Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/3136382e3232382e38342e302f32322d3234203d3e20323032.roa
File:                     3136382e3232382e38342e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier:          zTeaGM0zRWov1ij2JJye+yyGH1Z9WBLAFEHX77wsPV4=
Subject key identifier:   F4:57:D0:0A:37:90:7B:30:69:C3:AF:C3:C9:2C:AF:9A:FA:DD:B4:82
Certificate issuer:       /CN=A4DB82B6922BE0F6B48B94197346368ADF87F112
Certificate serial:       392FE7BD75901F7384B786D327920BF10FDC7902
Authority key identifier: A4:DB:82:B6:92:2B:E0:F6:B4:8B:94:19:73:46:36:8A:DF:87:F1:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4DB82B6922BE0F6B48B94197346368ADF87F112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/3136382e3232382e38342e302f32322d3234203d3e20323032.roa
Signing time:             Fri 14 Jul 2023 13:35:26 +0000
ROA not before:           Fri 14 Jul 2023 13:30:26 +0000
ROA not after:            Fri 12 Jul 2024 13:35:26 +0000
asID:                     202
IP address blocks:        168.228.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2f:e7:bd:75:90:1f:73:84:b7:86:d3:27:92:0b:f1:0f:dc:79:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4DB82B6922BE0F6B48B94197346368ADF87F112
        Validity
            Not Before: Jul 14 13:30:26 2023 GMT
            Not After : Jul 12 13:35:26 2024 GMT
        Subject: CN=3082010A0282010100D695E861A7EA90AADAB25D6BC220D545A38A5BA62C1FA2DA3AA9BB076263FE711FBBDDBCBB81FF5C1EDFD0DF82680BE6D7EAA34F5C7B133D8B0DDEBA4BD25582389FAB1E8D20C256414E5CC9EA1C0FC8237E6B1521FC6DE5F361B9A9772435E724DC8109FB2D9A50EC360F1B5D455E1756FF8769C8ED849D68D598D4406A08D56BFA2314FF968F08D50F2A7756DE0051CFC0D5BA5917363578E0D0420F19F5CFD00A8C7C48DA0454FA4EAC4BB8B6B4B6CF7CC43D7255B17DE64735EC80A031949E17A44540A2BBF381E4B7E0C0502889DD50908DB77F6CB84009DCB2A9093BEAFEF871776C190B12D3D262D50D7DE74273E2121CB1E88C6911A758317C24B2AB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:e8:61:a7:ea:90:aa:da:b2:5d:6b:c2:20:
                    d5:45:a3:8a:5b:a6:2c:1f:a2:da:3a:a9:bb:07:62:
                    63:fe:71:1f:bb:dd:bc:bb:81:ff:5c:1e:df:d0:df:
                    82:68:0b:e6:d7:ea:a3:4f:5c:7b:13:3d:8b:0d:de:
                    ba:4b:d2:55:82:38:9f:ab:1e:8d:20:c2:56:41:4e:
                    5c:c9:ea:1c:0f:c8:23:7e:6b:15:21:fc:6d:e5:f3:
                    61:b9:a9:77:24:35:e7:24:dc:81:09:fb:2d:9a:50:
                    ec:36:0f:1b:5d:45:5e:17:56:ff:87:69:c8:ed:84:
                    9d:68:d5:98:d4:40:6a:08:d5:6b:fa:23:14:ff:96:
                    8f:08:d5:0f:2a:77:56:de:00:51:cf:c0:d5:ba:59:
                    17:36:35:78:e0:d0:42:0f:19:f5:cf:d0:0a:8c:7c:
                    48:da:04:54:fa:4e:ac:4b:b8:b6:b4:b6:cf:7c:c4:
                    3d:72:55:b1:7d:e6:47:35:ec:80:a0:31:94:9e:17:
                    a4:45:40:a2:bb:f3:81:e4:b7:e0:c0:50:28:89:dd:
                    50:90:8d:b7:7f:6c:b8:40:09:dc:b2:a9:09:3b:ea:
                    fe:f8:71:77:6c:19:0b:12:d3:d2:62:d5:0d:7d:e7:
                    42:73:e2:12:1c:b1:e8:8c:69:11:a7:58:31:7c:24:
                    b2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:57:D0:0A:37:90:7B:30:69:C3:AF:C3:C9:2C:AF:9A:FA:DD:B4:82
            X509v3 Authority Key Identifier:
                keyid:A4:DB:82:B6:92:2B:E0:F6:B4:8B:94:19:73:46:36:8A:DF:87:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/A4DB82B6922BE0F6B48B94197346368ADF87F112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4DB82B6922BE0F6B48B94197346368ADF87F112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/3136382e3232382e38342e302f32322d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:28:b3:64:c8:75:e0:9b:56:95:c3:0c:3d:2e:ee:9c:8f:b1:
         c0:08:c8:2c:6a:e1:cd:1a:6e:46:27:77:68:73:5c:12:9a:ad:
         36:c0:7d:33:be:e2:65:75:31:a1:b7:d9:e8:90:fd:a8:4f:3c:
         31:ac:f1:10:74:9f:8b:5e:ee:be:22:23:65:3f:a3:a5:80:2f:
         f4:a8:89:39:a6:e6:ad:4d:0f:76:0e:ec:f9:f2:70:5d:00:59:
         1e:4a:ee:f5:bd:36:33:14:95:5e:f2:65:1b:0b:bd:2d:01:4b:
         5f:98:46:69:44:61:d2:a5:45:a1:da:8f:8f:68:c6:02:22:bc:
         9b:a2:0a:d1:2b:02:cd:1d:b2:0e:e9:09:f2:bf:98:4e:f6:7e:
         02:59:d3:cb:03:ee:d5:59:04:66:80:ea:9f:3d:24:19:a4:1e:
         d1:cf:bb:10:cf:09:25:f4:67:17:44:4d:1a:5b:c8:f3:ad:d4:
         d1:6f:c9:85:1d:ec:d8:8a:bd:e1:ac:21:5d:32:b6:cb:03:ae:
         e4:c6:55:64:48:95:fe:ab:a3:38:7b:38:0d:42:df:c5:e6:3b:
         81:51:9a:9f:c7:f7:a0:70:0a:08:c7:82:b8:29:98:3a:e8:e6:
         12:b4:ae:1c:86:84:6e:93:41:6e:db:da:68:5a:c1:42:91:e4:
         3d:54:75:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 20:06:50 2024 by rpki-client on console.sobornost.net