Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135382e302f32342d3234203d3e20323635323536.roa
File:                     3136382e302e3135382e302f32342d3234203d3e20323635323536.roa (raw, json)
Hash identifier:          lsWDqijaLsd7to5zMlgIF4kRUjTf1MtVyt/+rSF3Ev8=
Subject key identifier:   BA:85:59:BC:3F:EA:96:2F:35:79:26:8D:7D:81:00:71:31:FC:63:82
Certificate issuer:       /CN=1F166217636B68045F1807E9A853E6AFB151CB62
Certificate serial:       4A2DFB0756E71691E19B5145F80F80E96A693AE4
Authority key identifier: 1F:16:62:17:63:6B:68:04:5F:18:07:E9:A8:53:E6:AF:B1:51:CB:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F166217636B68045F1807E9A853E6AFB151CB62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135382e302f32342d3234203d3e20323635323536.roa
Signing time:             Thu 04 May 2023 03:23:09 +0000
ROA not before:           Thu 04 May 2023 03:18:09 +0000
ROA not after:            Thu 02 May 2024 03:23:09 +0000
asID:                     265256
IP address blocks:        168.0.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2d:fb:07:56:e7:16:91:e1:9b:51:45:f8:0f:80:e9:6a:69:3a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F166217636B68045F1807E9A853E6AFB151CB62
        Validity
            Not Before: May  4 03:18:09 2023 GMT
            Not After : May  2 03:23:09 2024 GMT
        Subject: CN=BA8559BC3FEA962F3579268D7D81007131FC6382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:e3:9a:5e:6b:dc:d4:ec:fa:85:fc:0f:de:
                    52:65:00:86:f8:56:39:61:f3:3a:b4:92:bf:7d:20:
                    08:e5:c2:4b:11:53:4f:37:9c:ce:05:9c:d9:a6:5b:
                    3a:41:8d:ce:5e:c0:58:c7:36:04:82:9d:58:5a:b5:
                    bc:bd:d7:19:4a:6a:b6:b9:aa:8f:32:4d:d8:9b:4a:
                    c5:4d:3b:36:a1:c0:60:be:a1:e3:5e:ea:86:4f:35:
                    1d:37:a0:28:19:f7:04:96:75:9b:34:42:fe:d4:6f:
                    56:80:c0:e5:4f:36:86:6c:e9:f4:da:21:a8:b4:1a:
                    19:a1:bc:9f:f6:85:ba:9e:ec:69:64:93:19:73:30:
                    15:3d:0e:15:f0:17:2d:0c:26:3e:4d:39:3a:8b:fd:
                    c6:63:be:27:80:52:2d:57:61:f4:94:9d:a7:61:dd:
                    ba:6d:e0:fa:7c:7e:3d:36:27:00:a7:46:8f:a7:cd:
                    fa:d4:33:8d:6a:0e:f2:0f:49:ed:8a:0f:aa:c6:83:
                    51:81:82:01:3d:0d:72:04:f6:ec:ae:02:b1:66:80:
                    c2:f2:5c:54:1e:1d:27:2e:e7:fd:78:ff:80:8c:5a:
                    6a:11:e3:70:74:11:45:b9:2c:03:37:43:95:55:5d:
                    0d:b5:d4:38:2c:3a:40:39:8c:be:c4:f0:63:b0:42:
                    8e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:85:59:BC:3F:EA:96:2F:35:79:26:8D:7D:81:00:71:31:FC:63:82
            X509v3 Authority Key Identifier:
                keyid:1F:16:62:17:63:6B:68:04:5F:18:07:E9:A8:53:E6:AF:B1:51:CB:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/1F166217636B68045F1807E9A853E6AFB151CB62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F166217636B68045F1807E9A853E6AFB151CB62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135382e302f32342d3234203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:ad:c8:3d:f2:c4:a3:f4:8f:15:38:e5:cf:8d:4d:10:fd:f3:
         97:86:84:65:6f:3b:ae:cc:f1:4e:e6:90:45:4a:6f:de:c6:e9:
         fc:40:d4:9e:58:64:83:8f:ea:31:d1:e6:4d:ce:f0:94:a4:52:
         24:bd:65:67:68:0a:38:8b:91:2a:fe:db:c8:8e:b0:ff:08:14:
         9c:37:5c:4d:be:f0:f1:d7:c6:9f:42:50:d2:24:3c:97:b0:d2:
         bc:e5:08:6b:f9:31:1d:d0:b3:96:cb:ac:bc:42:a6:a3:18:ca:
         6e:36:8d:9f:1b:a2:36:3d:86:b7:31:86:45:91:ba:d6:38:41:
         85:03:25:a4:bd:aa:b1:62:8f:7e:65:02:4c:2c:75:19:0f:c4:
         35:69:b8:17:e4:c1:af:75:4d:cb:4b:a3:f5:31:77:a9:11:98:
         87:06:82:81:48:94:71:cb:e4:33:3a:f0:7c:70:fc:a8:c2:8b:
         5b:e5:df:81:44:97:90:03:f5:47:d8:a1:b1:38:47:64:d9:80:
         42:4c:38:06:6f:ff:23:c6:76:bb:0d:fe:a0:65:97:05:1b:20:
         a1:01:cb:25:67:bd:5d:e7:8b:c6:73:dd:18:20:99:41:37:d4:
         d3:1a:a1:cc:3d:c9:aa:d9:8e:f6:6d:2d:9b:6c:10:7b:c7:ea:
         a1:b9:73:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org