Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/3136382e3139372e3130342e302f32332d3233203d3e20323635343737.roa
File:                     3136382e3139372e3130342e302f32332d3233203d3e20323635343737.roa (raw, json)
Hash identifier:          JijMRJdMos1o7chpdhE8gzF0qyK+ty5V6UkwzW0D8WU=
Subject key identifier:   BA:B2:32:89:73:53:4A:7B:D8:27:F5:7A:27:44:2C:D2:72:CC:51:E9
Certificate issuer:       /CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
Certificate serial:       50B779845AA2102937D5D33B341F4AEF3D990937
Authority key identifier: CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/3136382e3139372e3130342e302f32332d3233203d3e20323635343737.roa
Signing time:             Sat 30 Dec 2023 04:00:00 +0000
ROA not before:           Sat 30 Dec 2023 03:55:00 +0000
ROA not after:            Sat 28 Dec 2024 04:00:00 +0000
asID:                     265477
IP address blocks:        168.197.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b7:79:84:5a:a2:10:29:37:d5:d3:3b:34:1f:4a:ef:3d:99:09:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
        Validity
            Not Before: Dec 30 03:55:00 2023 GMT
            Not After : Dec 28 04:00:00 2024 GMT
        Subject: CN=BAB2328973534A7BD827F57A27442CD272CC51E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:34:98:b8:bc:18:b2:3c:77:94:de:c8:2d:
                    c2:57:45:2e:ac:7f:7f:76:1e:94:f8:c1:dd:f3:83:
                    b1:00:99:0b:da:5f:b8:5a:c4:d7:ce:f6:98:1b:18:
                    f9:c6:af:e6:10:19:2a:97:86:0f:68:07:e9:a7:97:
                    21:fe:41:e5:1d:d6:3d:f9:e3:5e:20:37:c8:05:0a:
                    85:00:93:27:de:e5:55:79:da:b9:cc:8b:41:ac:46:
                    78:c9:c7:72:47:fc:6d:d7:dd:76:ad:6a:e5:70:e4:
                    bd:ba:ef:63:75:9b:43:ec:7d:84:88:f9:31:a4:7f:
                    e9:13:06:a0:ac:c5:17:88:44:ba:fb:96:b7:0b:05:
                    3a:04:bc:47:f6:84:d1:52:ac:d5:3c:45:91:69:34:
                    ba:85:bb:49:8a:78:61:49:84:52:71:8b:98:ef:99:
                    76:b5:02:b4:fe:b1:33:3b:94:9b:d7:db:81:75:89:
                    f5:b7:ed:1e:a6:07:8e:c7:0b:e1:6c:5a:0f:6d:e2:
                    d5:9e:ae:cc:a3:ce:d9:3f:e5:62:91:3b:2c:91:08:
                    6a:27:91:85:99:55:8f:e7:ac:dc:8c:b8:a7:94:56:
                    c5:1f:a7:bd:ec:b3:a2:88:3d:34:61:8b:ae:83:58:
                    0e:e4:2d:23:eb:82:00:1b:13:44:df:b0:84:9b:a4:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B2:32:89:73:53:4A:7B:D8:27:F5:7A:27:44:2C:D2:72:CC:51:E9
            X509v3 Authority Key Identifier:
                keyid:CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/3136382e3139372e3130342e302f32332d3233203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:6a:18:c7:ea:74:ba:0a:b8:af:f0:78:89:06:37:49:a7:70:
         90:9c:5f:b0:73:91:19:83:44:3e:2a:53:0f:ad:f4:c1:d2:b4:
         09:01:ed:48:96:9e:64:2b:93:e4:34:db:27:b9:25:aa:f1:b2:
         05:e2:84:fb:99:aa:10:de:ce:cf:78:24:96:b5:2d:a4:ef:d8:
         ec:56:53:41:48:95:8a:09:82:57:30:98:ff:81:e7:77:e3:47:
         bf:1a:7a:3a:ad:ad:3d:ef:5a:dc:66:6f:4d:19:4e:15:3c:c7:
         4e:7c:35:a4:7d:14:f7:46:14:b2:d9:86:e5:4e:a8:72:21:92:
         39:b1:e8:2d:d1:36:9d:54:4d:ae:0e:22:27:46:57:d8:a7:39:
         c2:1c:f4:03:e1:9f:45:5a:7d:37:c0:03:93:fd:5b:1e:be:c8:
         dc:82:94:aa:b4:61:2a:f8:fe:21:42:7d:69:ed:59:46:ac:1e:
         e4:7a:31:ee:f9:3f:ae:87:35:f2:57:bf:ea:a3:cb:65:d8:51:
         37:7a:0c:41:53:ff:b6:87:6c:ba:fd:f7:d4:10:be:2c:9f:99:
         a3:b2:9c:db:06:f9:97:d8:92:14:01:63:dc:8b:38:dd:de:1a:
         cf:ae:23:0d:f1:d3:90:e4:59:9e:df:26:d1:0a:74:79:04:6e:
         cc:69:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org