:fa:cc:31:4a:d9:d6:f3:69:52:df:69:58:04:d3:
         7e:87:3a:8f:bf:00:6a:93:a5:d0:0a:a1:0e:3d:87:6b:48:8c:
         e2:61:4d:d7:7d:b2:25:7d:a8:b8:81:ea:88:61:08:63:41:10:
         85:02:a2:71:37:f4:3d:e0:6f:4a:35:f2:f2:6b:9a:26:f4:73:
         52:ac:52:fb:05:a6:9f:04:d0:15:df:ad:fc:67:5c:47:f1:f4:
         c4:ef:16:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org