Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132342e302f32322d3234203d3e20323635333536.roa
File:                     3136382e3138312e3132342e302f32322d3234203d3e20323635333536.roa (raw, json)
Hash identifier:          20/JXexxWAkcx/C7uhysc3n+OaMhs98pQzE8Sogrog8=
Subject key identifier:   65:30:D7:B9:30:8C:27:08:83:58:BC:A1:E8:D0:E6:48:06:67:D2:88
Certificate issuer:       /CN=F04EC57968A4F67D8465C10AD47BB89D3CCAB4BA
Certificate serial:       1EDEB172CA94CEFF4569B518A03CBF5DB5715C58
Authority key identifier: F0:4E:C5:79:68:A4:F6:7D:84:65:C1:0A:D4:7B:B8:9D:3C:CA:B4:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F04EC57968A4F67D8465C10AD47BB89D3CCAB4BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132342e302f32322d3234203d3e20323635333536.roa
Signing time:             Tue 11 Jul 2023 16:58:21 +0000
ROA not before:           Tue 11 Jul 2023 16:53:21 +0000
ROA not after:            Tue 09 Jul 2024 16:58:21 +0000
asID:                     265356
IP address blocks:        168.181.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:de:b1:72:ca:94:ce:ff:45:69:b5:18:a0:3c:bf:5d:b5:71:5c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04EC57968A4F67D8465C10AD47BB89D3CCAB4BA
        Validity
            Not Before: Jul 11 16:53:21 2023 GMT
            Not After : Jul  9 16:58:21 2024 GMT
        Subject: CN=6530D7B9308C27088358BCA1E8D0E6480667D288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cb:92:56:35:24:c6:41:0e:52:d1:47:b4:84:
                    4e:d0:ab:62:d2:7e:f1:94:89:c4:d3:b9:ae:63:51:
                    51:68:e1:9a:20:bb:59:19:fe:99:e0:ae:4f:66:77:
                    c9:0c:a6:e2:a0:bd:e8:75:41:c3:53:42:e0:de:c6:
                    41:d2:f1:c5:6c:fb:29:c9:4e:6c:5d:c1:b7:4b:f7:
                    9d:a2:7a:68:aa:f2:fc:c6:a8:84:d3:05:0a:da:6a:
                    ac:9d:c8:9f:10:7e:9d:b3:a4:53:5b:27:9c:ed:61:
                    95:b1:c1:25:7f:f0:78:34:84:75:7d:1e:1f:ed:70:
                    4a:bd:90:78:5e:96:c8:4f:e1:35:4a:6d:6a:48:35:
                    10:70:f5:2a:6f:b2:a5:6b:15:5c:be:15:a7:e2:ac:
                    fe:b6:7c:f0:de:01:53:0e:4a:97:dc:a7:5d:87:1d:
                    56:d8:be:4c:79:26:8d:46:0a:71:8e:98:2c:cd:36:
                    91:dc:06:e7:94:6d:b1:58:f0:ee:b3:af:fd:79:55:
                    4d:b1:df:fc:58:5d:f3:b9:30:25:6c:29:b3:a0:f2:
                    b9:d0:50:7e:3d:da:f5:cd:fd:c5:bd:de:51:29:e9:
                    c8:9f:53:cb:d9:15:f3:43:4c:9f:5b:32:36:ac:38:
                    e4:77:c5:46:f6:79:31:34:e3:46:7f:cc:9b:16:f7:
                    ff:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:30:D7:B9:30:8C:27:08:83:58:BC:A1:E8:D0:E6:48:06:67:D2:88
            X509v3 Authority Key Identifier:
                keyid:F0:4E:C5:79:68:A4:F6:7D:84:65:C1:0A:D4:7B:B8:9D:3C:CA:B4:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/F04EC57968A4F67D8465C10AD47BB89D3CCAB4BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F04EC57968A4F67D8465C10AD47BB89D3CCAB4BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132342e302f32322d3234203d3e20323635333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:87:77:2f:8b:e2:06:a1:7c:64:a6:a7:df:20:77:ed:49:c2:
         01:11:a0:dd:3d:c3:03:ab:ae:f9:b5:7a:35:64:5a:0d:e4:cf:
         9c:1d:a4:c6:aa:b6:fc:26:86:7e:48:58:ab:e6:f8:f2:4f:b1:
         b2:02:30:9d:c4:13:a9:7c:81:3b:5f:bb:1d:e5:94:25:97:ad:
         e5:a4:33:40:b1:69:75:b7:c0:1a:72:79:4f:a0:8a:fb:78:80:
         2c:da:b4:e4:3c:3a:42:62:ac:13:2c:67:b8:cf:86:3d:f0:50:
         c8:57:60:b9:f0:5a:79:a2:33:ce:6e:bd:0f:a2:4a:0c:74:7d:
         6a:93:50:3f:b0:51:64:b9:8c:b2:2a:e0:8e:9a:ca:c4:cf:33:
         df:ee:72:39:7c:e8:1a:0f:68:cd:3a:33:7e:77:5a:26:7f:6b:
         5e:da:4f:ec:05:82:ad:c0:70:35:5d:6c:dd:09:79:16:f6:c7:
         52:5d:08:3a:84:c9:4c:51:45:b8:4a:2e:55:f9:46:4e:e6:bb:
         0d:34:73:90:b9:5a:b2:4d:cf:ef:e5:98:c2:8a:17:c3:fe:a0:
         ae:9f:dc:e9:d7:cb:c2:d6:7c:d6:a1:63:b0:42:a1:e0:d2:f6:
         b2:60:83:15:1d:83:9d:3e:74:13:64:52:cb:69:d7:79:5a:b6:
         1e:bf:5e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org