Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/3136382e3233322e34342e302f32332d3233203d3e20323634393439.roa
File:                     3136382e3233322e34342e302f32332d3233203d3e20323634393439.roa (raw, json)
Hash identifier:          hZDz84RGojmENqvsgPnC53TIBsHEnzx0N7qiIrqgfh0=
Subject key identifier:   52:B3:73:1D:66:5C:AB:11:20:0A:D8:70:F7:D5:C6:5A:2E:D8:8C:32
Certificate issuer:       /CN=C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C
Certificate serial:       2F637730C440B6CA5567671495C076AB0D8220BA
Authority key identifier: C3:F4:7A:79:26:CF:51:0B:81:6F:1C:82:F5:EB:FD:F7:39:DE:FC:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/3136382e3233322e34342e302f32332d3233203d3e20323634393439.roa
Signing time:             Sat 16 Mar 2024 13:32:46 +0000
ROA not before:           Sat 16 Mar 2024 13:27:46 +0000
ROA not after:            Sat 15 Mar 2025 13:32:46 +0000
asID:                     264949
IP address blocks:        168.232.44.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:63:77:30:c4:40:b6:ca:55:67:67:14:95:c0:76:ab:0d:82:20:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C
        Validity
            Not Before: Mar 16 13:27:46 2024 GMT
            Not After : Mar 15 13:32:46 2025 GMT
        Subject: CN=52B3731D665CAB11200AD870F7D5C65A2ED88C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:4c:30:46:ba:02:47:b9:c3:9c:a6:df:0f:
                    da:3a:44:14:49:96:20:8b:bb:ac:68:9f:54:58:e2:
                    cf:d1:21:9f:46:a3:d8:54:63:13:0f:65:11:1b:93:
                    a0:98:9a:91:0a:e9:48:6d:03:4b:bd:47:ee:8f:41:
                    7b:fb:6e:00:d1:d9:86:e6:4a:a5:8e:cb:57:32:4b:
                    6f:70:97:58:a3:0c:72:80:82:8e:f4:2d:7a:6b:b1:
                    bf:ee:e9:b3:c8:6a:2c:c5:24:05:63:41:c4:0d:27:
                    63:98:49:d2:ac:5d:4b:55:71:c4:bd:2c:ca:1e:66:
                    ff:f9:97:cd:e0:00:8b:d3:29:ca:7f:ec:bd:c3:6e:
                    b9:93:f1:a7:ad:16:ae:3d:01:e8:c4:a7:8a:0e:86:
                    6f:1f:9f:a1:dc:d1:e6:ef:0a:9d:f4:cd:8d:a4:71:
                    45:74:80:3d:ad:eb:d1:a2:d6:e6:25:7c:09:58:bb:
                    e7:2e:94:e5:59:05:15:5f:72:67:a6:2a:ec:9c:5a:
                    42:77:2d:56:32:69:70:e9:ff:99:20:84:14:b3:fd:
                    32:df:da:bb:56:3d:de:2b:54:1f:2e:3d:55:b1:be:
                    cc:aa:d6:4b:63:45:aa:ff:8c:c8:a9:ac:ed:57:03:
                    8a:bb:16:95:ed:8b:35:4f:9c:ba:cc:67:c3:d0:4a:
                    0e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B3:73:1D:66:5C:AB:11:20:0A:D8:70:F7:D5:C6:5A:2E:D8:8C:32
            X509v3 Authority Key Identifier:
                keyid:C3:F4:7A:79:26:CF:51:0B:81:6F:1C:82:F5:EB:FD:F7:39:DE:FC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/3136382e3233322e34342e302f32332d3233203d3e20323634393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:e3:87:1e:84:5a:10:aa:fd:db:53:84:f3:be:db:39:40:a1:
         73:a0:fa:4a:fa:e3:bb:af:0d:68:52:a6:d8:1c:82:d8:82:18:
         2d:e8:dc:9e:54:fd:2b:ed:c8:fb:99:95:80:d0:2f:dd:aa:f1:
         0a:3b:fa:f4:18:9d:72:67:6d:2e:63:89:36:de:a7:65:64:02:
         f4:d6:68:1b:80:13:54:00:89:d7:fd:62:c0:49:e8:57:08:c2:
         a4:94:9a:d6:e4:60:1d:25:c2:95:68:4d:fb:48:b4:6c:99:52:
         c5:19:b5:97:ff:16:f6:e9:80:02:0b:72:94:15:b6:dd:01:fc:
         1e:50:81:1d:a6:37:93:92:74:90:ae:99:f1:d1:d1:ab:17:7a:
         85:f3:00:46:28:fd:92:0d:a1:74:5d:6f:23:68:54:63:e8:2e:
         8c:a2:08:1b:1e:c4:d3:96:9a:24:8a:81:2d:77:95:4a:ab:ae:
         f5:3e:43:62:b5:b1:55:5f:45:7c:15:d5:7d:22:34:23:8e:b2:
         da:12:72:94:32:35:4f:75:ee:66:c8:a3:39:6d:1e:21:bf:57:
         c8:30:79:da:2b:42:76:09:c3:21:7b:e0:66:41:57:e3:f0:3b:
         97:f4:cc:82:bb:cc:f8:c9:08:c9:dd:66:d3:00:79:50:ea:b8:
         36:c3:d9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org