Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/3136382e3230352e3232342e302f32342d3234203d3e20323634383637.roa
File:                     3136382e3230352e3232342e302f32342d3234203d3e20323634383637.roa (raw, json)
Hash identifier:          KTj7BkxzXPIyhVxN0JXzzHEyq7xFun/hp3oVIncfuF8=
Subject key identifier:   02:B2:89:4E:AD:70:6C:4A:10:75:5E:32:CB:38:6B:7F:89:75:86:55
Certificate issuer:       /CN=A81080075593D65A04DB9FC78CAC8CA9E1EE8246
Certificate serial:       5E7E3C1145F3A57B65923231B5BF0E01D1319257
Authority key identifier: A8:10:80:07:55:93:D6:5A:04:DB:9F:C7:8C:AC:8C:A9:E1:EE:82:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/3136382e3230352e3232342e302f32342d3234203d3e20323634383637.roa
Signing time:             Fri 29 Dec 2023 13:31:22 +0000
ROA not before:           Fri 29 Dec 2023 13:26:22 +0000
ROA not after:            Fri 27 Dec 2024 13:31:22 +0000
asID:                     264867
IP address blocks:        168.205.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7e:3c:11:45:f3:a5:7b:65:92:32:31:b5:bf:0e:01:d1:31:92:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A81080075593D65A04DB9FC78CAC8CA9E1EE8246
        Validity
            Not Before: Dec 29 13:26:22 2023 GMT
            Not After : Dec 27 13:31:22 2024 GMT
        Subject: CN=02B2894EAD706C4A10755E32CB386B7F89758655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:34:22:c0:eb:35:c3:51:14:fa:d7:a3:d3:5f:
                    98:2d:68:28:af:f4:c4:1a:50:c9:d4:62:40:f1:97:
                    7f:de:b9:86:f2:1a:79:0e:e9:56:ab:9b:68:c0:0c:
                    83:9b:a1:d4:a5:3b:31:e6:c5:c2:2a:71:8a:62:e0:
                    24:d1:8b:78:71:b0:25:67:6d:83:08:6c:0f:11:3c:
                    51:72:50:fa:76:f6:c7:88:26:18:b8:db:a1:11:fa:
                    3d:5e:80:ef:07:94:1c:b9:6a:ae:30:a1:18:25:33:
                    b8:70:37:28:2a:aa:35:18:83:9a:f5:d2:25:02:b4:
                    72:ca:6f:35:00:78:f3:e4:35:06:b7:fd:dd:c8:0e:
                    d2:f8:46:4d:9b:31:83:0d:26:b2:14:74:f2:ac:b0:
                    51:51:e0:1f:35:74:11:6c:5a:35:f2:45:00:6e:dd:
                    c3:9c:43:26:c7:29:7f:fa:1a:fa:a0:75:8a:8b:62:
                    06:a0:ad:b8:c6:83:94:bb:fd:bc:5d:9f:bf:76:b5:
                    e3:2c:bc:34:38:eb:03:57:80:a2:70:4e:4f:14:f2:
                    ab:c5:2e:7e:c7:f6:66:6d:02:6d:12:74:14:c5:6b:
                    5e:8f:8a:c6:8a:9f:09:79:d5:14:57:b1:ed:53:5b:
                    46:e7:f8:d0:74:6f:c7:1b:d8:37:85:4c:c1:5b:2f:
                    a0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B2:89:4E:AD:70:6C:4A:10:75:5E:32:CB:38:6B:7F:89:75:86:55
            X509v3 Authority Key Identifier:
                keyid:A8:10:80:07:55:93:D6:5A:04:DB:9F:C7:8C:AC:8C:A9:E1:EE:82:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/3136382e3230352e3232342e302f32342d3234203d3e20323634383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a6:27:1b:94:50:4b:20:72:28:76:fa:9c:49:73:b8:b1:fa:
         11:16:ee:22:0b:35:38:16:cf:c1:51:41:9e:b5:36:8c:b9:87:
         79:43:4b:ff:12:40:42:bf:6c:3c:d7:36:a4:55:0f:54:ba:6e:
         0e:49:76:06:74:f2:86:ed:97:ee:f2:20:ee:f1:30:ed:e4:fb:
         cf:a8:e8:c7:3d:ff:06:ed:b9:28:26:63:3e:01:46:b3:fa:83:
         a1:24:53:c9:7c:4d:ab:0d:0b:27:e0:01:51:25:0c:3a:62:93:
         1a:2a:2b:d4:ef:e2:85:a3:b8:96:64:cb:00:59:65:88:96:a8:
         d1:d1:3d:1e:73:78:10:0e:a2:5f:81:84:bb:bf:f7:bc:28:4f:
         42:d1:fb:db:45:c6:73:6e:ae:cd:ec:98:e6:9a:f9:bd:d4:2e:
         7d:87:bb:c8:19:13:76:a8:eb:1c:31:98:2d:4c:15:cf:69:b4:
         bb:45:d3:2c:01:10:49:69:36:c5:31:9d:e4:e7:84:4c:15:13:
         e9:55:82:a6:4a:a4:5d:bc:26:ed:6d:d8:ef:ac:65:6e:75:ff:
         fe:c4:37:53:18:bf:cc:91:09:c4:b5:a3:86:84:4b:71:9c:1d:
         bc:30:a5:cf:5e:f8:f9:1e:83:86:7d:c0:59:ad:73:e1:38:9a:
         6c:d4:a9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org