Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          3R8L5TNp+SCl7u93SS4kjmpP6rKuT+sizoVC+YrIx3w=
Subject key identifier:   CD:21:C4:D5:2F:E9:71:80:20:5E:C8:98:83:58:A5:C8:74:57:B2:F7
Certificate issuer:       /CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
Certificate serial:       54D4FF938656D1EF59F0938E5682931CD5841913
Authority key identifier: AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa
Signing time:             Thu 18 Jan 2024 19:47:28 +0000
ROA not before:           Thu 18 Jan 2024 19:42:28 +0000
ROA not after:            Thu 16 Jan 2025 19:47:28 +0000
asID:                     265425
IP address blocks:        168.195.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d4:ff:93:86:56:d1:ef:59:f0:93:8e:56:82:93:1c:d5:84:19:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
        Validity
            Not Before: Jan 18 19:42:28 2024 GMT
            Not After : Jan 16 19:47:28 2025 GMT
        Subject: CN=CD21C4D52FE97180205EC8988358A5C87457B2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:ff:fb:9f:e8:6b:ff:61:b4:af:53:54:fb:
                    77:53:b9:89:36:6c:e3:bd:aa:d8:91:4e:ff:0d:26:
                    7f:04:7e:f7:c8:87:34:f2:2c:87:2c:5f:d0:fe:b3:
                    1c:04:e1:cb:80:00:52:b1:18:59:20:b1:86:a2:27:
                    2e:46:1a:08:11:77:a4:57:81:9c:b9:9a:68:ad:4e:
                    c6:74:f2:5f:ba:2d:a2:d9:d6:79:27:89:11:b3:8e:
                    1e:ff:cc:2f:21:b1:dc:3b:cc:c6:3e:a6:ac:22:5a:
                    09:5f:45:53:f9:a4:b2:00:80:45:7e:80:d0:92:d1:
                    7e:65:3f:87:5e:d5:c2:e9:3e:30:72:01:09:ce:b4:
                    b0:a6:87:b4:73:b4:ce:24:c0:67:27:09:51:63:a5:
                    3e:f5:8f:db:ef:f2:13:5c:67:fc:be:87:04:61:4d:
                    3a:ab:d3:e2:b6:27:5a:6b:2a:e0:5c:96:19:e3:e6:
                    e2:1e:c7:25:7b:ff:9f:8f:4b:33:78:57:bd:9c:36:
                    68:c2:72:46:3b:fb:f4:91:85:bb:9e:d2:75:ea:05:
                    9e:c1:95:52:d6:ed:b6:46:f3:85:d3:eb:49:ad:e0:
                    74:3d:ff:75:34:03:f9:8b:72:b0:7d:c3:28:7a:e4:
                    83:ff:b0:f3:52:d2:53:cd:f2:9f:67:95:ae:b2:95:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:21:C4:D5:2F:E9:71:80:20:5E:C8:98:83:58:A5:C8:74:57:B2:F7
            X509v3 Authority Key Identifier:
                keyid:AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:12:05:ee:d1:42:f8:9a:ed:61:94:66:17:a4:ac:cc:0b:d3:
         b2:f1:8e:00:bf:98:e3:e1:ee:a5:6d:b8:9b:c7:25:f8:56:61:
         62:9e:49:c6:d9:77:b7:4c:58:8e:36:c1:53:93:e4:d9:a5:b3:
         a4:ba:e2:3a:ec:55:6e:00:5c:d3:13:cc:5e:1d:4c:86:7c:60:
         64:23:4e:f4:b2:d5:cd:ee:bf:8e:4b:e3:f2:27:35:2b:b4:8e:
         9a:b2:95:80:66:1d:32:55:12:e9:90:3f:17:12:15:f4:80:67:
         cb:ed:2d:41:75:b1:41:5d:c4:87:37:d9:bb:82:63:e9:c0:88:
         e6:2e:53:c0:6f:87:31:1e:89:99:27:5d:a3:51:6b:66:74:41:
         48:63:0f:4b:9b:ff:37:58:f9:f2:1a:64:dc:0d:a7:c4:f7:27:
         46:32:3e:40:20:90:e5:9f:f1:9e:77:d4:e7:d3:b9:12:11:db:
         3b:70:05:dd:a0:2d:cf:7a:59:58:d2:81:62:c6:61:f0:48:9d:
         05:90:22:bd:f5:d1:04:72:cf:db:9a:46:ef:45:bb:4c:a2:af:
         fa:e7:76:36:de:0a:7f:32:9c:00:a2:3e:df:ef:89:1b:3d:7a:
         4b:74:4a:f9:96:63:11:57:e7:a4:65:26:e7:fc:c5:a1:a4:18:
         6d:26:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org