Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1hydNrPaPPcAmXPXkXG6rYu36BqYjUJNxuETLLuwd5S/0/3136382e3139362e3136382e302f32322d3332203d3e203532373737.roa
File:                     3136382e3139362e3136382e302f32322d3332203d3e203532373737.roa (raw, json)
Hash identifier:          ryeWIDaomDV7L22xgdFMu5d35ekSRdo2pNTjeCiBDzg=
Subject key identifier:   0B:70:B4:8A:51:E3:35:FE:39:F2:95:1E:94:99:F7:D7:B1:2A:B2:07
Certificate issuer:       /CN=082D7CDBA42665AF384956151549478CE3E68273
Certificate serial:       6C822C7E3C5734EE9359F3CA592DE4067186B660
Authority key identifier: 08:2D:7C:DB:A4:26:65:AF:38:49:56:15:15:49:47:8C:E3:E6:82:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/082D7CDBA42665AF384956151549478CE3E68273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1hydNrPaPPcAmXPXkXG6rYu36BqYjUJNxuETLLuwd5S/0/3136382e3139362e3136382e302f32322d3332203d3e203532373737.roa
Signing time:             Wed 12 Apr 2023 01:38:04 +0000
ROA not before:           Wed 12 Apr 2023 01:33:04 +0000
ROA not after:            Wed 10 Apr 2024 01:38:04 +0000
asID:                     52777
IP address blocks:        168.196.168.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:82:2c:7e:3c:57:34:ee:93:59:f3:ca:59:2d:e4:06:71:86:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082D7CDBA42665AF384956151549478CE3E68273
        Validity
            Not Before: Apr 12 01:33:04 2023 GMT
            Not After : Apr 10 01:38:04 2024 GMT
        Subject: CN=0B70B48A51E335FE39F2951E9499F7D7B12AB207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:8d:2b:2a:33:ac:69:80:e0:4b:a8:3e:9c:
                    ed:53:2d:13:f9:b5:f9:20:fb:9a:4e:e9:72:cf:0c:
                    01:40:05:00:70:8d:97:74:47:57:50:f8:89:7d:b6:
                    40:df:55:a7:83:b7:20:71:a2:34:a9:5c:c3:65:55:
                    c7:65:7b:68:bd:87:4e:e7:ea:68:fe:ad:bb:0d:ae:
                    e5:0e:f0:3a:9f:67:81:04:63:12:0e:1e:0b:70:eb:
                    22:26:c6:02:93:ef:e3:d6:31:06:9c:1e:73:eb:a2:
                    8d:1a:62:ef:fa:4e:49:7a:2a:53:89:6b:6b:c6:91:
                    6b:65:7d:78:6d:a8:c3:18:44:59:f8:b5:11:b8:55:
                    ba:f2:12:3b:82:a5:7a:0f:94:29:88:86:e2:2c:39:
                    a0:4c:52:02:c4:bf:40:5d:78:a9:37:15:e9:5e:a0:
                    ab:80:0b:1b:e4:b1:c1:77:57:de:de:e7:9c:a0:43:
                    21:1d:c0:b5:21:68:d9:82:07:79:06:2d:cb:e0:a6:
                    97:a8:8d:f4:48:59:03:8e:cb:f4:98:ea:78:c7:e2:
                    79:1e:c5:35:b7:c1:39:e1:0b:3b:76:52:0f:3b:94:
                    e1:e3:f5:88:36:a8:c8:8a:b0:73:2c:ce:6a:64:38:
                    e4:17:d9:03:23:dd:f5:46:bc:86:67:0c:eb:14:3b:
                    f9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:70:B4:8A:51:E3:35:FE:39:F2:95:1E:94:99:F7:D7:B1:2A:B2:07
            X509v3 Authority Key Identifier:
                keyid:08:2D:7C:DB:A4:26:65:AF:38:49:56:15:15:49:47:8C:E3:E6:82:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1hydNrPaPPcAmXPXkXG6rYu36BqYjUJNxuETLLuwd5S/0/082D7CDBA42665AF384956151549478CE3E68273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/082D7CDBA42665AF384956151549478CE3E68273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1hydNrPaPPcAmXPXkXG6rYu36BqYjUJNxuETLLuwd5S/0/3136382e3139362e3136382e302f32322d3332203d3e203532373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:9f:ff:c9:3b:e3:a0:ef:e4:55:8a:58:10:36:84:98:a3:ee:
         3b:da:de:7c:fa:bc:3b:01:b9:92:18:ab:d4:90:5c:89:df:97:
         4c:f5:1e:ce:b3:0c:be:d4:d9:23:d5:57:7c:8f:36:54:15:db:
         44:df:79:cb:59:25:74:4f:df:42:e7:82:41:86:ff:f6:20:44:
         74:7d:d0:ca:d3:c3:6f:e9:53:11:25:a2:84:20:1f:b7:01:da:
         77:59:59:cd:bf:7a:25:f1:66:00:8d:55:72:20:80:67:37:d7:
         20:e6:3c:11:2c:74:e0:6b:df:b3:db:2f:5c:ce:de:6c:9c:00:
         f7:25:53:ce:7b:0e:6c:c6:b3:2e:b4:6f:e8:0c:4e:ba:b4:e8:
         d8:0b:b4:c0:cb:bb:c6:a1:7f:ed:94:93:c8:6e:70:68:69:81:
         0b:9e:45:6f:f1:74:d5:77:2d:76:2d:1f:0f:24:ec:a0:0e:43:
         4b:e1:d6:84:84:01:25:86:19:57:e1:45:5f:62:26:a4:4c:c9:
         2a:b3:1f:60:83:bd:21:68:ae:db:7e:7a:b6:4c:e6:67:83:46:
         48:47:e9:38:47:26:60:3c:01:b0:d2:a9:48:c5:4b:c0:fa:83:
         60:d5:cb:6d:1e:dd:a9:2f:fd:9a:f4:96:3e:ea:bc:83:b7:48:
         08:79:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org