Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132352e302f32342d3234203d3e20323635333536.roa
File:                     3136382e3138312e3132352e302f32342d3234203d3e20323635333536.roa (raw, json)
Hash identifier:          p8UvldzDfCnUDFsuJONRDDf2poSyL3Y5VFUjG4v+zcc=
Subject key identifier:   F4:98:51:C4:32:3E:54:DC:BD:FD:E6:78:53:2D:86:A7:DA:29:3B:B9
Certificate issuer:       /CN=6DC8917D227E7E894EFC1D40BF393EEBD17CD397
Certificate serial:       7D01CCD0985BF62B1DC75DD91BC773FD22D5EDEC
Authority key identifier: 6D:C8:91:7D:22:7E:7E:89:4E:FC:1D:40:BF:39:3E:EB:D1:7C:D3:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DC8917D227E7E894EFC1D40BF393EEBD17CD397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132352e302f32342d3234203d3e20323635333536.roa
Signing time:             Wed 10 Jan 2024 13:21:17 +0000
ROA not before:           Wed 10 Jan 2024 13:16:17 +0000
ROA not after:            Wed 08 Jan 2025 13:21:17 +0000
asID:                     265356
IP address blocks:        168.181.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:01:cc:d0:98:5b:f6:2b:1d:c7:5d:d9:1b:c7:73:fd:22:d5:ed:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DC8917D227E7E894EFC1D40BF393EEBD17CD397
        Validity
            Not Before: Jan 10 13:16:17 2024 GMT
            Not After : Jan  8 13:21:17 2025 GMT
        Subject: CN=F49851C4323E54DCBDFDE678532D86A7DA293BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:3a:2a:c3:ca:e5:e6:5e:83:71:9d:05:92:
                    ce:2f:63:49:5a:e8:27:50:6d:65:cf:9f:34:90:ff:
                    08:00:ee:dd:22:4d:62:14:fb:ea:97:59:51:2b:2e:
                    9a:04:05:f1:ad:15:ee:3f:0c:48:4a:d4:d8:a1:2a:
                    04:83:62:54:d4:2f:df:ff:74:3f:f5:2b:e3:17:46:
                    15:f8:63:0e:2c:4d:11:28:6b:07:bd:c9:b3:c8:f5:
                    87:bb:ae:62:6e:d3:a9:35:8e:f9:5d:6b:32:64:38:
                    01:f0:91:e5:2f:1b:de:17:1d:9a:d1:0c:0b:3e:fd:
                    85:f7:b6:bc:20:fb:f9:89:41:3b:a9:bd:a3:19:24:
                    ce:65:a2:89:7b:f4:4c:32:a6:72:f4:81:44:7b:cc:
                    c3:f0:2f:77:0c:5b:27:49:a5:16:b2:2f:b0:22:12:
                    26:8b:af:a7:47:95:25:0f:57:7d:ab:ec:59:e4:23:
                    90:1c:7f:51:b2:97:8c:3a:f9:df:fa:47:b7:ca:c4:
                    75:fd:7f:6d:01:df:9a:b7:fd:b5:22:5e:b9:e8:5d:
                    a4:89:8f:c3:13:32:bc:6d:2f:c7:58:2c:47:2f:1d:
                    7f:27:7d:ee:fc:9a:d1:6e:43:d8:e4:0c:fe:eb:35:
                    06:5c:b0:7e:4f:f9:ba:54:e1:9a:53:6a:fd:49:cc:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:98:51:C4:32:3E:54:DC:BD:FD:E6:78:53:2D:86:A7:DA:29:3B:B9
            X509v3 Authority Key Identifier:
                keyid:6D:C8:91:7D:22:7E:7E:89:4E:FC:1D:40:BF:39:3E:EB:D1:7C:D3:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/6DC8917D227E7E894EFC1D40BF393EEBD17CD397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DC8917D227E7E894EFC1D40BF393EEBD17CD397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132352e302f32342d3234203d3e20323635333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:e8:08:20:91:46:65:25:33:37:3c:23:d2:10:bc:80:b3:80:
         02:ef:2a:d8:96:86:02:27:76:00:dc:52:f7:7d:7c:09:16:9f:
         79:a3:f5:13:e9:6d:ea:97:dd:2a:02:98:af:d7:f8:d8:65:34:
         6a:94:dd:d7:b9:3d:20:47:2a:6b:4d:e7:5d:20:d4:f2:c0:9d:
         0f:a0:98:d8:94:d6:c2:93:c1:59:ab:e6:0c:6a:cc:2c:57:35:
         9d:b6:3e:2a:4d:50:49:78:e5:f9:a5:0d:b1:2d:97:3b:44:a9:
         e4:da:47:39:ce:1d:66:f5:4d:80:d6:d1:9a:bb:28:76:25:b7:
         d1:40:e0:50:fd:e2:04:f2:e7:00:01:ce:a8:a3:cd:9a:ea:41:
         64:ba:5d:43:a1:86:5c:15:3d:12:7c:c7:4c:8e:fc:47:2c:fc:
         8d:94:f4:a1:d2:e8:9b:d5:c0:00:f0:1d:1c:74:ee:53:75:47:
         93:21:a6:5c:6b:0f:fb:30:27:75:52:ff:50:0f:a2:b2:5d:78:
         8b:5e:39:e8:bb:70:3a:f0:59:96:75:f7:8e:94:bf:53:98:69:
         46:9b:39:56:b4:3e:e1:82:e4:05:76:96:05:c7:d1:8c:42:5e:
         a0:4d:89:35:fd:01:cd:12:6b:37:37:59:1a:4d:5b:d6:0c:b5:
         39:81:06:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org