Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/0/3136382e302e3232342e302f32322d3234203d3e20323635323630.roa
File:                     3136382e302e3232342e302f32322d3234203d3e20323635323630.roa (raw, json)
Hash identifier:          WjKtdvZG2Se8dJvYTYVlghDxu4Rii+YW0D5biUEiSxE=
Subject key identifier:   C7:CD:D1:35:09:F1:1A:3A:27:42:CD:9F:48:12:15:44:BC:96:7E:38
Certificate issuer:       /CN=D40880D267C5925DEB436B44648225149D2B8823
Certificate serial:       226003059DCFF34E676A83231AE6B504CD25831F
Authority key identifier: D4:08:80:D2:67:C5:92:5D:EB:43:6B:44:64:82:25:14:9D:2B:88:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D40880D267C5925DEB436B44648225149D2B8823.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/0/3136382e302e3232342e302f32322d3234203d3e20323635323630.roa
Signing time:             Wed 18 Oct 2023 18:00:01 +0000
ROA not before:           Wed 18 Oct 2023 17:55:01 +0000
ROA not after:            Wed 16 Oct 2024 18:00:01 +0000
asID:                     265260
IP address blocks:        168.0.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:60:03:05:9d:cf:f3:4e:67:6a:83:23:1a:e6:b5:04:cd:25:83:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40880D267C5925DEB436B44648225149D2B8823
        Validity
            Not Before: Oct 18 17:55:01 2023 GMT
            Not After : Oct 16 18:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:ed:92:03:c3:4e:13:f4:2a:34:fb:1b:36:
                    0a:2c:ca:1d:83:85:50:8a:0f:c6:d4:bc:74:9a:65:
                    f5:c8:c8:6a:fb:5e:47:e5:5e:62:17:06:2f:b6:cf:
                    77:45:ea:fc:4f:21:50:df:45:67:83:fb:72:56:58:
                    13:b1:7a:39:58:3b:99:d6:36:74:64:c2:4a:8d:58:
                    02:c6:62:2b:d2:ef:02:ff:f3:79:95:24:d8:d3:e1:
                    97:a5:00:f4:28:39:37:af:1d:92:f6:da:f6:36:64:
                    f5:94:11:62:0d:b8:b0:b6:e0:bb:4c:0d:f3:d9:8c:
                    f8:c1:d2:5f:60:87:ac:78:a6:69:df:45:ec:ff:43:
                    c7:0f:9b:24:e4:76:cf:b0:1e:58:98:36:5b:04:11:
                    5b:33:79:8d:1f:e6:15:a9:70:0b:c2:02:9b:24:58:
                    c3:09:0d:40:7f:5f:16:6e:ee:66:eb:af:cf:0d:73:
                    83:32:b7:3c:b8:cc:fb:54:e2:82:cb:14:6f:0b:e3:
                    96:b6:ba:d9:90:39:a6:e4:8b:86:f2:3f:85:3f:ad:
                    25:55:ee:7e:00:af:49:ee:3a:50:e3:7d:6c:9e:8a:
                    fe:04:68:b1:61:ee:d9:c3:1b:4b:51:45:60:4a:a0:
                    90:41:a1:73:08:7f:a0:50:62:bc:73:e9:22:29:c3:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CD:D1:35:09:F1:1A:3A:27:42:CD:9F:48:12:15:44:BC:96:7E:38
            X509v3 Authority Key Identifier:
                keyid:D4:08:80:D2:67:C5:92:5D:EB:43:6B:44:64:82:25:14:9D:2B:88:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/0/D40880D267C5925DEB436B44648225149D2B8823.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D40880D267C5925DEB436B44648225149D2B8823.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/0/3136382e302e3232342e302f32322d3234203d3e20323635323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:7d:1f:69:bc:0e:b8:32:1f:5e:44:21:6a:91:c5:ac:b2:a3:
         67:fa:2c:3c:f2:da:4d:26:a6:a2:03:d3:eb:82:20:22:64:89:
         86:0a:48:44:2f:12:7f:b6:90:14:97:67:8c:3b:9d:d1:2e:8e:
         91:3c:f6:0a:d5:4a:35:b7:52:11:bf:4b:a8:ee:6a:1d:73:7b:
         75:d0:27:81:64:ef:2a:b6:a2:e4:a8:51:b5:67:81:c3:c4:14:
         66:1b:d6:0d:7a:b1:fc:1b:2f:1a:5b:a4:bf:f1:4c:9c:a0:d5:
         ee:95:9a:83:14:17:09:aa:09:c6:a6:25:d0:68:8f:d9:f1:6f:
         bc:f1:c5:52:22:c2:a3:b2:43:40:96:4b:a0:06:e2:7c:b7:fe:
         fc:df:0e:99:3d:66:e5:8c:56:6f:c0:62:11:1d:2d:63:60:6c:
         0f:b5:cd:22:b5:32:16:45:1e:a6:76:88:58:9b:44:5a:a4:90:
         76:e1:84:36:ee:c1:95:84:80:30:be:3c:bf:64:4d:64:2d:13:
         76:96:b7:db:ae:36:88:c9:8a:ee:e3:1f:2a:c5:85:17:47:fc:
         38:f1:9a:2d:71:c8:90:95:48:e6:c1:d3:1d:5c:dd:ae:80:ab:
         f5:3f:96:84:e3:7c:64:32:8c:8c:70:d7:10:49:41:25:9f:ca:
         cf:e3:e1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org