Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/1/3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa
File:                     3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa (raw, json)
Hash identifier:          q3G7O5iQyCcKFZwb60JjCqNkRD6Cu8Efhbu04plCObs=
Subject key identifier:   22:4E:6F:B0:B2:55:9A:AB:62:F9:76:7F:FF:E6:7C:71:DB:D9:CF:04
Certificate issuer:       /CN=D9DA58E367C167988628580236AB41A8EC547986
Certificate serial:       458F37246F5834447EA782B7B1417D2447D358E5
Authority key identifier: D9:DA:58:E3:67:C1:67:98:86:28:58:02:36:AB:41:A8:EC:54:79:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9DA58E367C167988628580236AB41A8EC547986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/1/3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa
Signing time:             Wed 06 Sep 2023 15:09:28 +0000
ROA not before:           Wed 06 Sep 2023 15:04:28 +0000
ROA not after:            Wed 04 Sep 2024 15:09:28 +0000
asID:                     265342
IP address blocks:        168.181.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8f:37:24:6f:58:34:44:7e:a7:82:b7:b1:41:7d:24:47:d3:58:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9DA58E367C167988628580236AB41A8EC547986
        Validity
            Not Before: Sep  6 15:04:28 2023 GMT
            Not After : Sep  4 15:09:28 2024 GMT
        Subject: CN=224E6FB0B2559AAB62F9767FFFE67C71DBD9CF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:82:48:fd:3a:98:28:ac:f3:09:40:28:61:
                    a2:b4:ed:81:2d:c1:2a:2e:4d:5b:d2:e2:f3:40:8c:
                    35:0c:f3:95:e5:67:3e:54:a6:d3:a5:2b:85:e6:43:
                    94:84:7f:6a:79:78:0c:1d:78:8b:37:fe:25:2b:54:
                    fa:fb:07:5b:77:02:1d:eb:c9:5a:92:e4:6e:2c:54:
                    f9:38:73:14:10:89:88:5f:6f:76:20:51:f4:4d:e8:
                    fe:85:45:ba:51:af:9c:bc:e6:50:b4:3b:1a:86:4f:
                    3e:95:9d:41:7f:12:38:8d:b4:80:c9:81:aa:c1:d3:
                    99:2c:21:c3:69:17:8a:e8:3c:81:65:28:07:35:50:
                    ab:a4:55:d4:68:36:c3:13:3a:a8:dc:03:39:71:f8:
                    43:07:3c:fc:4f:de:8d:de:65:03:63:4f:da:f6:2a:
                    48:66:e2:1e:bd:c4:12:fb:a0:76:13:27:d6:a0:13:
                    12:ca:9d:62:1b:7b:83:39:32:70:1c:61:a5:82:ae:
                    7a:07:98:1a:bf:5a:63:6a:6c:07:0d:40:6a:54:a1:
                    f5:51:d0:97:d0:60:94:23:ef:4f:4d:ff:32:1a:76:
                    6c:73:c3:8b:fe:0b:8a:68:fa:e0:3b:5d:94:d2:ed:
                    d7:a7:55:4c:2a:7e:40:ce:0f:ca:4f:33:ff:ee:ea:
                    38:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4E:6F:B0:B2:55:9A:AB:62:F9:76:7F:FF:E6:7C:71:DB:D9:CF:04
            X509v3 Authority Key Identifier:
                keyid:D9:DA:58:E3:67:C1:67:98:86:28:58:02:36:AB:41:A8:EC:54:79:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/1/D9DA58E367C167988628580236AB41A8EC547986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9DA58E367C167988628580236AB41A8EC547986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/1/3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:e2:2d:20:9a:2c:08:bb:f1:f3:6a:b0:87:7d:ec:64:3c:08:
         15:ab:80:e5:be:20:c9:28:00:77:87:94:9d:b8:6c:28:1a:fc:
         98:55:9c:a6:a0:9c:3c:3b:66:76:c6:2a:3b:3a:ae:a6:80:42:
         66:25:25:46:b3:08:a3:60:48:7a:6d:66:3d:da:98:05:d2:f0:
         a0:4f:44:e5:ec:92:66:d5:73:ef:8f:4e:c2:f5:43:80:0e:75:
         fa:f9:93:3e:dd:36:56:35:c2:08:91:77:ff:5a:d5:13:a5:75:
         f2:01:a7:b8:37:df:56:83:7c:5d:2a:1a:ec:d3:87:33:9c:6d:
         8f:b1:19:40:30:7f:c9:f6:a3:38:d2:38:9d:9e:6a:da:1e:89:
         72:3e:09:d1:e2:8d:cf:fd:18:cf:5a:58:88:b0:81:f3:60:1b:
         b0:b3:1a:f3:01:6f:81:f7:77:88:6e:b1:ac:de:bb:6c:1a:f2:
         52:c7:08:14:2b:76:89:91:45:80:c5:0b:62:d6:c1:09:95:c7:
         31:cd:10:3e:3e:80:e3:4d:ee:7a:96:63:35:5d:4e:5d:e9:b9:
         1c:3c:3d:ce:16:b3:05:31:00:85:30:5b:b3:4c:d3:79:37:37:
         6e:33:40:86:3b:5b:dd:0a:c9:b6:3f:4a:a1:f3:45:40:4d:6d:
         bb:1e:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org