Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135382e302f32342d3234203d3e203532373538.roa
File:                     3136382e3139372e3135382e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          8y0VqjD4S9doZNzpago6c1t2txX9+UUnb9dvz/eH39o=
Subject key identifier:   5A:36:66:81:EE:E6:C8:FA:34:BC:A6:B2:05:22:BB:F3:67:3B:0C:B1
Certificate issuer:       /CN=EF531ED7D14F0D5A9816244417F263E1E521376E
Certificate serial:       2EE129F95984BEDEF629A621A97C82D6CE15A842
Authority key identifier: EF:53:1E:D7:D1:4F:0D:5A:98:16:24:44:17:F2:63:E1:E5:21:37:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF531ED7D14F0D5A9816244417F263E1E521376E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135382e302f32342d3234203d3e203532373538.roa
Signing time:             Mon 07 Feb 2022 12:09:33 +0000
ROA not before:           Mon 07 Feb 2022 12:04:33 +0000
ROA not after:            Mon 06 Feb 2023 12:09:33 +0000
asID:                     52758
IP address blocks:        168.197.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e1:29:f9:59:84:be:de:f6:29:a6:21:a9:7c:82:d6:ce:15:a8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF531ED7D14F0D5A9816244417F263E1E521376E
        Validity
            Not Before: Feb  7 12:04:33 2022 GMT
            Not After : Feb  6 12:09:33 2023 GMT
        Subject: CN=5A366681EEE6C8FA34BCA6B20522BBF3673B0CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:12:fc:61:a8:f4:83:11:bb:e6:74:13:41:
                    77:2c:16:07:18:b1:a9:f4:e1:97:f8:06:15:32:13:
                    b2:4b:35:ab:3e:27:ee:7f:74:db:f4:23:b3:90:55:
                    0a:29:a8:86:3a:00:53:a7:0f:56:d1:4e:5b:5a:5f:
                    3b:4d:87:35:9b:85:41:d0:8a:7d:3d:fc:25:90:62:
                    18:bc:14:25:8e:75:e5:1c:6e:a6:38:b5:14:0a:27:
                    42:40:f4:81:af:a7:e4:db:fe:d2:c1:97:f8:91:fa:
                    a2:99:f8:b1:31:e9:ab:97:ec:31:27:8f:49:56:31:
                    16:05:63:49:ce:34:e5:4a:4c:d4:28:9d:e0:2d:68:
                    34:7a:5b:2c:80:d8:79:e7:a9:a8:e2:e2:29:53:20:
                    ca:fd:54:8f:c0:d6:c3:0e:14:af:bc:ba:49:b6:ba:
                    52:20:f4:14:d9:93:fd:99:c5:61:0a:51:fd:7a:4f:
                    a2:a9:f1:c6:67:35:83:2f:03:c2:20:96:0d:14:82:
                    ac:f4:cd:f2:4e:e3:15:0a:99:cc:af:06:39:16:d0:
                    9d:85:53:26:03:8e:fd:16:80:9a:00:d7:9d:8a:ac:
                    72:b2:7f:65:c7:74:f7:d2:21:a5:96:16:38:04:1c:
                    ea:b2:df:e0:ee:ce:37:6e:44:45:e4:04:a4:be:c5:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:36:66:81:EE:E6:C8:FA:34:BC:A6:B2:05:22:BB:F3:67:3B:0C:B1
            X509v3 Authority Key Identifier:
                keyid:EF:53:1E:D7:D1:4F:0D:5A:98:16:24:44:17:F2:63:E1:E5:21:37:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/EF531ED7D14F0D5A9816244417F263E1E521376E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF531ED7D14F0D5A9816244417F263E1E521376E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135382e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:4f:f6:c2:f4:e3:a1:da:83:46:1e:63:b6:ac:74:97:94:36:
         51:84:9d:1e:b7:11:f7:0c:7c:ce:42:90:ad:06:ef:34:ea:c4:
         f7:39:55:3c:aa:03:5d:92:ea:5e:30:b2:e9:69:6e:2c:55:a3:
         31:38:5f:da:7b:0e:fe:d9:ab:c1:76:4d:7b:1f:24:b3:48:5d:
         79:0c:bd:f2:7d:02:08:43:1e:f4:b9:2e:c1:b6:cd:0c:d8:7b:
         25:c4:67:b1:2e:0d:53:f8:c2:85:b1:11:6e:0e:a0:cb:aa:99:
         ce:98:d0:97:45:7a:25:06:24:ba:18:eb:0a:d0:67:5b:4f:95:
         7b:b5:3c:4e:bb:bf:85:88:15:0f:ac:93:78:78:91:5f:87:53:
         c8:a9:de:7b:26:f4:bf:c7:42:54:0e:b9:af:32:1c:3f:07:4d:
         55:fe:8c:a5:fb:7e:fc:61:76:23:91:69:1f:73:78:40:8f:7f:
         eb:33:e7:6b:a3:b2:65:2f:f0:3c:97:85:9e:82:e5:e3:eb:da:
         ec:8f:46:8d:5e:91:b1:47:7d:41:ce:02:54:fa:f3:5a:f8:3d:
         98:bd:d4:20:8a:00:e9:98:33:9d:8f:da:01:f8:cc:09:33:af:
         2a:e3:42:a6:c9:74:cb:94:99:2a:7f:d7:7b:f4:2d:51:74:29:
         db:00:af:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org