Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3136382e3139352e3235322e302f32322d3234203d3e20323632333733.roa
File:                     3136382e3139352e3235322e302f32322d3234203d3e20323632333733.roa (raw, json)
Hash identifier:          nRzLmEu5Rpc1Fb0DYmFRf20fkKSDV3S1aQTtrHQM5a8=
Subject key identifier:   3C:E9:7B:B5:C8:72:50:11:B1:98:58:84:AA:43:F2:E5:E9:48:B5:EB
Certificate issuer:       /CN=7BE95A26137B30C740C99DDD48DA6FEAD62905B1
Certificate serial:       4AE957BE588084BD04E26F86C5DBD171A094E838
Authority key identifier: 7B:E9:5A:26:13:7B:30:C7:40:C9:9D:DD:48:DA:6F:EA:D6:29:05:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3136382e3139352e3235322e302f32322d3234203d3e20323632333733.roa
Signing time:             Tue 10 Oct 2023 14:48:22 +0000
ROA not before:           Tue 10 Oct 2023 14:43:22 +0000
ROA not after:            Tue 08 Oct 2024 14:48:22 +0000
asID:                     262373
IP address blocks:        168.195.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e9:57:be:58:80:84:bd:04:e2:6f:86:c5:db:d1:71:a0:94:e8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE95A26137B30C740C99DDD48DA6FEAD62905B1
        Validity
            Not Before: Oct 10 14:43:22 2023 GMT
            Not After : Oct  8 14:48:22 2024 GMT
        Subject: CN=3CE97BB5C8725011B1985884AA43F2E5E948B5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:24:66:40:9a:f1:83:95:9d:d5:44:3c:0e:
                    ad:22:ed:53:56:0d:c0:69:0f:ca:77:41:6d:59:4d:
                    3b:17:43:f3:89:5b:fb:66:e8:bb:9b:57:1d:4c:3b:
                    b5:be:3d:d1:0b:f4:8a:ef:7e:bd:53:bc:e7:85:0c:
                    ab:d8:e5:a4:77:16:28:f0:e7:fa:34:46:46:1f:76:
                    27:df:ca:d6:60:be:6e:84:41:52:d6:95:5d:ac:5b:
                    73:49:2f:aa:df:47:de:56:cf:63:ac:13:76:a8:e6:
                    1a:4c:3e:99:eb:54:4d:52:e2:c5:76:a5:03:b0:27:
                    93:21:28:93:93:e2:c4:5b:54:94:a5:f7:94:4a:20:
                    63:37:14:cc:bc:e5:59:08:d5:75:c4:96:5a:ed:a5:
                    10:8e:5c:81:cf:27:41:3f:31:32:1b:63:43:34:0c:
                    ba:8e:0f:c9:d2:84:52:37:4c:23:52:53:79:7c:23:
                    fa:05:df:69:a3:8c:df:cd:de:67:93:35:53:2e:50:
                    af:6b:db:44:20:fa:c6:1b:68:18:ac:74:8e:3f:cb:
                    d6:88:71:75:39:11:75:e4:75:45:a5:15:04:a3:38:
                    b6:7d:8e:e7:69:e4:4a:c6:35:69:e2:fc:79:16:e2:
                    a3:7d:2b:03:bd:d9:90:22:9e:47:0e:be:44:54:7d:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E9:7B:B5:C8:72:50:11:B1:98:58:84:AA:43:F2:E5:E9:48:B5:EB
            X509v3 Authority Key Identifier:
                keyid:7B:E9:5A:26:13:7B:30:C7:40:C9:9D:DD:48:DA:6F:EA:D6:29:05:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3136382e3139352e3235322e302f32322d3234203d3e20323632333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:04:2e:d1:e0:d1:96:a0:65:b8:82:a8:7d:cd:25:ca:d7:7f:
         44:17:67:4e:ec:ba:f3:09:39:cd:fb:9e:11:62:52:bc:07:8b:
         74:dc:b7:2e:78:25:41:91:ca:51:20:80:c1:34:87:b4:d1:5c:
         43:10:7c:bb:f6:80:6a:dd:1f:77:5b:5b:9f:a4:a6:b7:c7:2e:
         a5:ec:7a:b9:3f:bf:5a:6f:0f:96:79:2c:05:f6:0d:2e:0c:91:
         55:dd:97:37:64:af:40:46:2f:d9:27:81:86:52:57:8c:ad:ed:
         45:b9:31:52:92:c1:d0:ba:87:2a:7a:9d:c7:d9:21:7e:4a:2f:
         ab:c0:83:bb:e4:28:21:b4:00:be:a2:86:b0:8f:28:38:b2:45:
         43:b1:14:a4:63:34:65:3f:8a:ca:ab:87:bd:b6:d6:94:f8:60:
         00:45:43:88:a1:84:e3:e6:69:de:94:66:44:05:3a:c7:4e:e9:
         a6:0d:81:28:9a:d6:5d:79:9b:03:82:ff:1d:d6:bf:b0:2c:cf:
         fd:f7:48:b1:0c:1b:dd:80:f2:b8:b7:d5:08:b6:13:5b:27:b6:
         71:ca:11:e4:05:f4:79:d5:1f:b9:86:d6:3e:77:aa:89:cb:bd:
         ed:28:66:7e:15:85:7f:a1:71:0b:f8:b2:77:40:e4:9d:a9:7c:
         a1:1b:da:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org