Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/3136382e3232372e3233362e302f32322d3234203d3e203532363734.roa
File:                     3136382e3232372e3233362e302f32322d3234203d3e203532363734.roa (raw, json)
Hash identifier:          5sRgkPG2eYdbE6fDf3FuwjX3rOrL/dNY/wr7gw7686k=
Subject key identifier:   CA:A9:83:67:3D:FA:99:73:63:CF:71:8D:BC:F0:AF:EF:69:E4:EB:39
Certificate issuer:       /CN=16C13A9D4AC04E63F87F30936C08AEAE60ABF22F
Certificate serial:       20A738A227F91AC90EED64D3A27C61D89A798369
Authority key identifier: 16:C1:3A:9D:4A:C0:4E:63:F8:7F:30:93:6C:08:AE:AE:60:AB:F2:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16C13A9D4AC04E63F87F30936C08AEAE60ABF22F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/3136382e3232372e3233362e302f32322d3234203d3e203532363734.roa
Signing time:             Sat 04 Mar 2023 01:13:10 +0000
ROA not before:           Sat 04 Mar 2023 01:08:10 +0000
ROA not after:            Sat 02 Mar 2024 01:13:10 +0000
asID:                     52674
IP address blocks:        168.227.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a7:38:a2:27:f9:1a:c9:0e:ed:64:d3:a2:7c:61:d8:9a:79:83:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16C13A9D4AC04E63F87F30936C08AEAE60ABF22F
        Validity
            Not Before: Mar  4 01:08:10 2023 GMT
            Not After : Mar  2 01:13:10 2024 GMT
        Subject: CN=CAA983673DFA997363CF718DBCF0AFEF69E4EB39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:44:62:fc:29:36:71:d7:de:e1:e0:46:98:9f:
                    dc:5f:0c:d2:b3:fe:9c:83:a4:94:61:10:eb:1f:ef:
                    27:ff:02:87:05:bf:14:8c:55:bd:98:71:b3:3c:98:
                    7f:09:cb:a2:74:3b:03:ad:ce:43:ce:bd:06:5c:2d:
                    3f:a2:2d:d8:77:b3:7d:64:25:a8:6f:25:bd:00:6a:
                    bd:ce:82:e9:c9:17:04:25:e4:2b:ae:4d:14:ce:6d:
                    d1:53:87:0d:fb:9c:7a:02:e9:9a:65:18:1f:5d:b4:
                    0f:ab:4b:cb:e4:7e:c4:ed:80:90:f7:29:17:05:1d:
                    29:68:3f:58:0a:d7:f8:75:ef:0e:e7:b6:68:83:c6:
                    9d:1d:6d:74:ed:46:15:2b:5c:9e:61:7a:eb:74:f2:
                    0c:f3:a1:dc:c8:21:35:d5:72:be:29:37:67:8b:50:
                    b4:d6:10:a3:05:55:76:16:48:fe:84:c6:05:1b:2f:
                    a6:d8:67:4e:09:11:a9:6a:e1:46:26:57:51:92:40:
                    72:fb:f1:86:32:d7:0c:b9:6d:81:2a:82:86:b2:b8:
                    12:e6:9b:f2:6c:b2:7f:2d:43:8c:ed:b1:ae:c5:10:
                    38:a6:b6:c0:c3:a6:9f:47:4b:14:ae:1f:3e:f1:77:
                    02:3c:c6:8f:6d:1b:15:bd:7a:3c:02:49:f2:c3:b9:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A9:83:67:3D:FA:99:73:63:CF:71:8D:BC:F0:AF:EF:69:E4:EB:39
            X509v3 Authority Key Identifier:
                keyid:16:C1:3A:9D:4A:C0:4E:63:F8:7F:30:93:6C:08:AE:AE:60:AB:F2:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/16C13A9D4AC04E63F87F30936C08AEAE60ABF22F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16C13A9D4AC04E63F87F30936C08AEAE60ABF22F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/3136382e3232372e3233362e302f32322d3234203d3e203532363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:51:55:51:2b:2d:90:03:ee:c0:0f:ed:8e:4d:6b:18:66:ed:
         a3:98:db:cb:f3:16:01:5e:dd:22:07:5a:f1:92:44:fa:56:da:
         2c:56:70:78:fa:45:e6:34:12:37:a3:27:e5:aa:75:43:2c:4d:
         39:ef:3f:a0:71:de:af:df:82:d7:63:f7:76:91:59:76:cf:0f:
         d0:4f:f9:86:bb:9b:1d:0e:e6:27:a6:a5:1a:6e:1f:2a:bf:8b:
         16:9f:fa:ca:b7:18:a1:d8:a3:61:8d:35:29:a3:d8:9c:7d:9d:
         1a:f7:32:f6:31:c7:4f:79:51:5a:36:aa:2c:59:47:5d:b1:a0:
         41:cc:f9:3e:54:23:e2:fa:8f:67:23:cf:20:9f:2c:86:6c:74:
         4f:24:b3:76:90:89:ce:84:ab:43:f0:df:70:d8:e1:6e:23:55:
         b7:73:fa:52:22:26:93:99:3f:4d:f6:1c:5e:c5:b9:09:3f:9e:
         08:d4:87:13:4f:13:e9:01:79:dd:ed:a7:70:15:5f:54:8e:fd:
         d7:10:49:43:d7:8e:85:ad:37:8d:b2:c5:9c:ca:fb:49:35:bd:
         8d:22:66:f5:f2:e6:45:fa:7f:4f:fd:ea:e3:c3:17:d4:7e:af:
         06:38:a0:3d:1f:d9:1a:20:bb:4c:de:cc:0a:25:7c:3c:31:04:
         7d:5f:a0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org