Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37322e302f32322d3232203d3e20323635333032.roa
File:                     3136382e3132312e37322e302f32322d3232203d3e20323635333032.roa (raw, json)
Hash identifier:          cMRbvnbTflAqbSMl5+HMQ9uRW/53fDALnn0TA/9sG8s=
Subject key identifier:   8A:BC:84:09:B4:10:6C:08:41:0D:0A:CC:ED:10:91:09:0B:D4:B4:73
Certificate issuer:       /CN=C54586D44647014E47C52F3A3F2184006D2B17C3
Certificate serial:       4BA99B24FFB152CDA78D11F12DCD6E733274F36C
Authority key identifier: C5:45:86:D4:46:47:01:4E:47:C5:2F:3A:3F:21:84:00:6D:2B:17:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C54586D44647014E47C52F3A3F2184006D2B17C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37322e302f32322d3232203d3e20323635333032.roa
Signing time:             Mon 04 Jul 2022 13:30:31 +0000
ROA not before:           Mon 04 Jul 2022 13:25:31 +0000
ROA not after:            Mon 03 Jul 2023 13:30:31 +0000
asID:                     265302
IP address blocks:        168.121.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a9:9b:24:ff:b1:52:cd:a7:8d:11:f1:2d:cd:6e:73:32:74:f3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C54586D44647014E47C52F3A3F2184006D2B17C3
        Validity
            Not Before: Jul  4 13:25:31 2022 GMT
            Not After : Jul  3 13:30:31 2023 GMT
        Subject: CN=8ABC8409B4106C08410D0ACCED1091090BD4B473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fa:06:ea:1d:59:4f:da:cc:a3:f1:30:39:5f:
                    fe:40:21:cf:3f:7a:98:44:51:90:25:4c:d8:b8:24:
                    ec:0b:9d:6d:d9:7c:e5:85:70:b9:42:ed:43:55:b3:
                    3e:03:24:fa:3e:49:93:31:b4:25:76:f1:e4:13:d3:
                    65:81:ae:ac:bf:78:6a:70:db:1b:17:12:e7:5c:c6:
                    f4:19:1b:bd:06:8f:e6:a2:e3:57:66:1b:8e:f6:99:
                    9c:21:53:55:98:d9:b6:ec:0f:82:a5:67:28:39:2d:
                    0b:39:4d:f5:27:25:0a:81:a4:68:ea:06:4a:d4:6f:
                    1f:b4:3e:1d:db:d8:3b:4c:09:c0:a4:35:9d:09:42:
                    b9:36:b5:2c:f3:e0:b6:90:6b:c6:81:86:de:67:58:
                    77:00:c6:22:12:99:ca:56:f5:a6:e2:c2:13:bb:03:
                    d4:cd:1f:a5:89:70:09:e7:59:c6:af:7e:63:d8:0e:
                    78:1e:36:c2:1e:f3:d4:b6:5e:2b:88:f5:43:04:95:
                    05:08:30:20:9e:07:05:56:2d:e3:8d:12:af:ef:73:
                    32:13:6f:86:1f:11:f0:3f:b1:95:80:58:f4:67:00:
                    01:38:e3:06:32:c7:f0:c2:eb:2b:b7:8d:0c:f2:b9:
                    2d:34:25:a8:62:8d:47:e6:62:a5:26:93:b9:50:91:
                    10:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BC:84:09:B4:10:6C:08:41:0D:0A:CC:ED:10:91:09:0B:D4:B4:73
            X509v3 Authority Key Identifier:
                keyid:C5:45:86:D4:46:47:01:4E:47:C5:2F:3A:3F:21:84:00:6D:2B:17:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/C54586D44647014E47C52F3A3F2184006D2B17C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C54586D44647014E47C52F3A3F2184006D2B17C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37322e302f32322d3232203d3e20323635333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:5f:49:13:ea:31:f4:00:96:45:9b:bc:73:99:ee:18:01:09:
         f2:f4:ba:4e:2a:c0:fd:91:39:ab:91:01:a4:e9:9c:29:26:cf:
         e3:6f:d4:03:a0:60:e3:c8:7b:68:3b:9e:f9:b4:4e:6a:82:e4:
         f3:1f:a5:be:dd:2b:1a:7e:91:8b:1d:79:65:90:f0:10:ba:10:
         8a:62:1f:ef:1b:8d:cb:f2:e8:b1:ac:e6:5e:e7:f6:79:c4:a6:
         e1:85:72:de:47:75:14:c0:98:f5:09:f6:f6:b2:0d:32:b3:38:
         62:ba:d0:37:28:ea:99:c7:9d:8a:7c:9e:3b:3b:da:c2:4f:ba:
         f2:9b:dc:bf:b6:81:12:eb:3c:31:45:47:f5:c4:de:c7:7f:97:
         2c:f9:79:d9:d7:c1:9d:d2:3b:fb:f9:ce:9d:4a:38:ee:9a:55:
         cf:0c:1d:59:65:5d:5d:6c:d2:8f:6e:77:09:63:e1:77:a4:38:
         35:d0:da:12:89:7a:21:dd:b8:e6:38:c0:1b:80:b8:c6:9c:e9:
         1f:25:e4:d8:db:12:4d:d1:c5:e0:e9:46:ee:d8:01:ff:ae:85:
         6c:05:fc:00:7b:5c:53:49:c4:a8:8b:d5:bc:56:f8:5a:20:a2:
         7c:80:bc:be:3c:3a:32:40:47:0e:58:03:3b:f8:da:d5:bb:14:
         2e:95:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org