Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/3136382e3139342e3235302e302f32342d3234203d3e20323635343134.roa
File:                     3136382e3139342e3235302e302f32342d3234203d3e20323635343134.roa (raw, json)
Hash identifier:          +Up4lqM7QTdV8l7lhHJSeWbuMg0v9k5rKa/gQ9OC5UU=
Subject key identifier:   2D:1B:3B:BA:B4:40:13:76:7D:96:18:0B:76:58:B2:4D:1E:BC:36:B7
Certificate issuer:       /CN=C559E73AC49546C7651D4CF85CAD64308E9041D4
Certificate serial:       38681B2AC3F0F16E36771A21374249EF99092DA3
Authority key identifier: C5:59:E7:3A:C4:95:46:C7:65:1D:4C:F8:5C:AD:64:30:8E:90:41:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C559E73AC49546C7651D4CF85CAD64308E9041D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/3136382e3139342e3235302e302f32342d3234203d3e20323635343134.roa
Signing time:             Fri 05 May 2023 18:04:44 +0000
ROA not before:           Fri 05 May 2023 17:59:44 +0000
ROA not after:            Fri 03 May 2024 18:04:44 +0000
asID:                     265414
IP address blocks:        168.194.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:68:1b:2a:c3:f0:f1:6e:36:77:1a:21:37:42:49:ef:99:09:2d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C559E73AC49546C7651D4CF85CAD64308E9041D4
        Validity
            Not Before: May  5 17:59:44 2023 GMT
            Not After : May  3 18:04:44 2024 GMT
        Subject: CN=2D1B3BBAB44013767D96180B7658B24D1EBC36B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:1c:31:a4:38:eb:2e:68:1d:1e:96:e4:f9:
                    2b:9f:f0:c9:38:c6:50:11:7d:33:f6:96:f4:24:56:
                    b5:1d:60:00:31:27:cc:be:fb:d5:1b:3f:d4:50:a5:
                    1b:1b:67:17:6c:01:6b:e1:91:c6:7e:ed:55:71:ad:
                    f5:77:3b:d3:09:c8:a8:46:58:fa:e5:b5:55:07:c6:
                    dc:b7:9b:3f:95:f7:16:18:22:43:36:47:40:a7:71:
                    a0:c3:af:af:89:6f:67:ca:43:ea:ee:42:8c:df:bc:
                    9d:40:e3:bf:33:df:38:01:ad:d0:7c:e3:ae:0d:2f:
                    d6:18:a3:c1:dd:6e:86:23:4d:8b:2a:e6:da:e5:e4:
                    fb:ee:00:6b:38:70:57:9f:56:01:6b:a9:60:2d:2a:
                    32:1b:ec:8f:50:a3:6b:f4:0f:53:1c:8a:d3:d7:5a:
                    29:e7:37:26:49:e6:a8:40:95:b1:65:bd:b1:33:82:
                    41:e2:23:d8:12:7d:f5:4a:4e:28:3d:da:08:9e:c2:
                    5a:6b:55:12:f7:c2:8f:1d:3b:31:23:07:a2:59:98:
                    45:77:be:aa:82:09:18:f0:70:c4:63:2a:2e:b0:61:
                    2b:9b:70:4b:e4:e7:09:ec:e6:10:f3:4c:67:08:6d:
                    10:b8:e1:19:3f:12:ed:6f:27:8f:05:8d:11:83:b9:
                    45:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1B:3B:BA:B4:40:13:76:7D:96:18:0B:76:58:B2:4D:1E:BC:36:B7
            X509v3 Authority Key Identifier:
                keyid:C5:59:E7:3A:C4:95:46:C7:65:1D:4C:F8:5C:AD:64:30:8E:90:41:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/C559E73AC49546C7651D4CF85CAD64308E9041D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C559E73AC49546C7651D4CF85CAD64308E9041D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/3136382e3139342e3235302e302f32342d3234203d3e20323635343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:42:cd:13:3b:98:34:a9:c9:a9:41:4c:83:01:98:96:d6:64:
         b1:ef:72:23:b4:3a:8b:49:0f:60:fe:9f:74:b6:6f:83:1d:db:
         2e:91:0d:2b:f5:f1:3c:2b:06:75:c3:22:52:13:df:ee:10:4c:
         4a:cc:4b:27:05:54:3a:f4:9f:e0:30:bc:98:1c:c6:5b:01:14:
         c6:9c:39:70:10:07:1a:bd:d1:3c:4d:2f:ae:06:28:2f:e1:18:
         f8:81:3f:e3:08:2c:3d:9e:5f:2f:34:b5:14:83:39:39:23:03:
         76:39:09:53:3c:16:4d:a2:a6:52:99:71:0f:76:ef:ee:fe:ab:
         f6:39:a0:0e:06:84:ae:8d:6b:9f:04:7e:02:32:43:dc:7b:82:
         18:c3:a8:09:1c:bb:12:f3:16:85:72:cd:1c:44:c6:dc:be:04:
         88:f1:de:c2:31:7f:8b:d0:ef:76:d0:c8:5d:03:2d:d0:51:dd:
         9f:01:94:0b:19:a4:1a:64:56:fa:6f:71:5d:7c:8e:75:e5:1a:
         a3:1e:70:6d:a3:68:23:a2:ca:18:41:d5:ed:a4:05:f0:74:ad:
         1a:48:65:60:ed:56:8f:e5:1f:0b:8f:8e:ca:de:35:4d:e2:aa:
         36:7c:33:d1:d5:76:da:5b:db:07:00:0d:9e:ca:57:8e:6e:2c:
         3c:c7:59:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org