Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e362e302f32342d3234203d3e20323635343036.roa
File:                     3136382e3139352e362e302f32342d3234203d3e20323635343036.roa (raw, json)
Hash identifier:          HTgmWV+TKN2nhdeUe89Y4mLRUx4iKFiSzEihJfRp10Y=
Subject key identifier:   2E:CC:BA:18:4C:E2:0A:24:C7:FC:E0:8F:A0:3B:50:0F:E5:67:3E:96
Certificate issuer:       /CN=208FFAFD8389347E0A0F0B5521884A995EB099DA
Certificate serial:       38DFC4C566F38DAD30C63BB08D71E62CD31AC398
Authority key identifier: 20:8F:FA:FD:83:89:34:7E:0A:0F:0B:55:21:88:4A:99:5E:B0:99:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e362e302f32342d3234203d3e20323635343036.roa
Signing time:             Fri 13 Jan 2023 15:27:45 +0000
ROA not before:           Fri 13 Jan 2023 15:22:45 +0000
ROA not after:            Fri 12 Jan 2024 15:27:45 +0000
asID:                     265406
IP address blocks:        168.195.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:df:c4:c5:66:f3:8d:ad:30:c6:3b:b0:8d:71:e6:2c:d3:1a:c3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208FFAFD8389347E0A0F0B5521884A995EB099DA
        Validity
            Not Before: Jan 13 15:22:45 2023 GMT
            Not After : Jan 12 15:27:45 2024 GMT
        Subject: CN=2ECCBA184CE20A24C7FCE08FA03B500FE5673E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:aa:f4:c4:a1:cd:af:6d:5c:f2:a3:e2:b8:
                    c6:34:25:b8:8e:16:8f:7e:36:60:dc:7f:f4:39:c2:
                    93:60:90:07:59:90:b0:68:8f:24:f9:2d:29:0b:b2:
                    41:62:54:7a:43:f5:1f:cd:c1:06:19:a8:87:ef:cd:
                    53:b0:b9:b0:7f:32:18:8c:32:c1:3f:d0:8a:0c:f1:
                    f4:c8:61:2c:18:34:83:ec:8b:6d:66:53:0a:2e:6b:
                    d5:93:02:4e:c0:99:85:55:e1:64:2b:a1:8f:bb:24:
                    a6:e5:68:ec:bd:e9:fa:66:a6:a5:f0:57:be:b7:73:
                    bf:e3:44:bd:ba:c4:13:b0:9d:22:35:50:dd:74:13:
                    de:6a:01:c6:eb:4c:e3:23:08:f3:da:b7:6e:d3:35:
                    7a:e0:13:9a:87:15:8f:15:64:76:7a:76:6c:29:a9:
                    22:8f:8d:70:40:a4:ab:86:3a:92:5d:5d:c1:c3:67:
                    9a:3c:e6:1b:5d:03:8b:59:80:26:b6:9d:53:d9:37:
                    b7:85:25:79:9c:e2:86:56:75:14:dc:1d:4c:d4:f2:
                    19:ee:ef:2e:87:70:62:7c:90:7a:23:9b:c2:18:5c:
                    0c:d6:9f:93:0e:34:0e:51:2f:01:68:72:41:ae:d6:
                    5e:4f:39:59:49:08:b8:0e:51:ea:b2:05:da:ae:fd:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CC:BA:18:4C:E2:0A:24:C7:FC:E0:8F:A0:3B:50:0F:E5:67:3E:96
            X509v3 Authority Key Identifier:
                keyid:20:8F:FA:FD:83:89:34:7E:0A:0F:0B:55:21:88:4A:99:5E:B0:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e362e302f32342d3234203d3e20323635343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:40:e2:96:a3:1d:8b:a3:b0:68:ce:96:d8:e1:ae:02:20:be:
         fc:4b:3e:e3:1a:59:ca:ca:1d:92:56:16:bb:99:ae:36:f7:37:
         20:9e:7f:10:31:88:c6:d8:0b:69:0e:9f:93:0b:aa:96:7d:08:
         73:f7:41:ba:f0:dc:2e:0e:1e:b6:ab:57:dc:ff:e5:5b:46:df:
         37:e8:fc:cf:67:dd:4a:ae:20:96:0c:63:ab:c6:b3:b5:37:90:
         fe:da:2b:ec:2e:f2:aa:6c:a3:fa:50:56:2b:f2:19:81:61:83:
         7f:3c:f6:b9:86:14:c4:35:ee:c4:07:c2:6d:b1:5f:bb:1f:26:
         c9:e6:94:05:4f:d2:b5:9e:3d:0e:f3:eb:59:21:60:6b:d1:38:
         5f:5d:2b:e6:7e:b7:b3:6e:e7:9d:7c:48:c1:19:07:d6:7f:b7:
         53:75:42:03:44:03:b7:a9:fd:df:ec:50:16:2e:c1:1d:27:a0:
         5e:fe:fe:b4:7b:b6:4a:93:45:e1:d1:00:d7:e3:e6:53:2a:7d:
         b5:e6:94:b1:69:59:3c:c2:a3:2b:bd:0d:05:79:41:15:4a:e9:
         c3:bd:ee:d0:60:60:5c:ad:b0:69:e9:8b:67:ee:b6:7a:93:00:
         54:12:86:48:9d:98:55:8e:35:9f:86:df:87:e7:41:b8:de:e0:
         3a:17:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org