Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135392e302f32342d3234203d3e203532373538.roa
File:                     3136382e3139372e3135392e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          +T8tzNbH6H+n1ZMCFvYL63sSaeGvqoo1Yo44HucNh+I=
Subject key identifier:   25:54:29:CB:ED:65:B3:2A:20:FE:CE:48:FD:20:CC:DA:AD:C0:8D:F1
Certificate issuer:       /CN=EF531ED7D14F0D5A9816244417F263E1E521376E
Certificate serial:       0E0244E034D3A64F9C3E232E4FD9B235562EDEA4
Authority key identifier: EF:53:1E:D7:D1:4F:0D:5A:98:16:24:44:17:F2:63:E1:E5:21:37:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF531ED7D14F0D5A9816244417F263E1E521376E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135392e302f32342d3234203d3e203532373538.roa
Signing time:             Mon 07 Feb 2022 12:09:34 +0000
ROA not before:           Mon 07 Feb 2022 12:04:34 +0000
ROA not after:            Mon 06 Feb 2023 12:09:34 +0000
asID:                     52758
IP address blocks:        168.197.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:02:44:e0:34:d3:a6:4f:9c:3e:23:2e:4f:d9:b2:35:56:2e:de:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF531ED7D14F0D5A9816244417F263E1E521376E
        Validity
            Not Before: Feb  7 12:04:34 2022 GMT
            Not After : Feb  6 12:09:34 2023 GMT
        Subject: CN=255429CBED65B32A20FECE48FD20CCDAADC08DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:36:b3:9d:28:40:5e:df:34:67:2a:9e:e7:
                    0a:af:c6:2a:9c:90:1d:ee:0a:7a:23:e1:13:af:18:
                    bf:58:f1:8c:2d:46:e1:b5:3d:5b:c4:86:58:d1:f2:
                    a6:8f:8a:b7:ec:60:66:4f:c8:70:77:d2:e1:01:d8:
                    92:a8:67:62:0f:d9:53:6f:16:fb:50:b2:5a:97:10:
                    43:d9:cf:0f:f9:42:7b:79:ac:d0:dd:a3:0a:c2:fb:
                    d2:1a:8b:b8:78:d5:b8:e5:7d:8c:57:1a:91:21:7a:
                    c0:b6:9f:fb:b4:46:a8:19:3c:3a:ad:c0:8f:32:0c:
                    2f:e0:01:19:cb:df:b5:d4:9f:8b:aa:32:aa:f8:61:
                    e4:02:76:ae:e2:e3:21:80:b4:4c:dc:ae:0c:aa:a3:
                    0f:73:1c:19:6a:07:bf:fd:9d:cb:54:29:79:27:b9:
                    bd:88:ea:37:e2:51:9d:2d:f8:f6:54:aa:33:e2:65:
                    66:17:d2:7f:4f:6b:af:6e:64:c8:40:0f:5a:9c:9a:
                    11:b8:e5:92:f2:43:78:d5:2c:de:7e:9f:3c:9e:f2:
                    b8:cb:81:e5:8e:41:3e:13:03:1e:6f:78:bd:83:21:
                    cb:81:e6:45:eb:74:b3:be:0c:10:c8:66:1e:11:3e:
                    b6:22:ee:6b:5d:38:81:cd:36:76:58:55:1a:1f:9b:
                    4e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:54:29:CB:ED:65:B3:2A:20:FE:CE:48:FD:20:CC:DA:AD:C0:8D:F1
            X509v3 Authority Key Identifier:
                keyid:EF:53:1E:D7:D1:4F:0D:5A:98:16:24:44:17:F2:63:E1:E5:21:37:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/EF531ED7D14F0D5A9816244417F263E1E521376E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF531ED7D14F0D5A9816244417F263E1E521376E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135392e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:de:97:02:5a:86:fc:b1:51:26:23:22:ef:1b:8a:3c:ca:15:
         ab:08:63:cc:be:51:84:58:61:1e:9d:76:15:60:54:34:8e:c6:
         87:a3:e3:47:49:1d:4e:3f:99:8b:88:94:be:57:25:6f:21:a5:
         51:af:eb:c3:f3:8e:dc:c3:2b:04:76:91:2d:a0:9f:7c:c2:bd:
         a9:a7:86:f4:e5:c9:af:bc:05:c6:9a:9a:6c:44:05:13:b7:e3:
         9f:55:85:96:e1:69:c9:09:0a:36:85:89:d2:9f:ec:51:cc:a6:
         c6:55:2b:d5:1f:2c:26:64:a8:9b:66:a0:56:69:1a:86:be:d7:
         fb:b4:bf:64:19:47:12:c1:ca:f7:13:e9:be:7d:14:cb:48:f9:
         9f:de:b8:34:b1:26:d9:af:f4:14:cb:91:64:c1:a5:f6:31:72:
         a7:31:46:cc:ea:14:35:f9:96:e1:7f:37:9e:12:81:89:66:17:
         03:af:2d:d7:5f:81:98:ab:84:b3:42:68:f4:bf:4f:29:c5:a8:
         71:a6:14:99:c1:67:e2:26:04:55:0b:0a:96:99:07:58:9e:f3:
         93:9e:a2:53:25:cb:2d:70:35:d1:3d:25:56:75:8c:63:c7:fe:
         ce:bd:f5:ee:1b:4a:13:f5:cd:ee:84:ee:bd:6f:05:1f:98:f7:
         6a:9d:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org