Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/3136382e3139352e34392e302f32342d3234203d3e20323635343230.roa
File:                     3136382e3139352e34392e302f32342d3234203d3e20323635343230.roa (raw, json)
Hash identifier:          06YVuyjToRx2ck+HLHxquL9rDNj17ZPnBHYfcsjBm90=
Subject key identifier:   9E:43:23:87:3C:89:78:30:95:BD:1F:B3:B6:44:EB:85:21:32:5D:3B
Certificate issuer:       /CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
Certificate serial:       66BFD1EC90C5FA6B4CC45A33AB8B9674CEB34240
Authority key identifier: 30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/3136382e3139352e34392e302f32342d3234203d3e20323635343230.roa
Signing time:             Thu 04 May 2023 12:51:17 +0000
ROA not before:           Thu 04 May 2023 12:46:17 +0000
ROA not after:            Thu 02 May 2024 12:51:17 +0000
asID:                     265420
IP address blocks:        168.195.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bf:d1:ec:90:c5:fa:6b:4c:c4:5a:33:ab:8b:96:74:ce:b3:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
        Validity
            Not Before: May  4 12:46:17 2023 GMT
            Not After : May  2 12:51:17 2024 GMT
        Subject: CN=9E4323873C89783095BD1FB3B644EB8521325D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:78:7e:20:70:d7:b3:06:bd:58:d7:fd:c3:
                    94:a4:cc:7e:26:94:8d:2f:6d:51:d8:f9:a0:9a:86:
                    dd:83:8e:88:45:59:93:a2:17:b8:a9:97:76:d8:90:
                    d4:e5:1b:7d:72:21:74:f9:5b:9a:38:39:39:b6:e3:
                    48:b6:e7:5a:fd:ff:b6:57:23:84:98:85:ee:2a:44:
                    cf:f6:7f:f0:b7:7e:ae:67:56:4e:31:2b:0f:8b:da:
                    64:4f:5b:73:11:1e:73:46:47:7d:1b:17:1e:f1:dc:
                    5a:ad:c4:e2:f3:fe:ae:51:de:38:c1:37:9f:00:b8:
                    27:e9:85:5f:c5:fe:52:bf:7a:74:a0:b9:97:84:9b:
                    c8:ea:1d:99:10:d6:67:6b:65:15:aa:f6:8f:14:1b:
                    56:c7:68:e4:54:98:13:ef:5c:ac:88:06:91:c6:80:
                    08:42:e9:01:28:46:20:c9:30:03:19:e4:22:77:d4:
                    bd:54:65:f4:29:23:9f:fe:48:b0:8a:13:83:37:2f:
                    a6:55:63:82:3e:c1:38:6f:68:e7:b3:98:80:d5:e3:
                    10:67:af:8c:bd:4c:f8:e9:13:1a:de:6c:83:05:41:
                    2c:81:7a:d7:98:8a:7b:9b:8d:4b:e3:80:14:8c:d4:
                    53:d0:cf:e1:20:31:38:52:1d:d4:86:0d:b9:7f:a5:
                    66:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:43:23:87:3C:89:78:30:95:BD:1F:B3:B6:44:EB:85:21:32:5D:3B
            X509v3 Authority Key Identifier:
                keyid:30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/3136382e3139352e34392e302f32342d3234203d3e20323635343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:2c:86:b6:ad:b3:e4:aa:58:3b:0d:72:1d:47:b7:ef:37:df:
         d3:7c:e6:4d:81:63:30:55:0b:c4:72:2a:c1:98:75:53:11:f0:
         74:88:c8:71:ed:f3:3b:60:af:e6:1d:71:01:84:00:7f:54:57:
         78:48:47:ef:68:d8:f2:4d:59:78:29:df:10:ba:13:74:33:47:
         46:71:11:66:58:e4:a6:41:4b:0a:51:5c:d6:fd:da:b8:2c:a6:
         44:ed:ba:34:a9:b8:1d:54:24:58:1b:f8:e8:65:95:dd:79:5f:
         49:9a:9c:2e:02:64:f7:93:80:87:db:44:99:ab:16:1c:d3:d5:
         e6:7a:43:e3:5a:75:f4:78:30:0d:23:f0:7d:8c:19:db:4e:df:
         0c:51:bc:e8:23:3e:4b:7f:f4:27:dc:bc:28:c9:d1:b0:b1:15:
         ca:ad:c7:14:6e:2a:7f:b9:75:f1:40:17:b5:71:1d:f3:7e:35:
         2b:ae:d5:9c:01:a6:03:86:77:10:89:22:16:26:6a:b8:fe:4a:
         83:f5:a8:32:20:df:2d:e0:ae:49:c0:fe:0e:c9:2e:28:ad:31:
         93:ae:3a:67:7e:1a:53:d3:b2:be:f0:32:53:49:c7:cc:eb:a2:
         d4:f4:be:67:ba:80:27:a5:6b:c4:34:54:a5:74:32:fc:2c:6c:
         93:e7:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org