Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/0/3136382e302e39362e302f32322d3234203d3e20323635323334.roa
File:                     3136382e302e39362e302f32322d3234203d3e20323635323334.roa (raw, json)
Hash identifier:          FZ0is2FXpKGvZjoKpDezr5+JqlB3zxq853l37Lxun0s=
Subject key identifier:   F6:54:A5:5D:9A:83:F3:08:12:47:83:B8:D6:7D:F4:FE:AD:BD:E8:49
Certificate issuer:       /CN=ECAD04592CD55754F7B407BA7025C58F8EAAA65C
Certificate serial:       5160B72FF6916976100D1064908FDCA5F1E2BAD5
Authority key identifier: EC:AD:04:59:2C:D5:57:54:F7:B4:07:BA:70:25:C5:8F:8E:AA:A6:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECAD04592CD55754F7B407BA7025C58F8EAAA65C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/0/3136382e302e39362e302f32322d3234203d3e20323635323334.roa
Signing time:             Tue 01 Aug 2023 20:00:00 +0000
ROA not before:           Tue 01 Aug 2023 19:55:00 +0000
ROA not after:            Thu 01 Aug 2024 20:00:00 +0000
asID:                     265234
IP address blocks:        168.0.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:60:b7:2f:f6:91:69:76:10:0d:10:64:90:8f:dc:a5:f1:e2:ba:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECAD04592CD55754F7B407BA7025C58F8EAAA65C
        Validity
            Not Before: Aug  1 19:55:00 2023 GMT
            Not After : Aug  1 20:00:00 2024 GMT
        Subject: CN=3082010A0282010100AB5AE918B945CA1966523FEDEB2B31051E3BB186BFB6B0ADE91D618FB8320D4D9B8FC08971772425098EB1141B1466A13E5F28078CA16175F8516C6928702ABC99E4286E5F7A5384FF50233D17E1EF7A17A12075FC8EA99C4B062629AB1053429E76E9160C9B8F1AC11D8CFC2F84F8B4D74DFF3CC655678376E329FD3F0EE40437CB3F5ADCE7C42DA7820097EAD7549074621BC4940B02AF6EC941E5336EC67A2452078660DA4B2BE0418E4F475C914BBC844C19DEFB71114C9634343EB863E433B1E5349A6939EF01E74A863BB2C0F0F43DA4B6DB742D55D41F3A2D7A230F63BA8A4705A4ABF8CC2B792174C6E1FA0E9DF079C7FB5B33B20A8A5C033FD8CEEB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:e9:18:b9:45:ca:19:66:52:3f:ed:eb:2b:
                    31:05:1e:3b:b1:86:bf:b6:b0:ad:e9:1d:61:8f:b8:
                    32:0d:4d:9b:8f:c0:89:71:77:24:25:09:8e:b1:14:
                    1b:14:66:a1:3e:5f:28:07:8c:a1:61:75:f8:51:6c:
                    69:28:70:2a:bc:99:e4:28:6e:5f:7a:53:84:ff:50:
                    23:3d:17:e1:ef:7a:17:a1:20:75:fc:8e:a9:9c:4b:
                    06:26:29:ab:10:53:42:9e:76:e9:16:0c:9b:8f:1a:
                    c1:1d:8c:fc:2f:84:f8:b4:d7:4d:ff:3c:c6:55:67:
                    83:76:e3:29:fd:3f:0e:e4:04:37:cb:3f:5a:dc:e7:
                    c4:2d:a7:82:00:97:ea:d7:54:90:74:62:1b:c4:94:
                    0b:02:af:6e:c9:41:e5:33:6e:c6:7a:24:52:07:86:
                    60:da:4b:2b:e0:41:8e:4f:47:5c:91:4b:bc:84:4c:
                    19:de:fb:71:11:4c:96:34:34:3e:b8:63:e4:33:b1:
                    e5:34:9a:69:39:ef:01:e7:4a:86:3b:b2:c0:f0:f4:
                    3d:a4:b6:db:74:2d:55:d4:1f:3a:2d:7a:23:0f:63:
                    ba:8a:47:05:a4:ab:f8:cc:2b:79:21:74:c6:e1:fa:
                    0e:9d:f0:79:c7:fb:5b:33:b2:0a:8a:5c:03:3f:d8:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:54:A5:5D:9A:83:F3:08:12:47:83:B8:D6:7D:F4:FE:AD:BD:E8:49
            X509v3 Authority Key Identifier:
                keyid:EC:AD:04:59:2C:D5:57:54:F7:B4:07:BA:70:25:C5:8F:8E:AA:A6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/0/ECAD04592CD55754F7B407BA7025C58F8EAAA65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECAD04592CD55754F7B407BA7025C58F8EAAA65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/0/3136382e302e39362e302f32322d3234203d3e20323635323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:dc:54:d5:1d:de:4b:a1:a8:2c:d0:0e:b2:55:5a:25:63:7c:
         b0:70:04:d4:93:10:cd:cb:89:98:b2:15:aa:7e:90:63:e4:16:
         0b:39:54:03:50:60:d8:71:72:6a:43:ea:b2:76:98:49:9d:43:
         d8:00:5a:98:17:cc:66:29:60:1f:bf:14:6d:47:87:28:8f:a5:
         f3:ef:d2:9a:5b:89:d9:b9:10:df:93:b7:aa:5e:71:45:08:5b:
         c0:df:22:62:99:99:a7:23:fd:8a:c5:c8:a8:d6:09:8a:6c:39:
         a2:c1:9a:f9:c0:a9:54:80:97:32:9f:f2:7a:46:9c:c7:7c:6a:
         e7:11:b1:63:90:b0:38:d4:3a:06:a7:67:78:1d:db:27:c5:aa:
         5b:fd:96:31:3a:d3:09:e6:75:89:27:d0:a1:32:1b:a0:6c:a1:
         d6:34:26:a6:31:ec:7f:4c:45:55:f4:91:fe:02:b0:6e:cf:1b:
         9a:00:3c:da:7b:4a:d1:a0:31:f5:8e:03:13:dc:0d:84:15:2f:
         1d:98:e0:b8:4a:c7:9f:62:14:4c:92:16:4f:59:5e:23:ec:dd:
         4e:c8:f4:eb:65:a8:02:f8:88:47:8b:10:2f:9a:eb:9b:34:cb:
         a9:65:29:97:38:96:bd:06:1f:be:ab:a7:1d:40:35:07:7a:a7:
         4f:68:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org