Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          Dc6NdJcCnbVpJWTLxNHQyfDK8uOXq/aKlSbvk4t8xaA=
Subject key identifier:   47:16:01:C0:9C:52:B1:04:85:70:79:2F:7F:BB:5F:E5:E7:4C:5F:54
Certificate issuer:       /CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
Certificate serial:       543D1B946A11A89FBD2A40F6706720309C63B2EF
Authority key identifier: 9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa
Signing time:             Mon 04 Mar 2024 18:38:42 +0000
ROA not before:           Mon 04 Mar 2024 18:33:42 +0000
ROA not after:            Mon 03 Mar 2025 18:38:42 +0000
asID:                     264936
IP address blocks:        168.232.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3d:1b:94:6a:11:a8:9f:bd:2a:40:f6:70:67:20:30:9c:63:b2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Validity
            Not Before: Mar  4 18:33:42 2024 GMT
            Not After : Mar  3 18:38:42 2025 GMT
        Subject: CN=471601C09C52B1048570792F7FBB5FE5E74C5F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:00:02:4b:e4:80:55:bd:6d:b7:d4:bc:4d:
                    30:3b:b2:04:b6:d1:66:ee:61:2a:2a:7e:89:0c:53:
                    0f:7f:29:30:1d:f6:ce:28:f1:57:f7:19:e0:f7:af:
                    55:b9:02:84:93:8a:09:a1:70:bb:9b:59:13:2d:55:
                    bd:73:35:0d:b5:46:cf:44:68:b9:10:8f:91:8a:c5:
                    3a:48:34:83:45:36:4d:2d:06:e8:1b:e5:df:2d:0e:
                    89:d9:53:ae:a6:35:14:e8:f8:c3:94:47:29:42:dc:
                    ca:61:ed:c7:96:84:de:cb:0d:92:28:75:ba:09:5b:
                    0d:81:c5:96:fe:8e:bd:9e:e3:1a:f4:57:22:03:d8:
                    07:ee:cf:f5:a5:f9:49:83:52:56:29:8c:ba:f7:81:
                    bd:d2:37:b4:ac:57:b6:e6:8e:45:b0:9d:2b:bf:eb:
                    fc:e9:50:1b:5b:d3:f3:df:8d:c6:73:da:24:8e:dd:
                    24:3a:69:93:e8:18:9f:83:4f:d2:2f:dc:37:a9:96:
                    36:16:49:5b:c4:b4:cc:d2:42:83:07:55:c4:fc:1a:
                    99:00:8c:e7:05:a7:42:68:9d:c3:eb:06:e9:0e:1e:
                    88:03:07:a0:76:65:ac:4b:dc:56:17:d2:88:a2:e7:
                    00:62:7e:4a:9f:86:9f:01:a0:b0:e6:3f:e6:84:ab:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:16:01:C0:9C:52:B1:04:85:70:79:2F:7F:BB:5F:E5:E7:4C:5F:54
            X509v3 Authority Key Identifier:
                keyid:9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:ac:69:73:36:db:28:3e:46:ac:f2:57:45:87:de:e3:ea:3a:
         72:59:af:7e:e3:84:74:5e:33:b8:52:93:be:c1:17:34:89:d7:
         fe:0d:f7:3b:25:70:de:a3:7d:7b:98:63:f0:c5:d6:15:31:8c:
         07:f1:f2:78:2b:b5:4d:9a:3d:c4:de:ab:bc:6f:48:ad:d9:f6:
         33:c9:49:11:34:30:6d:57:d1:93:7f:2a:34:ea:fa:28:f4:fa:
         5d:f3:71:26:13:fa:8c:4b:60:d2:29:b6:4d:27:99:24:b4:d4:
         03:1e:0a:2a:c6:8e:c5:08:4b:b4:5c:e7:71:aa:95:cc:8d:74:
         27:81:89:df:9c:73:b2:e7:f3:3e:7c:ad:92:7c:b6:de:4f:aa:
         6b:78:ef:d7:b7:ed:6d:04:03:f2:8d:04:19:8a:3c:99:3a:00:
         58:57:4e:91:3c:8f:f9:dc:9b:87:85:d9:b1:b5:dc:e0:06:c5:
         61:59:43:3f:09:6b:2a:35:26:b4:57:8f:d0:2b:3a:a2:2b:20:
         73:9d:a1:73:74:55:38:4d:2a:ba:8c:7c:50:43:9f:c4:8a:37:
         52:ac:e9:80:09:73:1b:00:98:57:ff:5e:e4:07:55:b5:ea:26:
         2a:74:ae:8a:c9:a6:b1:f5:86:14:b6:ef:56:e3:b0:a6:23:0a:
         ec:b5:ae:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org