Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa
File:                     3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa (raw, json)
Hash identifier:          mrD3gF4AYEAi8O43phmFswc/+We/KLSF5p/xpuHfHVM=
Subject key identifier:   85:00:2A:29:E7:D1:CC:E2:C1:5A:8E:D3:49:45:BC:A1:DD:F4:77:19
Certificate issuer:       /CN=3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6
Certificate serial:       11A71734EE8856108ED714AA3291928B4BCE09ED
Authority key identifier: 3A:5E:AC:93:0C:5E:91:DC:AA:01:57:3B:44:ED:54:C8:E9:DD:6D:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa
Signing time:             Sun 10 Sep 2023 19:00:01 +0000
ROA not before:           Sun 10 Sep 2023 18:55:01 +0000
ROA not after:            Sun 08 Sep 2024 19:00:01 +0000
asID:                     263631
IP address blocks:        168.205.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a7:17:34:ee:88:56:10:8e:d7:14:aa:32:91:92:8b:4b:ce:09:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6
        Validity
            Not Before: Sep 10 18:55:01 2023 GMT
            Not After : Sep  8 19:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:82:49:9f:16:2a:9b:06:e6:a8:f2:c1:ed:
                    52:9c:86:6d:9c:35:de:8f:d5:fb:f6:cc:56:4a:87:
                    6d:a8:6b:d6:f2:1d:19:74:6b:b0:31:9f:6f:e3:e1:
                    03:80:d0:e9:ff:40:76:f6:d3:44:1d:26:1e:34:52:
                    b5:79:36:ba:ba:3a:96:e1:91:3d:1f:80:cd:ed:84:
                    b6:4c:fa:db:2e:23:a6:6b:9f:14:43:1b:d2:2b:60:
                    0f:fe:17:0b:80:bf:6b:d9:99:47:99:ef:ec:76:88:
                    cf:4f:27:ba:7f:c6:16:b6:64:f3:f0:36:fd:e9:dd:
                    d9:95:b5:4b:9e:86:16:b0:90:11:8a:65:65:7e:2b:
                    a8:18:10:ff:b1:bd:33:0e:a9:66:43:bf:cf:3d:46:
                    0b:06:22:7e:14:a0:6e:87:aa:82:43:0a:fa:ab:d6:
                    95:82:ca:85:0f:23:79:0b:bb:78:f4:b2:bd:43:ff:
                    60:5b:dd:e2:ff:4e:71:2a:df:22:15:eb:29:28:c2:
                    eb:88:9a:23:16:63:f9:d8:0b:59:60:20:42:bf:09:
                    aa:fd:e0:d6:41:00:ef:f2:ca:c3:81:dd:c3:b1:e2:
                    e8:b7:56:91:3b:d3:9e:09:ad:b3:89:ed:5f:78:21:
                    4f:4c:8f:5b:5a:7f:e7:65:5a:29:b1:0a:24:61:0b:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:00:2A:29:E7:D1:CC:E2:C1:5A:8E:D3:49:45:BC:A1:DD:F4:77:19
            X509v3 Authority Key Identifier:
                keyid:3A:5E:AC:93:0C:5E:91:DC:AA:01:57:3B:44:ED:54:C8:E9:DD:6D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:e7:8a:23:4a:fd:34:83:23:c5:e7:74:a3:90:81:c8:69:2b:
         a1:92:90:80:7d:bb:b4:6e:67:ec:14:3a:eb:ec:da:76:a1:cb:
         a3:56:e7:e8:ad:17:43:ad:5e:89:0c:9e:ee:2a:e4:a4:37:4d:
         19:ac:fa:d1:28:04:07:7c:36:da:82:62:26:5f:db:d9:1a:fe:
         3c:10:77:09:66:52:0c:5f:b5:0d:11:4b:e0:d8:51:44:94:94:
         10:8c:fe:07:79:e0:b1:e1:ae:8c:6f:2c:9f:72:0a:60:02:34:
         8f:08:40:7a:48:dd:dd:e8:70:5f:5c:6c:b8:da:f5:a1:71:84:
         30:1e:37:f1:19:ec:27:3a:52:0d:58:3f:17:ea:12:8f:f9:c4:
         fc:2e:df:3a:a7:7c:0d:ef:d6:18:00:31:e2:b7:0e:d4:ba:bd:
         1e:96:e3:f0:2d:a9:d1:b7:29:57:76:ef:e8:b7:4c:db:09:96:
         57:ad:37:f8:e5:ab:cb:02:80:1e:54:37:9c:91:b1:bb:ce:01:
         6a:44:e3:05:f9:11:af:87:a9:06:fe:35:02:1e:69:eb:25:bc:
         c8:1a:27:4f:86:e4:2a:a3:de:99:10:ff:5b:ef:23:b7:6c:d1:
         3f:24:70:39:99:33:a2:50:a3:25:d6:28:69:7c:8e:fb:ce:a9:
         31:73:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org