Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/3136382e3138312e34302e302f32322d3332203d3e203533303239.roa
File:                     3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (raw, json)
Hash identifier:          ssJhvHd6f2rgy1GVeHD3AK85GlRatx33k/rrrJk0Ubw=
Subject key identifier:   07:51:C8:30:4C:B8:21:35:08:7B:4E:67:59:30:67:E9:3C:CA:7B:9D
Certificate issuer:       /CN=D863FA75123EC7A1F87D434661F5FAB079ADF8BF
Certificate serial:       70A4A02FC8565D13418D8AB3D3B318BBE1954D09
Authority key identifier: D8:63:FA:75:12:3E:C7:A1:F8:7D:43:46:61:F5:FA:B0:79:AD:F8:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D863FA75123EC7A1F87D434661F5FAB079ADF8BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/3136382e3138312e34302e302f32322d3332203d3e203533303239.roa
Signing time:             Mon 13 Nov 2023 23:38:05 +0000
ROA not before:           Mon 13 Nov 2023 23:33:05 +0000
ROA not after:            Mon 11 Nov 2024 23:38:05 +0000
asID:                     53029
IP address blocks:        168.181.40.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a4:a0:2f:c8:56:5d:13:41:8d:8a:b3:d3:b3:18:bb:e1:95:4d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D863FA75123EC7A1F87D434661F5FAB079ADF8BF
        Validity
            Not Before: Nov 13 23:33:05 2023 GMT
            Not After : Nov 11 23:38:05 2024 GMT
        Subject: CN=0751C8304CB82135087B4E67593067E93CCA7B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:40:98:6e:40:dc:96:8f:2f:ec:f9:2b:fa:fc:
                    0a:21:45:33:06:a6:00:eb:4d:70:92:70:fa:e1:b8:
                    87:36:b1:f7:00:cd:ed:c7:2b:4e:23:17:96:66:16:
                    00:9b:f7:0e:ff:06:4c:4e:47:0e:28:ab:ce:c0:ab:
                    be:af:a1:56:26:27:d0:3d:90:c5:e5:bd:70:16:cf:
                    a4:67:7b:47:19:3e:21:ba:e5:92:61:0c:e4:44:86:
                    e8:0d:d0:cb:e0:b2:17:05:dd:af:85:68:e8:11:87:
                    ec:aa:59:a2:a9:e6:4c:80:54:59:ee:bc:83:78:34:
                    bd:84:66:c0:8f:c9:8e:ee:96:2a:c7:53:4a:18:a2:
                    9e:b4:d8:91:ec:74:e0:94:58:f5:3f:f6:c0:78:10:
                    a2:6d:28:1c:3d:9c:79:12:9e:ff:bc:bd:3a:81:05:
                    7b:35:f7:6b:db:58:24:6e:11:32:99:69:da:f0:6d:
                    da:49:b9:c0:8c:d7:82:b3:3a:a0:4d:e8:14:36:fc:
                    cc:dd:71:e5:6e:1f:2d:af:d3:60:f7:76:38:6b:18:
                    cb:77:56:5c:12:9f:5f:af:3e:c0:f5:e3:76:e7:8f:
                    ac:be:b5:ba:a1:dc:cf:6e:c6:ad:a8:0c:d6:cb:a0:
                    36:0c:d6:23:e4:d5:92:e2:19:44:95:7d:07:aa:95:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:51:C8:30:4C:B8:21:35:08:7B:4E:67:59:30:67:E9:3C:CA:7B:9D
            X509v3 Authority Key Identifier:
                keyid:D8:63:FA:75:12:3E:C7:A1:F8:7D:43:46:61:F5:FA:B0:79:AD:F8:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/D863FA75123EC7A1F87D434661F5FAB079ADF8BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D863FA75123EC7A1F87D434661F5FAB079ADF8BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/3136382e3138312e34302e302f32322d3332203d3e203533303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:84:d7:d0:19:74:0d:98:48:41:60:f0:a4:c5:aa:64:56:bd:
         99:5d:f6:9c:20:10:48:2c:ce:37:0e:27:ea:c0:a3:c2:fd:8a:
         b6:25:d7:93:1b:1c:f7:93:d9:a6:ca:9d:d7:00:71:11:cb:cc:
         b2:b8:e3:ca:f2:73:6b:19:f8:c0:cd:2b:1c:6c:43:27:37:c5:
         f0:63:3b:87:6e:0a:ba:85:b7:08:a2:af:d3:8f:d3:c4:1d:cc:
         48:c1:61:7e:17:38:8d:7f:03:44:2a:4a:e4:4a:c9:ed:2d:b4:
         64:9e:ca:8f:3d:d8:ce:da:04:c8:ca:c6:7b:05:65:14:53:98:
         b9:f8:ae:c4:65:62:a9:0c:da:5d:1e:03:fe:e2:48:7d:0b:fe:
         15:6b:b2:14:4e:0c:cc:c9:16:7d:2d:64:9a:f9:db:60:4f:bd:
         db:a1:be:09:7e:f9:37:08:33:41:e0:52:f6:44:58:5a:48:cf:
         43:3b:80:b7:4b:e4:f0:94:a3:e0:84:a1:3c:37:81:1c:5f:f9:
         e0:5f:90:eb:0d:2e:ed:db:9e:0c:30:06:98:c5:b3:6a:76:f8:
         ab:ff:b7:a6:2c:23:06:7e:82:23:dc:e7:91:52:2d:5d:e2:9a:
         dd:b7:5d:22:7e:fc:6a:46:6d:49:2e:c7:8a:a6:60:e4:78:51:
         af:88:84:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org