Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa
File:                     3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa (raw, json)
Hash identifier:          +oAjene/7xDK3E6GPLZ9dqmKGhgAeo1Z3qoNLOw5bHw=
Subject key identifier:   1D:41:E4:A4:92:23:96:CB:C0:CA:F1:BC:C6:B0:2A:3C:E5:19:4E:0E
Certificate issuer:       /CN=A7E6C8BB9EEC702E3D82D45353ED51420573CAD0
Certificate serial:       4BB510DBE9190D7E942A355E15EA9D34498511B0
Authority key identifier: A7:E6:C8:BB:9E:EC:70:2E:3D:82:D4:53:53:ED:51:42:05:73:CA:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7E6C8BB9EEC702E3D82D45353ED51420573CAD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa
Signing time:             Sun 15 Oct 2023 14:00:27 +0000
ROA not before:           Sun 15 Oct 2023 13:55:27 +0000
ROA not after:            Sun 13 Oct 2024 14:00:27 +0000
asID:                     265342
IP address blocks:        168.181.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b5:10:db:e9:19:0d:7e:94:2a:35:5e:15:ea:9d:34:49:85:11:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7E6C8BB9EEC702E3D82D45353ED51420573CAD0
        Validity
            Not Before: Oct 15 13:55:27 2023 GMT
            Not After : Oct 13 14:00:27 2024 GMT
        Subject: CN=1D41E4A4922396CBC0CAF1BCC6B02A3CE5194E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:fd:b1:d4:07:63:54:71:3f:77:ee:c3:c0:
                    ba:1b:51:89:44:7f:07:b6:60:68:0c:c2:9a:63:93:
                    48:27:db:de:12:c8:5e:94:6a:fd:f1:49:e3:48:24:
                    1c:c6:bc:23:07:51:22:1a:8f:b8:5f:c5:cc:bc:e0:
                    6f:e2:57:4b:61:1d:67:bd:cc:c5:ba:6f:02:0f:ad:
                    37:9d:36:5f:4f:44:5e:88:1d:18:35:f2:a1:e2:a9:
                    50:00:a0:3a:0e:82:08:a0:5f:67:6d:df:c0:6a:14:
                    6c:fa:cb:e6:73:ae:50:7c:1d:59:54:fc:46:ed:6a:
                    2f:8b:f0:cc:84:bd:ea:14:39:9a:88:66:f3:8a:03:
                    aa:ac:ba:d9:5b:45:6b:f0:9b:fa:2d:dd:a3:23:eb:
                    7d:92:ee:7e:40:74:bb:45:20:86:e4:b8:d1:13:06:
                    69:b2:9c:73:52:0b:00:51:e3:e3:64:ef:5c:44:96:
                    01:be:f6:50:9c:7e:75:9e:62:7f:10:dd:b9:71:e8:
                    6c:2e:bb:97:c8:6d:52:d7:26:cd:37:90:ae:40:98:
                    fe:4c:08:cc:8f:68:67:8a:bc:a5:c4:14:7c:ee:50:
                    de:cf:c4:60:b5:15:44:3e:c8:52:42:86:45:76:fe:
                    8c:56:2a:a8:09:ef:f4:74:28:fc:db:ab:49:4e:a8:
                    52:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:41:E4:A4:92:23:96:CB:C0:CA:F1:BC:C6:B0:2A:3C:E5:19:4E:0E
            X509v3 Authority Key Identifier:
                keyid:A7:E6:C8:BB:9E:EC:70:2E:3D:82:D4:53:53:ED:51:42:05:73:CA:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/A7E6C8BB9EEC702E3D82D45353ED51420573CAD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7E6C8BB9EEC702E3D82D45353ED51420573CAD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:e4:ab:ee:b0:68:3d:b8:f6:bc:b5:b7:ab:07:a8:80:f1:34:
         fb:89:fd:f7:5d:bb:53:e9:cf:94:8c:36:d8:1a:76:5f:b9:ca:
         04:b4:48:40:03:f1:9a:a1:b1:48:03:e6:8c:4d:44:04:ed:5c:
         47:26:6d:7a:ee:d9:62:e3:26:28:ee:b9:89:5c:ec:f9:ee:91:
         e4:8d:9a:b6:0b:0c:a3:d1:e4:2e:15:d5:41:fd:9e:71:85:9f:
         95:13:80:62:73:8b:65:2b:f6:ee:63:d2:44:f2:50:db:89:57:
         3b:1a:fe:8c:bf:37:3a:52:ab:35:7b:89:1b:f9:0c:a0:f4:bd:
         c3:6b:4f:6c:61:b1:91:5a:af:85:7f:5c:da:fd:a1:ff:5b:25:
         b4:f7:f8:74:74:79:16:69:25:0d:01:d8:a6:bf:79:48:83:61:
         d3:55:ef:f4:d6:2e:63:f1:b2:2d:b7:e2:f6:db:d3:db:c0:68:
         ae:42:c9:8f:f7:a1:e8:80:f0:e9:0a:ac:d9:dc:f1:1f:8d:d8:
         7b:73:b7:6d:02:e1:35:4a:92:b4:2a:cf:85:92:68:b4:50:f4:
         97:55:54:8c:67:2b:76:bc:dd:ed:d8:45:bc:b4:2f:97:18:a0:
         e8:a9:12:96:c4:bb:dd:71:c5:20:5d:4c:9a:d5:ce:65:98:fb:
         76:be:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org