Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3133312e302f32342d3234203d3e20323633323839.roa
File:                     3136382e3139362e3133312e302f32342d3234203d3e20323633323839.roa (raw, json)
Hash identifier:          tFimKjEjQHDDSC2CUzfb+JigigBioxoACZGRrQP9ruA=
Subject key identifier:   64:91:67:EC:31:56:BA:AA:A2:FE:5D:AE:00:F6:C9:F4:03:0B:16:73
Certificate issuer:       /CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
Certificate serial:       6A1DA49A2340DB14DE23688A8BD8B5F56DCFC723
Authority key identifier: 8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3133312e302f32342d3234203d3e20323633323839.roa
Signing time:             Tue 16 Jan 2024 20:01:43 +0000
ROA not before:           Tue 16 Jan 2024 19:56:43 +0000
ROA not after:            Tue 14 Jan 2025 20:01:43 +0000
asID:                     263289
IP address blocks:        168.196.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1d:a4:9a:23:40:db:14:de:23:68:8a:8b:d8:b5:f5:6d:cf:c7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
        Validity
            Not Before: Jan 16 19:56:43 2024 GMT
            Not After : Jan 14 20:01:43 2025 GMT
        Subject: CN=649167EC3156BAAAA2FE5DAE00F6C9F4030B1673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:a4:84:e6:5d:a5:87:2f:49:12:51:15:e3:
                    0f:37:f5:8a:12:d2:0a:a9:81:5a:d5:17:b5:9a:42:
                    39:36:19:0b:3b:72:e8:87:cf:b3:18:78:df:06:7d:
                    76:48:34:ba:e0:75:34:9b:83:5b:79:19:5f:56:db:
                    55:a6:d6:12:c4:9c:97:6b:89:82:e4:a9:e8:6b:96:
                    25:0e:51:c1:21:ea:70:9d:ee:50:03:b1:2c:f0:f8:
                    5b:45:2a:ad:cb:08:79:32:82:05:a0:48:83:61:b4:
                    f4:db:5a:6a:cf:03:34:40:0c:06:c9:02:c4:07:c0:
                    7a:8b:8d:1a:db:32:bc:f6:8d:15:3b:44:e7:5e:a8:
                    f6:1a:11:b6:57:d6:c7:63:fc:33:9a:fa:ed:68:66:
                    70:57:20:0b:6c:ed:eb:3b:d3:a3:18:6d:5b:db:a8:
                    d4:cc:45:6d:b6:35:4b:d6:bd:37:60:90:29:0f:f1:
                    45:f9:f1:04:68:9f:f9:b2:fb:c1:87:e8:02:a5:b4:
                    1d:7a:a9:74:00:09:5e:20:0a:ce:88:8e:e4:5f:5a:
                    72:1c:21:4b:27:a0:9b:4f:1f:95:0c:39:01:4f:db:
                    0e:89:d5:fc:2e:e2:7e:69:3f:5b:ad:48:f3:15:fb:
                    58:de:bd:52:af:e8:c7:d9:ee:72:89:7f:d6:5b:3a:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:91:67:EC:31:56:BA:AA:A2:FE:5D:AE:00:F6:C9:F4:03:0B:16:73
            X509v3 Authority Key Identifier:
                keyid:8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3136382e3139362e3133312e302f32342d3234203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:47:83:5d:2a:c6:e1:b4:d6:dd:fd:94:ff:cc:55:89:84:
         90:ec:06:1b:40:96:6e:01:67:3b:b8:e9:cd:fb:aa:0b:1f:85:
         2a:2c:3c:1e:b4:f3:13:e8:d8:86:0e:24:bd:c2:33:39:ec:be:
         80:a6:7b:f5:d2:30:f1:f9:f2:41:6f:dc:3d:39:4d:c4:65:2e:
         7b:3c:00:2e:c2:12:08:e2:bd:74:04:80:be:b7:e7:27:ef:87:
         3b:16:b7:d0:22:60:9a:aa:6a:2c:f8:29:e6:01:fc:3b:d9:50:
         bb:b3:23:eb:0b:f2:73:a6:75:4b:fd:2a:a5:26:f5:e0:c3:47:
         6f:15:61:14:86:e6:ee:86:39:1b:87:48:59:0d:bf:b0:18:d0:
         db:3a:18:1d:82:50:3f:19:da:92:e0:60:da:e0:d7:b0:af:5b:
         4c:76:14:21:5b:43:30:07:33:f0:ad:b4:f7:0b:b8:81:9b:c5:
         29:86:d8:fd:a6:40:94:e3:34:80:0c:0c:ea:ac:83:49:72:3c:
         74:1e:60:06:8f:4a:e4:9c:2a:b3:ce:32:ab:a5:ea:05:be:bc:
         0c:7b:92:1a:e7:4a:5d:f8:be:c2:25:c9:8e:ed:54:8c:51:23:
         e4:34:13:91:a9:31:9c:b6:d9:a7:89:b8:c1:a9:c8:7b:3b:dd:
         22:05:53:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org