Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3136382e3230352e34302e302f32322d3234203d3e203631393432.roa
File:                     3136382e3230352e34302e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          FYJ1BOiy/9UXJmThVxpkC/VrwfU/p76Y+5hhNqfA0uo=
Subject key identifier:   66:77:CF:4E:A3:A5:DC:8A:18:74:CA:56:F6:83:E2:23:B5:53:F7:BD
Certificate issuer:       /CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
Certificate serial:       10CCE5B05864D42992058D1C38F25F520430AB37
Authority key identifier: F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3136382e3230352e34302e302f32322d3234203d3e203631393432.roa
Signing time:             Thu 04 Apr 2024 02:03:06 +0000
ROA not before:           Thu 04 Apr 2024 01:58:06 +0000
ROA not after:            Thu 03 Apr 2025 02:03:06 +0000
asID:                     61942
IP address blocks:        168.205.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cc:e5:b0:58:64:d4:29:92:05:8d:1c:38:f2:5f:52:04:30:ab:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
        Validity
            Not Before: Apr  4 01:58:06 2024 GMT
            Not After : Apr  3 02:03:06 2025 GMT
        Subject: CN=6677CF4EA3A5DC8A1874CA56F683E223B553F7BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:2b:a1:71:11:dc:46:c6:07:09:2d:84:27:
                    79:eb:b8:37:4f:6e:7e:2c:74:fa:92:9e:cc:9c:ba:
                    b8:83:2c:99:9d:61:06:34:de:2c:25:aa:2c:26:cd:
                    00:15:81:b6:5d:c0:67:15:ec:00:4b:34:38:0c:2e:
                    0b:3b:f1:fa:69:88:44:c9:ad:1a:c2:fa:1e:15:f7:
                    b0:f3:67:a1:bb:83:2a:ff:78:a9:5f:3e:06:78:4f:
                    3e:ea:ac:a7:6b:f6:42:48:a5:b9:06:d2:ab:9a:da:
                    d6:b9:04:76:d1:eb:56:e0:1e:22:6c:45:2f:d9:61:
                    ea:b3:06:e3:5a:e5:f4:41:3b:6b:55:4c:e5:69:f2:
                    1a:25:cf:fa:29:57:49:50:45:58:53:15:b3:e3:b4:
                    3f:b6:5d:66:12:4f:8f:1e:16:37:08:c2:ec:3f:1f:
                    2a:f0:38:6d:e2:22:a8:c2:83:46:9d:bd:69:95:b6:
                    f9:9d:96:d3:dd:f7:8e:15:77:a8:f9:ae:71:4d:83:
                    f0:db:31:4b:be:79:70:2e:a7:ff:c0:79:0e:cd:02:
                    ca:52:c5:9a:f7:c1:49:66:2a:bf:e4:44:63:f6:34:
                    09:09:57:36:4b:78:ce:8f:79:4e:4c:8e:90:50:5c:
                    e4:d6:d0:55:e6:89:35:67:0a:72:79:8a:e3:cc:eb:
                    ec:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:CF:4E:A3:A5:DC:8A:18:74:CA:56:F6:83:E2:23:B5:53:F7:BD
            X509v3 Authority Key Identifier:
                keyid:F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3136382e3230352e34302e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:67:58:02:66:5c:19:7d:ef:da:e7:4c:90:3c:92:80:b6:03:
         4c:31:cf:3e:3d:ec:2b:99:5b:6c:9d:cc:fa:8a:f8:f0:41:46:
         d3:ed:05:60:b4:d9:ad:0c:3a:2f:06:5d:3a:03:fe:f9:9a:3b:
         9a:a2:9c:3d:e4:37:65:f1:70:9d:a5:9a:be:37:b9:db:80:8d:
         6e:05:d5:3e:ff:d7:33:38:04:63:28:1b:3b:6e:3b:07:04:4c:
         a1:54:f0:e1:0d:70:2b:35:94:2f:fa:38:25:cb:7b:8c:e2:17:
         34:c0:30:ea:7d:7d:43:78:a3:20:67:9d:2e:4b:a4:d3:ac:36:
         16:3e:2d:6c:92:71:1a:e8:71:e6:29:58:98:3b:2a:98:3c:88:
         2b:1e:91:99:b2:7b:24:b5:1c:a1:c0:06:47:b4:75:16:08:f2:
         06:f7:d6:27:16:28:83:3d:c6:a4:4c:f0:c6:d0:26:55:c0:91:
         49:42:a8:c0:3a:ed:be:a9:91:24:ad:0b:8a:44:db:90:65:67:
         a7:79:8a:2f:74:46:fd:8f:c3:b9:1a:8d:eb:4b:8b:66:ae:49:
         79:b6:82:8c:1d:da:20:2c:5f:e4:47:77:7d:63:49:40:d6:8f:
         3d:32:c3:f3:94:a6:7d:85:2b:7f:2d:b9:01:be:49:c0:d8:22:
         5f:65:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org