Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/3136382e3139342e3232372e302f32342d3234203d3e20323635343031.roa
File:                     3136382e3139342e3232372e302f32342d3234203d3e20323635343031.roa (raw, json)
Hash identifier:          23Tz/fd2A1LMN3bfm58JK5PqmmL8YtScrqgzmW3e/PY=
Subject key identifier:   ED:0C:73:00:D3:D3:67:C6:6D:BA:DA:99:64:DC:FC:EA:99:CA:E9:57
Certificate issuer:       /CN=E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA
Certificate serial:       4D3D1E704BD26BFC7AD162DCDEFCE698DB2DF327
Authority key identifier: E1:9F:1C:7A:45:82:94:75:AD:4F:BB:BF:25:4E:F7:B9:CE:6E:B6:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/3136382e3139342e3232372e302f32342d3234203d3e20323635343031.roa
Signing time:             Mon 21 Nov 2022 16:29:52 +0000
ROA not before:           Mon 21 Nov 2022 16:24:52 +0000
ROA not after:            Mon 20 Nov 2023 16:29:52 +0000
asID:                     265401
IP address blocks:        168.194.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3d:1e:70:4b:d2:6b:fc:7a:d1:62:dc:de:fc:e6:98:db:2d:f3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA
        Validity
            Not Before: Nov 21 16:24:52 2022 GMT
            Not After : Nov 20 16:29:52 2023 GMT
        Subject: CN=ED0C7300D3D367C66DBADA9964DCFCEA99CAE957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:85:0d:a9:98:a0:1b:ed:89:4a:12:58:6c:
                    42:94:30:d4:75:57:9f:31:68:db:12:e3:84:c0:c4:
                    17:bf:05:1e:48:f8:da:93:d2:17:80:19:93:86:fc:
                    61:0d:b3:a3:73:a1:ee:3a:d4:b2:8f:02:d0:61:1a:
                    df:18:19:f0:90:4b:97:b7:07:c5:03:1f:e1:c1:3d:
                    66:6c:67:41:4f:b7:e6:a3:77:e7:6c:14:eb:bc:67:
                    00:cd:dc:ee:9c:d3:4b:bb:7f:b4:69:54:3e:9c:a4:
                    48:74:18:67:64:5b:b7:ce:59:a9:3e:85:36:79:d4:
                    70:1c:c9:ca:e2:83:74:02:ad:bc:fc:e6:a9:7a:40:
                    cc:7b:8e:bf:93:1d:73:0c:a9:2c:21:50:2a:c0:ea:
                    d9:76:df:c6:e4:54:e5:e4:83:16:ef:3a:8c:24:df:
                    5c:38:94:ad:5f:2a:96:ed:ab:ac:2d:74:36:8d:a1:
                    70:4b:38:b4:95:b1:bc:a6:48:8d:d4:29:b9:44:91:
                    06:3d:46:c6:e7:6b:57:ad:86:2a:c8:53:ff:19:c8:
                    31:9e:df:3f:1a:70:d9:8a:dc:98:22:0b:c6:97:85:
                    af:e1:fb:9e:c6:5e:a1:91:60:1d:73:4c:4e:94:d1:
                    2e:6c:c9:9e:f4:ba:48:68:3a:7e:d5:5e:ef:30:ed:
                    95:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0C:73:00:D3:D3:67:C6:6D:BA:DA:99:64:DC:FC:EA:99:CA:E9:57
            X509v3 Authority Key Identifier:
                keyid:E1:9F:1C:7A:45:82:94:75:AD:4F:BB:BF:25:4E:F7:B9:CE:6E:B6:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/3136382e3139342e3232372e302f32342d3234203d3e20323635343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:a5:a0:00:5e:f5:8e:2b:fa:f2:78:61:4d:7b:70:b2:cd:84:
         a5:bf:5e:81:a6:d8:fd:84:05:f3:f9:3b:d1:d0:3e:14:28:e7:
         1b:8d:d4:cd:93:a3:29:e8:cb:11:5a:be:14:d1:06:6a:22:c5:
         98:e8:98:11:b7:1f:2a:e2:12:93:3d:56:a1:c6:4e:76:73:ac:
         2e:41:58:0c:f5:7a:6c:f5:2f:09:d9:6b:15:aa:06:cb:e7:d0:
         51:a4:10:4f:61:d8:7e:be:e3:66:48:27:48:e2:43:e1:50:2b:
         bb:21:b9:3a:33:56:ea:89:56:9e:f8:92:e3:a8:69:ff:92:78:
         81:4d:7d:08:b3:42:3c:9e:22:ad:cb:d5:b8:04:e0:17:14:fc:
         bb:fe:46:25:62:11:b7:a1:6c:a7:ef:31:32:96:db:0e:99:87:
         d5:01:e7:29:79:52:a4:02:59:a6:82:35:a0:99:35:5c:9a:b8:
         3a:69:d9:6b:61:c7:6a:4c:2e:63:a7:97:51:d7:fd:cd:32:15:
         91:4c:0a:3a:16:8d:9d:19:2e:fa:87:32:96:2c:56:ba:d2:41:
         7c:1a:bb:e8:fb:dc:59:35:95:14:e5:9c:9f:fb:94:92:d5:a4:
         4d:8e:ba:8f:ef:65:7c:40:dc:a0:9d:f3:62:1f:4a:95:06:70:
         72:bd:06:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org