Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/1/3136382e3232372e3135322e302f32322d3234203d3e20323633393835.roa
File:                     3136382e3232372e3135322e302f32322d3234203d3e20323633393835.roa (raw, json)
Hash identifier:          EEVsljG8B2kVHjvzPiZJNwPcraaIQHBFL63rMtNSxrA=
Subject key identifier:   E9:F8:83:79:3F:61:57:69:72:29:3A:62:04:A1:CB:F5:1B:F5:FC:A5
Certificate issuer:       /CN=01695794268D7D9A025FD7E9DFE19E3F00AACA35
Certificate serial:       44DE840625ADB869FDB988DB9479D7555F7360AD
Authority key identifier: 01:69:57:94:26:8D:7D:9A:02:5F:D7:E9:DF:E1:9E:3F:00:AA:CA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01695794268D7D9A025FD7E9DFE19E3F00AACA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/1/3136382e3232372e3135322e302f32322d3234203d3e20323633393835.roa
Signing time:             Thu 04 Apr 2024 17:43:10 +0000
ROA not before:           Thu 04 Apr 2024 17:38:10 +0000
ROA not after:            Thu 03 Apr 2025 17:43:10 +0000
asID:                     263985
IP address blocks:        168.227.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:de:84:06:25:ad:b8:69:fd:b9:88:db:94:79:d7:55:5f:73:60:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01695794268D7D9A025FD7E9DFE19E3F00AACA35
        Validity
            Not Before: Apr  4 17:38:10 2024 GMT
            Not After : Apr  3 17:43:10 2025 GMT
        Subject: CN=E9F883793F61576972293A6204A1CBF51BF5FCA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c1:a8:72:d1:34:6a:60:a9:b6:a2:e6:ed:e7:
                    c2:a7:1a:fe:cb:8a:a9:96:98:15:86:3f:6d:7c:96:
                    70:ea:29:0f:16:e8:64:43:e1:19:9e:95:1b:b5:27:
                    26:d7:22:d4:97:d2:1b:11:2b:5d:87:9c:27:7c:2a:
                    9b:1f:10:78:c2:2a:a0:f5:8a:6c:70:ec:3c:91:20:
                    09:73:9e:c6:89:27:83:59:e8:8e:41:d6:13:7f:5c:
                    04:9e:71:c4:30:c8:ea:49:81:12:40:e8:f8:f3:21:
                    ca:80:b3:b0:94:a2:7a:41:39:79:7a:7f:fe:a7:23:
                    32:47:77:e2:2f:43:7d:15:76:6d:bf:df:09:a1:0a:
                    59:e3:1a:a8:6b:54:ed:48:37:80:29:4a:68:59:ea:
                    87:02:8b:f2:36:49:2e:f9:01:b7:c2:f7:6e:33:9c:
                    8b:47:ea:f3:b9:4c:11:98:1d:7e:7d:95:08:f1:66:
                    e4:ac:b0:10:ff:87:06:e5:80:0f:ce:85:14:09:64:
                    e7:d6:2c:32:64:8f:d3:d3:5b:82:41:c1:a3:52:45:
                    f6:34:47:c3:1b:79:85:b7:c3:00:10:e3:5c:39:f4:
                    77:27:9b:25:aa:e7:61:26:04:65:36:27:5a:cd:b1:
                    ac:d1:49:22:7d:39:9d:bd:34:76:6e:ab:b5:9e:f1:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F8:83:79:3F:61:57:69:72:29:3A:62:04:A1:CB:F5:1B:F5:FC:A5
            X509v3 Authority Key Identifier:
                keyid:01:69:57:94:26:8D:7D:9A:02:5F:D7:E9:DF:E1:9E:3F:00:AA:CA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/1/01695794268D7D9A025FD7E9DFE19E3F00AACA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01695794268D7D9A025FD7E9DFE19E3F00AACA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/1/3136382e3232372e3135322e302f32322d3234203d3e20323633393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:ec:93:39:b6:6e:ec:ab:76:4f:3d:4a:f9:75:f2:a4:10:aa:
         0d:5e:5b:50:3c:14:34:46:bb:09:b5:ac:5d:f8:e0:9e:b0:c2:
         85:a6:f5:db:f1:4e:72:da:09:bf:73:3f:8c:29:2c:12:64:85:
         df:a7:7c:8c:51:d9:7d:61:41:86:e2:05:05:b7:f3:a9:c9:4c:
         1b:d8:58:32:27:99:99:01:87:55:fd:cc:3d:fd:27:04:8b:bd:
         5e:73:5f:53:ab:b7:33:d8:3d:86:17:72:2e:ea:41:e4:26:45:
         c4:d9:91:d4:7a:59:12:fc:84:37:95:38:f5:6a:7a:66:00:e6:
         dd:2b:18:ab:a5:d7:ae:37:29:76:58:a9:e1:8a:d5:52:49:20:
         e4:4b:4c:4a:69:17:e9:7c:7e:c8:6f:b1:53:8a:8f:02:7d:0b:
         1a:49:77:12:2c:55:7a:a0:af:92:5b:a0:64:8b:ed:c9:ba:56:
         ab:45:47:9d:19:b9:66:a1:a3:82:67:77:cc:5f:a4:e8:8e:0b:
         00:65:aa:3a:d8:be:64:7b:73:a7:fb:cd:97:63:91:dd:0f:a2:
         d7:05:1a:66:f3:1b:a3:d6:5f:43:84:49:33:e0:26:37:b0:d3:
         09:5b:23:46:6b:ee:4b:6e:b5:4d:7e:5f:01:92:4e:c5:ee:12:
         c7:04:2f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org