Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133372e302f32342d3234203d3e20323633333935.roa
File:                     3136382e3139342e3133372e302f32342d3234203d3e20323633333935.roa (raw, json)
Hash identifier:          nGd3NjWP5NM0xhjSV22NkenN4WxjB2hr0QuPd2XltSk=
Subject key identifier:   DD:14:26:0A:14:1C:28:E7:6C:88:68:D2:43:DD:0B:9D:D2:F8:BD:4B
Certificate issuer:       /CN=67666492B102F21109D368673B2B20745692E1A8
Certificate serial:       579DA198EFA0C4F95954B8AFA36E20EF05D22E30
Authority key identifier: 67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133372e302f32342d3234203d3e20323633333935.roa
Signing time:             Sun 25 Dec 2022 17:22:19 +0000
ROA not before:           Sun 25 Dec 2022 17:17:19 +0000
ROA not after:            Sun 24 Dec 2023 17:22:19 +0000
asID:                     263395
IP address blocks:        168.194.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9d:a1:98:ef:a0:c4:f9:59:54:b8:af:a3:6e:20:ef:05:d2:2e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67666492B102F21109D368673B2B20745692E1A8
        Validity
            Not Before: Dec 25 17:17:19 2022 GMT
            Not After : Dec 24 17:22:19 2023 GMT
        Subject: CN=DD14260A141C28E76C8868D243DD0B9DD2F8BD4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:91:a3:81:8a:66:c4:e9:0c:28:e2:3f:ed:
                    4c:f3:a6:60:c8:21:36:2d:60:f8:27:f8:c1:23:0c:
                    a8:d5:2f:29:45:f6:3d:84:01:bb:11:bc:92:de:de:
                    7d:da:7c:5f:02:15:4b:07:68:f5:b9:1d:f0:46:7e:
                    79:f4:78:53:e1:c3:f0:bd:e0:c0:04:a0:37:62:73:
                    4e:5d:64:77:2f:36:a5:91:8f:6f:ff:cb:8e:62:56:
                    e7:12:73:a4:5f:f6:0c:f1:f7:8f:98:78:59:02:9c:
                    70:19:c4:3d:51:4a:fd:e9:01:14:33:dd:cf:2b:27:
                    97:8b:01:07:fa:07:fb:a1:38:72:4e:34:59:c4:48:
                    c2:ac:e5:65:f3:e5:18:c7:40:99:43:7a:ff:b7:b8:
                    f9:4c:14:4f:cd:bd:91:90:a9:d2:54:37:f2:6f:77:
                    16:4c:20:8c:50:01:d4:0e:71:ec:11:07:b8:3b:53:
                    ac:d6:0d:8f:ab:ba:9a:b6:e4:75:be:74:88:1f:31:
                    fc:f1:11:71:e0:9f:12:bc:b7:36:d9:00:fb:62:56:
                    a1:44:e6:c4:fb:18:d8:b1:9a:2e:07:dc:5b:50:f2:
                    3f:b2:34:52:fc:e3:1b:3c:4e:1b:9d:a9:5b:70:2c:
                    5d:df:f3:dd:87:37:8e:1a:48:dd:24:22:f4:ad:21:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:14:26:0A:14:1C:28:E7:6C:88:68:D2:43:DD:0B:9D:D2:F8:BD:4B
            X509v3 Authority Key Identifier:
                keyid:67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/67666492B102F21109D368673B2B20745692E1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133372e302f32342d3234203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:87:d7:04:d0:9d:43:17:a0:f8:16:9a:a9:eb:63:f4:f0:4c:
         d4:c9:be:92:e7:90:e9:d3:ea:47:f2:24:35:5a:19:d6:47:2c:
         0c:d6:ed:95:37:e4:ca:39:8d:0a:da:14:a1:ce:17:4f:42:d8:
         92:c7:fb:85:40:d6:97:58:73:ec:70:eb:95:05:27:5e:85:ef:
         36:55:96:8c:b9:96:bb:33:94:65:71:7a:91:a5:81:fe:8a:4c:
         6e:92:20:d6:1f:0a:85:85:bc:98:7a:f5:42:d2:6c:68:c6:8d:
         9c:8b:1a:56:cb:87:96:46:79:26:49:6c:91:40:66:43:e9:61:
         90:4c:a0:9c:ef:26:ad:e7:6b:61:1a:d7:52:00:5f:58:b0:6c:
         fa:d6:ff:b3:57:88:b6:33:7d:b3:d7:5b:22:68:22:86:b7:b5:
         d4:07:0d:4b:18:04:d7:38:12:f5:d6:33:1a:e6:3a:f4:89:71:
         e1:c4:87:ec:0d:5b:a8:da:7c:45:a6:4a:1d:e3:65:e4:0c:c5:
         93:32:de:c5:dc:3a:aa:08:a1:68:15:af:63:a0:70:8f:f9:5e:
         dd:aa:53:7e:91:50:0d:9c:1e:9d:8a:a7:9e:62:6b:9d:a5:cc:
         f3:3d:e8:21:66:21:e2:37:46:5b:28:f8:b2:a5:1c:df:f9:62:
         28:f3:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org