Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136382e3232372e37342e302f32342d3234203d3e20323632383638.roa
File:                     3136382e3232372e37342e302f32342d3234203d3e20323632383638.roa (raw, json)
Hash identifier:          8avk3gR52xN/i+/wCDZWhO/jW1FZHXyTphIpDxPj65A=
Subject key identifier:   B6:51:28:17:A0:F5:CC:8C:B0:2E:1C:58:73:57:00:46:B6:BE:A1:3C
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       625108FB9462C0F1E57CB51F7CA849D59722A221
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136382e3232372e37342e302f32342d3234203d3e20323632383638.roa
Signing time:             Mon 22 May 2023 13:31:11 +0000
ROA not before:           Mon 22 May 2023 13:26:11 +0000
ROA not after:            Mon 20 May 2024 13:31:11 +0000
asID:                     262868
IP address blocks:        168.227.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:51:08:fb:94:62:c0:f1:e5:7c:b5:1f:7c:a8:49:d5:97:22:a2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: May 22 13:26:11 2023 GMT
            Not After : May 20 13:31:11 2024 GMT
        Subject: CN=B6512817A0F5CC8CB02E1C5873570046B6BEA13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:de:cd:bd:00:9a:1c:57:ad:31:74:0a:c8:ed:
                    f2:36:bd:11:2b:89:de:29:da:b5:9b:f3:19:cd:49:
                    6f:f1:9f:ae:77:07:a8:e5:fa:3d:bb:ec:6f:cb:62:
                    fb:89:3b:1f:b7:ae:ef:2f:58:9e:a4:94:db:0c:43:
                    7d:ac:f5:d6:6f:ab:a9:60:4c:08:79:b1:89:9a:73:
                    a7:bb:c4:6b:71:82:3a:ae:31:07:83:fd:6b:4a:b9:
                    7c:1d:e5:31:26:c6:1b:5a:86:84:82:6c:b7:d5:27:
                    b9:4f:03:28:a5:87:d5:77:c4:5e:d2:79:9d:9f:ca:
                    a5:13:5e:17:bf:20:ea:58:04:23:20:71:9d:6e:18:
                    50:c7:5c:2c:c4:45:d7:ef:8d:90:90:3d:6a:c7:c3:
                    f8:19:5e:29:1d:e3:3b:30:1b:07:1b:cf:e9:d4:5d:
                    c5:db:33:11:a1:ba:e6:6c:a9:e9:5f:62:c7:23:30:
                    22:89:37:29:15:5f:69:e6:f6:51:2a:b7:44:1b:ac:
                    e0:84:8d:33:82:58:86:2e:d7:85:17:fb:c9:a1:53:
                    df:9f:70:c0:e0:d4:77:a7:fa:e7:b5:84:35:a0:22:
                    09:23:80:95:84:a8:9c:4d:5b:5c:4e:d7:d1:a9:76:
                    79:48:d2:7d:b0:06:37:1b:3b:32:db:58:04:70:73:
                    ef:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:51:28:17:A0:F5:CC:8C:B0:2E:1C:58:73:57:00:46:B6:BE:A1:3C
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136382e3232372e37342e302f32342d3234203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:dc:3a:06:ec:bc:4c:f4:fd:ac:2c:34:28:ea:e5:d8:74:20:
         ae:6d:7f:1c:24:e1:52:31:de:a8:ea:7e:9b:5f:1f:38:f8:06:
         2f:95:e1:67:a0:b6:b9:6e:3b:c1:66:fa:46:1d:15:ab:a5:ac:
         be:a5:3c:70:6f:74:d7:e5:97:91:28:4c:fb:e5:fc:5a:8d:40:
         53:d3:90:35:75:dc:e3:a6:6c:5e:bf:ef:d5:f8:c1:7a:a5:69:
         93:02:83:b2:e9:42:15:57:d9:39:65:c7:77:0e:59:fb:5b:0d:
         29:a8:73:9c:59:b6:6f:cc:b9:92:65:48:a9:15:11:4b:91:d2:
         c1:d6:ab:37:c4:b1:a0:f6:f6:75:72:c7:90:a9:a5:41:60:55:
         41:40:d6:34:b1:f6:fc:29:13:90:2d:84:48:84:43:af:31:ee:
         50:57:c5:30:d5:9f:89:65:a8:80:99:09:19:40:2d:28:96:20:
         f4:3a:04:b3:9e:f6:93:57:0e:b5:62:53:f3:2b:32:e9:23:83:
         22:e2:68:98:ea:49:13:29:04:2a:35:d7:3b:62:dd:b7:ac:5a:
         7e:24:dd:62:22:62:9e:13:b9:00:64:62:dd:18:b5:b2:79:13:
         ae:98:b2:da:0e:c8:a8:b8:68:c7:db:8c:f4:ab:30:6d:5e:59:
         40:fd:f6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org