Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e302e3137322e302f32322d3234203d3e20323635333033.roa
File:                     3136382e302e3137322e302f32322d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          wf1vqjk36tLa00wCMlGetCpddnEd86v6Ma6WI/bgxSo=
Subject key identifier:   9F:1D:DA:28:15:F4:82:21:46:33:A1:4C:12:9B:0A:06:A8:31:53:C7
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       057DDE6B3E5E964762901E6776A3E2A15BD4E25A
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e302e3137322e302f32322d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 13:55:42 +0000
ROA not before:           Mon 08 Apr 2024 13:50:42 +0000
ROA not after:            Mon 07 Apr 2025 13:55:42 +0000
asID:                     265303
IP address blocks:        168.0.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7d:de:6b:3e:5e:96:47:62:90:1e:67:76:a3:e2:a1:5b:d4:e2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:50:42 2024 GMT
            Not After : Apr  7 13:55:42 2025 GMT
        Subject: CN=9F1DDA2815F482214633A14C129B0A06A83153C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:fc:d2:cc:93:f0:bc:02:84:ee:d3:47:76:
                    38:6e:0c:c4:e5:7b:97:85:6d:29:e4:b6:3c:4c:65:
                    a7:74:49:ed:83:b4:c8:26:06:0a:3c:29:5c:69:b9:
                    f3:35:bc:1c:51:0a:5b:f3:46:ef:99:f6:43:66:d3:
                    b3:3e:b0:60:48:a3:5c:8f:5f:bd:29:7f:d4:3d:58:
                    35:f7:21:ed:bd:fd:a3:d7:57:7b:27:a1:96:d7:71:
                    f2:cd:ae:5c:ef:83:e4:55:29:c3:39:5f:a1:7e:08:
                    95:b6:88:c7:e1:ef:d0:00:5f:ff:d7:09:65:3a:d5:
                    d4:86:56:45:02:ff:82:33:2c:10:f2:33:23:39:4e:
                    85:4e:6a:bd:70:52:23:df:b8:3e:a2:e7:73:e5:1e:
                    8a:b2:76:35:ee:3a:ec:0e:5a:18:ff:73:bb:a4:cf:
                    77:bf:25:45:14:65:62:81:e5:6c:4b:3f:55:5e:ce:
                    c0:5d:4a:21:46:99:d2:39:df:b2:22:b0:ff:d8:a5:
                    41:fd:c2:05:37:3a:03:f6:42:d5:d8:b8:46:6a:c2:
                    c6:c1:d6:ea:ab:09:2d:6f:71:5d:e3:07:d7:d6:22:
                    91:fc:83:b5:b3:1f:06:a5:80:dd:88:78:e8:bd:10:
                    cb:70:9a:3c:0c:09:7b:90:49:52:27:ac:d1:cd:f1:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:DA:28:15:F4:82:21:46:33:A1:4C:12:9B:0A:06:A8:31:53:C7
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e302e3137322e302f32322d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:eb:20:ca:86:04:73:60:27:9c:d6:3e:8e:ce:8b:73:f4:b0:
         18:eb:cd:e1:fe:a7:6d:28:d0:66:15:92:d8:aa:64:6b:33:53:
         56:2f:6f:e6:7b:73:ed:6c:80:25:09:68:4e:8e:be:60:a4:be:
         da:06:81:d7:4b:d1:58:87:3a:98:a4:62:30:a6:8c:0f:32:00:
         23:8c:db:00:e0:4c:4b:73:3f:2f:81:57:2a:f4:5e:22:9c:8c:
         f6:98:79:a3:c8:45:02:82:9d:63:48:83:bb:db:07:e9:a4:b0:
         83:86:2d:47:e4:54:43:09:9c:eb:16:38:d7:7b:a9:10:f3:65:
         2f:08:d9:99:22:20:77:ed:46:ed:56:a7:b9:4c:61:45:ae:95:
         1d:30:a5:60:b8:61:89:2a:fc:8e:db:1b:51:8c:ab:49:e0:65:
         79:2c:4e:10:ad:37:13:60:ed:92:e4:94:c5:c5:14:b6:78:5d:
         1f:20:56:76:ec:6d:6b:b0:6d:9c:38:1f:49:38:ba:55:c3:34:
         74:16:cf:0c:22:0a:53:c8:e8:2d:f7:ee:4c:4a:6e:1b:6f:9b:
         21:ed:c9:60:5d:69:35:63:8d:f0:49:69:f1:83:52:75:88:41:
         9e:b1:be:61:1f:08:a9:ed:9e:48:3a:09:08:8b:03:cc:71:7d:
         20:99:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org