Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/3136382e3232372e3233362e302f32322d3234203d3e203532363734.roa
File:                     3136382e3232372e3233362e302f32322d3234203d3e203532363734.roa (raw, json)
Hash identifier:          l3D26d0yxgfV7I5Sy+uiUFxMWPukYlYaGTGUXc5Y4PE=
Subject key identifier:   F0:01:C2:28:2B:74:67:05:A4:27:32:05:65:D2:5D:8E:25:B8:19:F8
Certificate issuer:       /CN=D35F81E9E55C4E76424E39703EB07E6238E47B82
Certificate serial:       506E4382751A0C6F3550D2A8BDE52C1F23B79471
Authority key identifier: D3:5F:81:E9:E5:5C:4E:76:42:4E:39:70:3E:B0:7E:62:38:E4:7B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F81E9E55C4E76424E39703EB07E6238E47B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/3136382e3232372e3233362e302f32322d3234203d3e203532363734.roa
Signing time:             Thu 02 Mar 2023 20:52:03 +0000
ROA not before:           Thu 02 Mar 2023 20:47:03 +0000
ROA not after:            Thu 29 Feb 2024 20:52:03 +0000
asID:                     52674
IP address blocks:        168.227.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6e:43:82:75:1a:0c:6f:35:50:d2:a8:bd:e5:2c:1f:23:b7:94:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35F81E9E55C4E76424E39703EB07E6238E47B82
        Validity
            Not Before: Mar  2 20:47:03 2023 GMT
            Not After : Feb 29 20:52:03 2024 GMT
        Subject: CN=F001C2282B746705A427320565D25D8E25B819F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4b:02:7d:2c:4c:18:04:60:8d:b8:aa:b6:ca:
                    6d:22:fb:32:87:6a:01:90:58:68:97:5d:17:87:c8:
                    51:b3:be:a7:29:f9:2d:9b:bf:64:3f:e7:e0:35:c7:
                    4c:76:10:cc:1f:a9:98:5f:c1:37:84:d2:14:3d:8c:
                    8f:52:f2:7d:ec:37:cd:e2:3e:31:16:80:5b:4c:4e:
                    ef:77:42:9a:c3:18:ea:c2:92:b9:f3:fa:90:61:7e:
                    ae:e4:bc:28:b1:69:34:b6:89:66:fc:c8:1e:a4:19:
                    a4:15:24:55:5c:10:21:17:42:f6:6a:21:30:20:d9:
                    43:10:53:aa:0e:06:99:06:e7:d5:1f:72:8d:85:27:
                    d2:28:b0:2e:11:78:9c:13:ff:43:33:f1:dc:bb:5d:
                    a3:60:fc:01:82:e6:00:f8:94:24:8f:76:b1:1c:60:
                    a0:2d:c2:f7:94:bd:b2:c1:de:da:64:28:46:b3:cb:
                    21:1f:e5:b8:44:70:8d:af:30:86:cc:5d:89:be:47:
                    90:17:0a:41:e4:57:18:2f:be:c8:84:87:c2:29:81:
                    c3:43:bd:6c:65:ba:f3:ab:01:44:f2:2f:cd:9c:1a:
                    3b:da:e9:d5:a1:90:24:5c:62:10:e4:df:2d:52:63:
                    61:11:f9:23:e3:79:2b:58:31:ae:49:2f:63:8a:ff:
                    31:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:01:C2:28:2B:74:67:05:A4:27:32:05:65:D2:5D:8E:25:B8:19:F8
            X509v3 Authority Key Identifier:
                keyid:D3:5F:81:E9:E5:5C:4E:76:42:4E:39:70:3E:B0:7E:62:38:E4:7B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/D35F81E9E55C4E76424E39703EB07E6238E47B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F81E9E55C4E76424E39703EB07E6238E47B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/3136382e3232372e3233362e302f32322d3234203d3e203532363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:3a:eb:4f:96:72:58:95:76:c1:7c:8b:14:f8:e1:dd:87:cc:
         26:ae:cc:de:30:fa:eb:b8:1b:4c:f0:40:4b:70:e3:f6:09:49:
         ed:c5:65:27:6a:a9:61:82:b9:e5:f5:a1:9f:fa:4f:43:9f:27:
         96:0f:6b:57:2f:bd:0f:84:5c:ff:9b:b5:10:68:f9:f1:75:92:
         9c:70:30:3a:9d:7d:65:d7:46:4a:c3:f0:3d:ec:6a:39:c2:e2:
         43:69:07:02:3b:aa:d6:a1:e0:0f:d4:25:b1:50:b6:58:21:f8:
         13:93:35:15:f1:1b:d6:e7:06:1c:e9:40:62:9b:d6:03:d4:9f:
         a2:d4:20:2c:c1:7e:46:30:d1:7f:87:ae:5b:36:48:c1:9d:00:
         98:43:17:30:90:92:4a:73:de:49:17:75:3b:77:87:86:65:31:
         58:d5:35:d6:45:cc:3a:25:c4:a1:1a:83:70:d4:3c:1f:d9:25:
         17:c0:a9:4a:d6:fd:82:72:1b:71:f2:d1:bc:b7:00:0d:db:3c:
         fc:25:52:22:78:32:65:10:fe:60:04:fa:41:64:fc:94:d3:18:
         05:db:23:ca:85:cf:d4:72:86:c7:2d:40:6d:3a:59:6c:ea:8e:
         55:9e:36:c5:cd:6e:25:7a:e2:8a:0e:27:36:a4:93:82:4f:c1:
         c2:44:71:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org