Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/0/3136382e3232372e3135322e302f32322d3234203d3e20323633393835.roa
File:                     3136382e3232372e3135322e302f32322d3234203d3e20323633393835.roa (raw, json)
Hash identifier:          E3dNnX1KP8WFwb27EhzX/3Pbky/XSEHlSMwf3XqUV38=
Subject key identifier:   B3:FE:E4:8E:C6:38:DD:60:49:88:45:44:42:D3:8F:E2:C7:F5:D4:49
Certificate issuer:       /CN=5CFE4D51D04B1EF3E546D622F53BC445A57D838A
Certificate serial:       6EEA16ECEB007A2B0C5A0336D91BB930977BC2E2
Authority key identifier: 5C:FE:4D:51:D0:4B:1E:F3:E5:46:D6:22:F5:3B:C4:45:A5:7D:83:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFE4D51D04B1EF3E546D622F53BC445A57D838A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/0/3136382e3232372e3135322e302f32322d3234203d3e20323633393835.roa
Signing time:             Thu 22 Feb 2024 17:46:11 +0000
ROA not before:           Thu 22 Feb 2024 17:41:11 +0000
ROA not after:            Thu 20 Feb 2025 17:46:11 +0000
asID:                     263985
IP address blocks:        168.227.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ea:16:ec:eb:00:7a:2b:0c:5a:03:36:d9:1b:b9:30:97:7b:c2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFE4D51D04B1EF3E546D622F53BC445A57D838A
        Validity
            Not Before: Feb 22 17:41:11 2024 GMT
            Not After : Feb 20 17:46:11 2025 GMT
        Subject: CN=B3FEE48EC638DD604988454442D38FE2C7F5D449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:e9:06:8e:18:fa:28:b2:d4:4d:8d:d2:24:
                    cc:b8:5f:d0:7a:fb:8e:7d:d6:1e:e5:4c:03:f5:e9:
                    3b:87:f1:d8:eb:be:bd:55:a3:eb:1e:6f:02:1f:5f:
                    ad:dd:3b:8f:48:89:6f:1f:4b:74:03:0b:90:59:05:
                    d6:43:71:14:7b:b1:c7:a1:68:bc:a6:7f:ae:dc:90:
                    51:ac:a5:4f:ad:67:b3:10:ee:2b:3b:61:95:32:ba:
                    7a:67:39:0e:5e:cf:0f:51:e8:e6:ce:77:e7:f8:08:
                    26:4e:a7:f2:1e:09:7e:b6:ed:29:41:03:43:81:30:
                    92:c7:d3:42:3c:6b:28:a9:c6:12:db:e8:b9:ba:6c:
                    88:51:69:d2:50:fa:f6:62:a3:8c:85:9f:33:5e:5b:
                    a4:2d:b5:97:5d:95:b2:84:db:bd:77:c8:d5:10:31:
                    cb:c5:72:bb:a5:15:39:b0:01:67:21:cc:96:4b:7e:
                    81:33:41:5f:c3:c6:38:70:04:76:c8:7f:1e:59:bc:
                    cc:08:75:66:55:7d:fb:ab:c2:c7:d9:ad:61:6a:4d:
                    8b:de:e9:4c:d0:e8:f5:10:da:16:4e:ce:c4:48:f9:
                    29:32:43:13:ab:31:1b:33:c7:58:30:a7:02:14:5c:
                    ca:1b:7b:28:03:9d:4c:8e:37:8e:53:e7:de:c7:69:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FE:E4:8E:C6:38:DD:60:49:88:45:44:42:D3:8F:E2:C7:F5:D4:49
            X509v3 Authority Key Identifier:
                keyid:5C:FE:4D:51:D0:4B:1E:F3:E5:46:D6:22:F5:3B:C4:45:A5:7D:83:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/0/5CFE4D51D04B1EF3E546D622F53BC445A57D838A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFE4D51D04B1EF3E546D622F53BC445A57D838A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/0/3136382e3232372e3135322e302f32322d3234203d3e20323633393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:29:e2:c6:1a:9d:f0:6f:c0:c7:39:7e:cf:54:fe:75:09:6e:
         82:53:ab:ae:45:cc:10:9c:d2:e5:66:f6:d6:d7:0e:36:a9:51:
         c5:77:bd:38:e1:2f:bc:5c:e6:6a:e8:c4:d2:9a:6f:03:a3:6a:
         bc:1b:93:2f:59:e5:3e:a0:0d:18:5d:f8:bc:81:46:0d:c5:31:
         ae:3d:48:58:29:9b:e2:2f:55:34:86:21:e9:b5:90:d2:6f:2b:
         8b:54:ad:a4:6d:e4:d5:d8:86:b0:72:c9:75:d0:dd:fa:99:17:
         16:9d:30:11:71:79:21:dd:57:4b:c9:ed:47:bc:55:a9:02:e3:
         0a:bb:05:51:d1:ae:94:86:a6:04:13:ce:ee:b9:c3:bd:65:68:
         52:64:f0:5b:d5:a2:41:87:27:af:74:ca:b3:30:aa:1a:79:30:
         d7:09:99:8b:44:43:6d:8b:2d:94:e0:5c:4e:08:7c:b2:a4:17:
         9b:44:2e:3f:24:a4:87:4b:60:af:0c:03:56:12:e2:a7:96:4f:
         8c:9a:5d:49:cf:00:3b:13:bf:6a:96:71:b9:1c:65:a9:f8:e4:
         37:c8:ae:a3:21:85:ee:68:7d:66:62:b1:f3:28:c5:1e:6b:74:
         02:00:91:dd:de:d6:cf:5b:52:d4:5b:29:8e:27:b6:ec:c6:e6:
         bd:45:f6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org