Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/0/3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa
File:                     3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa (raw, json)
Hash identifier:          qDDOR5FucDgFZT5MVcNZkLzq+Uy6whZKLP9c54JNUyU=
Subject key identifier:   15:EB:98:3D:02:32:1D:3B:74:38:D9:A2:2A:0E:C2:6F:F2:6E:D9:A4
Certificate issuer:       /CN=4BCC581581148CD1639867743FA1351FC5C7EE8F
Certificate serial:       1FC94A33AF284314828820655ED5788B2D095421
Authority key identifier: 4B:CC:58:15:81:14:8C:D1:63:98:67:74:3F:A1:35:1F:C5:C7:EE:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BCC581581148CD1639867743FA1351FC5C7EE8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/0/3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa
Signing time:             Mon 24 Jul 2023 21:20:57 +0000
ROA not before:           Mon 24 Jul 2023 21:15:57 +0000
ROA not after:            Mon 22 Jul 2024 21:20:57 +0000
asID:                     263563
IP address blocks:        168.232.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c9:4a:33:af:28:43:14:82:88:20:65:5e:d5:78:8b:2d:09:54:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BCC581581148CD1639867743FA1351FC5C7EE8F
        Validity
            Not Before: Jul 24 21:15:57 2023 GMT
            Not After : Jul 22 21:20:57 2024 GMT
        Subject: CN=15EB983D02321D3B7438D9A22A0EC26FF26ED9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:7c:4d:34:45:bb:e0:d8:7c:26:e8:f0:fa:
                    8b:f8:d5:72:b8:ce:e7:29:a9:3b:b6:f2:c9:bb:19:
                    37:64:67:d0:f0:07:e9:df:66:44:6e:80:86:ff:6c:
                    98:cb:21:42:d4:97:b4:2d:f7:20:bd:36:fe:e1:f6:
                    e6:a4:a9:2f:d9:e9:17:88:a4:82:16:dc:1a:b6:bf:
                    60:5f:00:3f:55:73:ca:7b:92:b5:55:2e:d3:70:98:
                    20:32:25:5b:00:d9:7e:2e:3d:88:af:75:91:b4:7a:
                    38:38:32:1d:e5:ff:0d:2d:80:3a:05:67:56:5a:0e:
                    89:15:f8:37:2a:78:6d:0c:78:75:7c:59:b7:12:57:
                    ed:42:7a:b2:9e:c9:9b:5d:d2:5d:1e:99:8c:77:4f:
                    4c:83:bf:e3:c1:e6:b7:a8:63:1f:1d:33:f5:56:c9:
                    3f:30:a4:d9:09:f4:df:75:de:6d:43:ba:14:c0:a9:
                    91:3f:4c:c4:ff:b2:6a:52:4f:9b:22:d9:67:e7:81:
                    fd:45:69:37:fb:32:30:40:81:7a:b2:e7:9f:05:1d:
                    ba:30:be:79:bc:21:f8:39:23:1f:0f:68:30:19:8b:
                    a4:90:32:79:50:20:bf:ca:0d:ab:d9:5c:01:03:44:
                    c9:a2:3b:b7:14:f3:88:42:70:2c:c9:98:88:1b:d1:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EB:98:3D:02:32:1D:3B:74:38:D9:A2:2A:0E:C2:6F:F2:6E:D9:A4
            X509v3 Authority Key Identifier:
                keyid:4B:CC:58:15:81:14:8C:D1:63:98:67:74:3F:A1:35:1F:C5:C7:EE:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/0/4BCC581581148CD1639867743FA1351FC5C7EE8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BCC581581148CD1639867743FA1351FC5C7EE8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/0/3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:fd:37:f4:96:ba:23:5e:1c:53:c0:2e:4e:99:5f:5b:2f:75:
         be:54:fb:16:6e:0b:42:f7:2e:fc:c0:57:a8:6a:96:c4:6a:17:
         a9:a2:b1:49:ff:ad:5a:63:2d:5d:2b:99:be:ba:c4:c3:ce:3a:
         f8:ac:04:04:34:24:5c:b5:57:be:57:76:60:0f:fb:64:77:a0:
         48:5b:1c:1a:ed:2b:35:a1:4d:47:12:e4:c9:18:f5:7b:55:f5:
         fb:d6:f5:2e:94:03:de:12:38:93:68:ad:c7:90:2c:26:21:ce:
         3d:ea:7a:8a:b3:21:e6:10:38:aa:20:2a:e5:25:dc:93:0f:0c:
         cc:ec:7a:c3:23:d3:0a:8b:ef:75:ab:c3:35:27:af:64:2c:e4:
         ab:90:d3:d6:76:50:ce:81:62:90:05:93:5d:f6:ac:04:4f:b8:
         c2:00:c1:00:c0:1e:c7:d6:27:3b:fc:2a:4e:8f:2d:64:d6:da:
         27:f6:c9:92:fc:3e:80:09:73:f9:61:42:2c:09:b7:74:df:18:
         ce:b0:a5:25:75:4a:98:66:19:54:3b:30:3e:42:e6:4d:e1:0b:
         df:6e:f7:6f:13:b1:83:ae:de:46:af:ba:f7:8c:b3:1c:4e:a1:
         aa:e3:f4:b9:31:55:f7:1b:99:6f:43:80:d5:c3:13:5a:b5:24:
         f7:51:b6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:53 2024 by rpki-client on console.sobornost.net