Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/3136382e3233322e31322e302f32322d3234203d3e20323634393332.roa
File:                     3136382e3233322e31322e302f32322d3234203d3e20323634393332.roa (raw, json)
Hash identifier:          Y1bTeZeUpuE6Avn9VwRLLogRH5zlVkcUIAWdEZj+YMw=
Subject key identifier:   08:92:0B:9A:C3:54:E0:B5:86:25:71:5B:3D:37:56:61:BA:D3:6B:1C
Certificate issuer:       /CN=2D2B1C0A519E55A84D6F466E7A256F2093430E1D
Certificate serial:       50E7D944B3DA4B7DE339D2919F90A55527E68B2A
Authority key identifier: 2D:2B:1C:0A:51:9E:55:A8:4D:6F:46:6E:7A:25:6F:20:93:43:0E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/3136382e3233322e31322e302f32322d3234203d3e20323634393332.roa
Signing time:             Mon 15 Jan 2024 15:04:57 +0000
ROA not before:           Mon 15 Jan 2024 14:59:57 +0000
ROA not after:            Mon 13 Jan 2025 15:04:57 +0000
asID:                     264932
IP address blocks:        168.232.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e7:d9:44:b3:da:4b:7d:e3:39:d2:91:9f:90:a5:55:27:e6:8b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D2B1C0A519E55A84D6F466E7A256F2093430E1D
        Validity
            Not Before: Jan 15 14:59:57 2024 GMT
            Not After : Jan 13 15:04:57 2025 GMT
        Subject: CN=08920B9AC354E0B58625715B3D375661BAD36B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:ce:70:a1:43:82:06:97:ac:da:3e:ff:f7:
                    0f:58:64:58:bd:0a:d7:63:7e:10:09:10:f4:31:93:
                    c5:05:fa:bc:9f:48:ac:df:75:50:05:9a:1c:e3:08:
                    41:d8:1d:0b:32:cd:cd:2f:3d:7d:c4:3b:bb:31:69:
                    59:b7:65:ab:49:28:bc:12:77:ab:76:c0:d2:8a:86:
                    ed:32:d8:d3:1f:24:c2:aa:5d:8b:99:a8:89:a0:45:
                    8c:3a:78:32:ec:c8:85:2d:e7:be:b1:f5:65:e2:dd:
                    42:0c:81:6a:6f:ec:56:a6:5a:06:bd:37:d4:29:fb:
                    a9:5f:12:e4:c1:85:ef:ea:9c:f9:c4:34:6a:d8:b8:
                    96:04:98:5f:32:6c:22:a3:cb:41:67:e6:6d:ac:26:
                    21:f0:64:87:f0:47:9c:58:c1:a1:19:3d:4a:8c:40:
                    b6:95:2b:37:d1:fc:fd:ff:70:b5:70:07:21:31:c7:
                    0e:68:56:3a:81:84:96:a3:93:be:98:50:a9:48:61:
                    fb:71:39:e3:27:ef:b9:c2:4c:df:fb:46:8b:69:d2:
                    64:d0:6e:b3:04:d8:5d:82:17:b9:2f:00:24:f1:8b:
                    e2:91:1e:b6:39:90:23:73:15:2b:bd:66:30:4a:f9:
                    60:1a:93:c2:be:f7:05:1a:dc:ff:28:bf:ba:be:68:
                    8a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:92:0B:9A:C3:54:E0:B5:86:25:71:5B:3D:37:56:61:BA:D3:6B:1C
            X509v3 Authority Key Identifier:
                keyid:2D:2B:1C:0A:51:9E:55:A8:4D:6F:46:6E:7A:25:6F:20:93:43:0E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/3136382e3233322e31322e302f32322d3234203d3e20323634393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:f0:b4:69:8f:45:23:3c:f2:48:28:1b:3b:67:52:c8:39:53:
         f5:23:f2:d2:f5:9a:de:27:a3:40:ad:32:4c:d6:21:e8:87:ee:
         fd:8b:54:d7:e9:46:bd:e5:32:77:b3:52:9d:84:63:ec:9c:7c:
         0a:33:68:39:0c:b4:e0:44:5e:78:b0:9f:5d:27:90:95:8e:6c:
         1b:3d:6f:6d:f1:43:93:4f:61:00:5a:45:80:2e:df:9c:dc:23:
         08:3d:3a:78:7f:57:5f:72:d8:56:ca:b3:25:8e:b1:bc:6b:5d:
         d5:31:f8:70:13:8c:2c:7d:54:64:cc:ee:13:bd:ea:e8:56:9a:
         13:e1:90:c3:5f:89:b2:0e:0b:97:77:56:b2:eb:dd:e1:e6:14:
         c8:6e:8f:f2:f6:9b:8e:db:b7:76:3e:dd:eb:2f:d2:06:a0:0d:
         b5:86:2b:a0:fd:fa:2f:e0:c6:09:0a:c1:9a:b8:7b:ce:a3:10:
         0a:87:1b:1b:aa:69:53:99:6a:c2:c0:d1:c9:5f:ff:fc:3c:2b:
         1b:ac:87:55:7e:79:bc:72:94:0e:21:93:61:f8:8f:f2:3b:d7:
         96:1c:7f:2f:38:b5:a5:08:b2:98:08:ca:8f:52:1f:6c:22:e0:
         f5:8d:ea:20:1c:94:bc:53:16:86:9b:29:02:51:8f:25:b8:2d:
         9a:e4:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org