Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa
File:                     3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa (raw, json)
Hash identifier:          5Ji/99AUG5IPbdoj2EQLoS233gzkrv+yOoQnHjzWBe0=
Subject key identifier:   C8:FD:01:5C:0E:D0:3A:88:BE:5B:97:F0:AC:FB:6B:BE:68:60:A4:0F
Certificate issuer:       /CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
Certificate serial:       33E7FA851449A9E7B4348119269277B518C8F5CE
Authority key identifier: AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa
Signing time:             Tue 12 Sep 2023 18:45:21 +0000
ROA not before:           Tue 12 Sep 2023 18:40:21 +0000
ROA not after:            Tue 10 Sep 2024 18:45:21 +0000
asID:                     265425
IP address blocks:        168.195.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e7:fa:85:14:49:a9:e7:b4:34:81:19:26:92:77:b5:18:c8:f5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
        Validity
            Not Before: Sep 12 18:40:21 2023 GMT
            Not After : Sep 10 18:45:21 2024 GMT
        Subject: CN=C8FD015C0ED03A88BE5B97F0ACFB6BBE6860A40F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:a4:ce:03:da:fb:e8:25:a9:13:da:c5:5d:
                    b7:69:ff:a8:20:b1:c5:35:93:6c:97:2a:5b:be:f2:
                    6e:59:16:d2:9e:29:0c:ea:0a:01:dd:a6:f6:f9:a9:
                    95:29:f2:54:cf:e4:05:c3:52:37:82:3d:bd:ad:1d:
                    22:ab:c5:fd:66:d9:1c:f1:11:6c:a1:13:fc:c4:ee:
                    ee:b4:2e:af:dc:80:43:cf:2e:6d:5b:3b:b7:da:7a:
                    ee:60:33:b0:0b:a9:67:91:7c:27:69:c8:9f:2c:a9:
                    c9:40:ab:79:cb:ad:34:91:91:8a:97:9d:d3:1e:d0:
                    bc:73:01:ec:45:fa:78:9a:be:2b:ae:11:0f:c2:b7:
                    97:49:4f:bb:b2:79:7d:6d:44:a9:d4:1d:08:cc:dc:
                    07:0e:ed:d8:9b:96:d6:7f:d6:c8:f8:da:92:85:df:
                    d5:58:f6:d5:4c:c1:24:2a:48:71:d2:9a:34:82:cc:
                    c2:19:eb:82:83:29:85:dd:2a:7a:6f:1a:a0:16:85:
                    cf:c8:bb:53:86:de:f8:0a:47:b6:76:bc:b3:2b:a7:
                    8d:dc:ef:79:e0:15:5a:92:fe:bb:96:29:d4:68:00:
                    62:42:c7:20:34:ce:57:66:b2:66:19:70:a6:a1:cd:
                    19:76:5c:57:f7:28:65:2b:b0:b7:3c:0a:e9:34:81:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FD:01:5C:0E:D0:3A:88:BE:5B:97:F0:AC:FB:6B:BE:68:60:A4:0F
            X509v3 Authority Key Identifier:
                keyid:AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:72:ff:82:e4:7d:00:43:1b:d6:38:52:d9:71:81:6e:c6:b9:
         7f:c9:a5:08:13:a2:ac:c1:23:27:8f:0f:e0:36:7a:c4:91:41:
         25:fd:52:f8:85:08:48:88:a0:7f:0f:11:3f:20:94:17:05:82:
         0b:03:ff:94:fb:6a:dd:99:62:c2:ae:83:61:d6:55:c6:fe:b7:
         52:4b:b9:d0:5b:19:22:1c:e9:04:c2:7e:6e:25:66:f1:3a:e4:
         9d:c9:7d:f6:d3:bb:aa:4a:7b:17:33:3e:ee:38:f3:50:a2:81:
         c0:ac:65:e0:60:86:8d:05:b7:f7:c0:93:b4:d6:68:ec:70:be:
         01:02:45:35:ed:02:11:b2:67:c7:67:73:d5:d2:44:9a:d8:45:
         2c:1a:8e:ca:4f:ab:74:d1:8e:83:b7:db:1d:5b:05:4f:89:f7:
         da:bf:7a:e0:aa:be:c0:e5:2c:81:bc:5f:84:d0:6c:f2:f7:2f:
         47:25:10:9e:32:95:e8:89:bc:f9:26:a3:0d:98:91:0f:c7:89:
         5a:59:4b:88:37:69:d8:93:ae:88:6a:28:5e:63:33:02:d0:a3:
         8a:fe:5f:de:c7:c6:f1:70:8d:1e:2b:49:2f:bb:94:1a:bb:29:
         87:81:7d:bf:26:d9:7b:b7:3b:4f:e4:d4:d7:54:d8:50:c3:74:
         b5:19:9b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org