Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3136382e3233322e37312e302f32342d3234203d3e20333936393832.roa
File:                     3136382e3233322e37312e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          jD2DaITabQemejx4GlNWSLXKC6rAaZDaoY0Med9UpAo=
Subject key identifier:   F4:3C:F4:E9:93:F7:49:7F:EC:EE:91:97:3A:ED:29:AE:7F:BA:8E:30
Certificate issuer:       /CN=F2EC0C72CDAB836845EA7AE7EA59893B3C34960C
Certificate serial:       572CFF1DB97E8541FE9518D903C90DF2388BB4C8
Authority key identifier: F2:EC:0C:72:CD:AB:83:68:45:EA:7A:E7:EA:59:89:3B:3C:34:96:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2EC0C72CDAB836845EA7AE7EA59893B3C34960C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3136382e3233322e37312e302f32342d3234203d3e20333936393832.roa
Signing time:             Tue 30 Nov 2021 18:28:27 +0000
ROA not before:           Tue 30 Nov 2021 18:23:27 +0000
ROA not after:            Tue 18 Nov 2031 18:28:27 +0000
asID:                     396982
IP address blocks:        168.232.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2c:ff:1d:b9:7e:85:41:fe:95:18:d9:03:c9:0d:f2:38:8b:b4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2EC0C72CDAB836845EA7AE7EA59893B3C34960C
        Validity
            Not Before: Nov 30 18:23:27 2021 GMT
            Not After : Nov 18 18:28:27 2031 GMT
        Subject: CN=F43CF4E993F7497FECEE91973AED29AE7FBA8E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:12:58:50:e7:8d:76:60:59:1b:c2:2a:1d:
                    1c:94:ff:10:a3:94:ca:57:69:fb:c0:d8:7e:f8:fb:
                    c3:11:9f:fa:81:b5:63:33:5a:14:56:4f:ef:1d:9d:
                    48:67:34:68:c2:48:70:a2:66:55:24:8e:fc:ea:67:
                    7b:31:0d:6c:13:7c:f2:49:57:1b:f7:18:7a:8c:42:
                    fe:23:cd:d9:00:d3:43:4c:ac:7a:c8:e2:28:e7:35:
                    99:9a:d3:3a:bd:1a:bc:07:f9:64:a1:3a:10:68:ce:
                    d9:75:56:40:ce:0d:aa:3e:90:a6:8b:29:be:0b:17:
                    15:06:57:bb:9a:86:bd:01:fc:8d:21:d0:a4:47:ad:
                    67:16:6b:9e:67:d9:e1:82:b9:1e:f3:51:61:46:73:
                    5a:e7:31:fb:c7:fd:fc:96:91:65:9f:fb:73:01:a5:
                    18:71:2e:2e:c6:0e:0d:e9:5b:55:87:45:fa:43:33:
                    db:6e:fc:5e:24:fe:12:9a:15:69:be:db:8a:e1:69:
                    0e:c6:a9:ca:1c:ef:b4:97:fc:97:e9:4d:2f:20:3e:
                    0e:98:77:f9:35:e8:3c:5c:27:bb:9e:17:1f:e2:23:
                    c7:68:8c:d1:56:bc:05:4b:69:fd:43:8b:26:52:03:
                    df:b1:4e:00:77:58:d5:fa:76:92:39:02:1f:e9:30:
                    8e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3C:F4:E9:93:F7:49:7F:EC:EE:91:97:3A:ED:29:AE:7F:BA:8E:30
            X509v3 Authority Key Identifier:
                keyid:F2:EC:0C:72:CD:AB:83:68:45:EA:7A:E7:EA:59:89:3B:3C:34:96:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/F2EC0C72CDAB836845EA7AE7EA59893B3C34960C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2EC0C72CDAB836845EA7AE7EA59893B3C34960C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3136382e3233322e37312e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ad:11:9c:e1:5f:cd:b8:27:43:a3:c3:54:ee:76:74:a5:d8:
         02:3f:67:07:d5:f4:79:3f:e7:ce:6a:2c:0a:1e:01:e1:cd:9f:
         5a:c9:b0:80:d0:b5:3b:d9:9a:2c:99:ed:78:f1:4a:1c:aa:d6:
         ed:cd:c0:3b:24:4a:f1:ba:df:f8:bf:97:5d:a3:08:1c:23:61:
         61:4a:25:6d:f1:84:ca:45:3c:fc:83:f7:b3:ff:f0:aa:12:8d:
         b5:5d:06:bd:da:53:c3:b9:e0:16:80:62:71:92:c8:1a:7d:01:
         9e:27:dd:c0:39:e6:af:95:dc:11:28:f1:80:32:7e:dc:c2:50:
         60:a3:01:24:7e:5e:7f:fe:c2:57:02:8b:88:d1:b3:fd:4f:78:
         b9:a7:34:71:0e:7a:94:9f:77:c2:26:32:bd:65:ac:40:cf:79:
         01:e1:8e:10:9b:c0:a4:4f:01:af:b5:c7:11:4d:5e:0b:71:77:
         e5:4a:b4:15:51:8a:5a:68:e3:73:34:87:b7:90:fa:2b:cb:43:
         d3:a7:cb:3f:3d:92:31:3b:21:a3:c3:48:6d:6d:2b:86:dd:c6:
         a4:e7:76:d9:3c:8b:f0:e1:ef:51:b2:47:37:ec:b9:c9:88:26:
         45:0b:81:ce:b1:fb:0c:35:b8:db:ef:36:e9:e7:aa:aa:c9:5b:
         39:c5:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 19:11:45 2024 by rpki-client on console-ams.rpki-client.org