Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131382e302f32332d3233203d3e20323634393130.roa
File:                     3136382e3232372e3131382e302f32332d3233203d3e20323634393130.roa (raw, json)
Hash identifier:          zqq02O2A3UEKCKuM/n6pA2XHLiZHWAW/996UdrMWSEQ=
Subject key identifier:   54:A9:E6:F9:F8:04:5D:3E:E0:1D:D9:32:50:8E:92:AA:57:A6:26:EA
Certificate issuer:       /CN=100D641D9246825DB5F200B9152379E6B866AE90
Certificate serial:       755DB9DC2FB2601D2B08A60CC6E1D627BEAC9FC9
Authority key identifier: 10:0D:64:1D:92:46:82:5D:B5:F2:00:B9:15:23:79:E6:B8:66:AE:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100D641D9246825DB5F200B9152379E6B866AE90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131382e302f32332d3233203d3e20323634393130.roa
Signing time:             Sat 13 May 2023 19:19:24 +0000
ROA not before:           Sat 13 May 2023 19:14:24 +0000
ROA not after:            Sat 11 May 2024 19:19:24 +0000
asID:                     264910
IP address blocks:        168.227.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5d:b9:dc:2f:b2:60:1d:2b:08:a6:0c:c6:e1:d6:27:be:ac:9f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100D641D9246825DB5F200B9152379E6B866AE90
        Validity
            Not Before: May 13 19:14:24 2023 GMT
            Not After : May 11 19:19:24 2024 GMT
        Subject: CN=54A9E6F9F8045D3EE01DD932508E92AA57A626EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:99:98:1e:ef:9b:70:39:a3:67:84:ee:6f:
                    88:83:37:d6:68:38:be:b0:5f:09:0a:e3:72:80:00:
                    f3:7d:58:82:50:f1:2e:c6:6a:ce:78:12:fb:20:f8:
                    b9:99:9d:8f:90:be:9b:1c:70:ae:79:11:a5:ea:11:
                    fb:d0:da:23:b5:14:ad:3f:6c:b8:67:15:70:87:3c:
                    2b:17:e2:43:2c:ee:88:f1:bd:14:c6:a2:95:1d:8c:
                    cf:80:e4:db:4c:11:c2:e6:75:68:f1:1f:02:a2:51:
                    16:6e:a3:b0:3e:a6:ca:36:0a:ab:ed:09:82:ef:88:
                    50:27:a8:f0:f8:89:46:9f:3f:e5:6e:b3:14:82:b0:
                    f6:d0:f5:8e:69:16:f2:7d:60:53:04:6f:03:53:48:
                    24:d1:8e:d4:86:12:2d:77:de:92:7d:56:06:98:de:
                    96:fb:6c:8a:ea:6f:76:5b:ff:dd:15:10:ba:e7:56:
                    d1:00:63:4b:58:91:2f:b7:dd:8c:cf:a5:c5:e8:90:
                    23:5b:53:30:b5:0f:a0:45:b3:7a:f8:a5:af:13:61:
                    9f:40:b4:96:0f:74:ea:71:e9:98:d1:b2:83:e3:9b:
                    9e:55:fc:02:44:95:26:3f:0b:41:8f:c5:6d:3d:56:
                    2a:04:b3:9c:5f:74:c1:aa:b8:1b:0b:ef:b6:85:28:
                    dc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A9:E6:F9:F8:04:5D:3E:E0:1D:D9:32:50:8E:92:AA:57:A6:26:EA
            X509v3 Authority Key Identifier:
                keyid:10:0D:64:1D:92:46:82:5D:B5:F2:00:B9:15:23:79:E6:B8:66:AE:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/100D641D9246825DB5F200B9152379E6B866AE90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100D641D9246825DB5F200B9152379E6B866AE90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131382e302f32332d3233203d3e20323634393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:52:96:37:7a:16:77:d3:a2:e1:44:c4:f9:9a:e3:74:f3:ac:
         8b:34:b9:ab:27:9a:39:43:37:ce:ba:2b:d2:24:f2:b7:9c:da:
         6e:0c:0a:7c:42:3b:9b:0d:cf:b1:77:c7:1d:7b:b1:19:94:2e:
         f7:d2:fb:06:ca:94:83:99:e4:b7:50:ee:7a:30:06:fe:1c:79:
         f2:7b:01:46:9a:dd:54:02:a6:57:3f:2a:fd:af:67:97:79:66:
         00:71:ce:5b:12:94:55:ab:e5:b9:f4:44:3b:6b:e9:ea:81:56:
         7c:d2:7d:2a:f2:29:96:31:f1:02:2f:29:a4:37:63:39:a1:ca:
         02:a4:4b:9a:9b:2c:a0:a4:20:7d:d8:ea:d1:c3:c7:27:5f:1c:
         9c:06:55:66:92:d7:92:76:e3:f7:a0:6b:8b:10:48:09:f0:8f:
         f2:2c:86:da:8a:3f:c6:db:04:56:94:92:d5:45:11:7c:65:0e:
         d7:48:a0:df:95:2c:b2:07:46:ec:5a:4e:e3:a7:00:e1:d7:59:
         f8:35:f7:f6:c6:fd:64:f4:6a:5b:e5:77:be:70:f0:08:b9:9d:
         8e:f8:e2:43:d7:22:1b:fb:da:a7:64:93:79:00:b2:75:c7:30:
         ca:d3:32:97:b2:2a:9d:e9:e7:47:e5:8c:06:49:07:c9:7c:a6:
         d6:15:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org