Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231322e302f32322d3332203d3e20323635343338.roa
File:                     3136382e3139352e3231322e302f32322d3332203d3e20323635343338.roa (raw, json)
Hash identifier:          mYPbTIvl1zR0CL/TqUgjwnQJLhRSjHCNxaiVf8q/oiM=
Subject key identifier:   09:16:58:9A:D8:74:A5:CC:42:80:88:45:DE:2A:F2:B7:C3:AF:06:24
Certificate issuer:       /CN=62F93EBCC460548EC7142E1C75D4F2D86E0E0469
Certificate serial:       0A3770048AD8A5D15F8DFC7C10242498BA6B28FD
Authority key identifier: 62:F9:3E:BC:C4:60:54:8E:C7:14:2E:1C:75:D4:F2:D8:6E:0E:04:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62F93EBCC460548EC7142E1C75D4F2D86E0E0469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231322e302f32322d3332203d3e20323635343338.roa
Signing time:             Tue 02 Apr 2024 13:21:59 +0000
ROA not before:           Tue 02 Apr 2024 13:16:59 +0000
ROA not after:            Tue 01 Apr 2025 13:21:59 +0000
asID:                     265438
IP address blocks:        168.195.212.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:37:70:04:8a:d8:a5:d1:5f:8d:fc:7c:10:24:24:98:ba:6b:28:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62F93EBCC460548EC7142E1C75D4F2D86E0E0469
        Validity
            Not Before: Apr  2 13:16:59 2024 GMT
            Not After : Apr  1 13:21:59 2025 GMT
        Subject: CN=0916589AD874A5CC42808845DE2AF2B7C3AF0624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:50:4f:4c:21:a3:e7:2d:29:d6:82:f7:f6:63:
                    ff:95:85:ad:41:31:1b:08:f1:a0:86:87:41:9a:c2:
                    53:0c:29:7c:d5:04:08:14:11:39:94:f9:d6:b1:2d:
                    0e:03:0c:73:32:68:81:6f:26:3c:e8:d9:0f:bf:c2:
                    b6:b3:cd:e0:ee:7f:8c:59:f7:e1:04:90:07:3b:d4:
                    d8:3e:b1:1f:ec:a0:56:8c:63:cf:ff:fe:12:c6:8d:
                    85:f2:b4:ee:20:31:f6:21:b7:74:9e:61:81:b7:90:
                    5b:81:67:40:5e:af:a9:98:8b:cf:4d:22:8f:05:82:
                    a9:75:8e:b9:b7:44:be:01:a6:8a:87:db:9c:86:0d:
                    ea:97:76:b7:08:db:e7:c7:c8:c7:ee:a5:ae:d2:cb:
                    e5:03:66:e4:3e:bb:1a:22:be:a9:e2:b0:44:f6:01:
                    09:cb:0b:50:ee:37:1a:24:10:6e:de:a4:6a:d9:e4:
                    55:94:57:0b:15:79:04:73:eb:be:f4:6f:68:b9:26:
                    1d:af:4e:7c:68:ee:ad:04:d8:cf:74:89:b4:0f:78:
                    db:ee:6c:6a:07:65:e8:87:c3:6a:39:da:9a:98:88:
                    40:6d:3d:75:bb:33:57:7b:c4:60:85:8c:0f:cc:bf:
                    f9:91:e7:8f:90:ab:aa:4d:d4:e1:b2:e7:bc:f0:e2:
                    98:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:16:58:9A:D8:74:A5:CC:42:80:88:45:DE:2A:F2:B7:C3:AF:06:24
            X509v3 Authority Key Identifier:
                keyid:62:F9:3E:BC:C4:60:54:8E:C7:14:2E:1C:75:D4:F2:D8:6E:0E:04:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/62F93EBCC460548EC7142E1C75D4F2D86E0E0469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62F93EBCC460548EC7142E1C75D4F2D86E0E0469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231322e302f32322d3332203d3e20323635343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:c5:b4:4e:44:be:20:56:a0:b4:74:2f:a2:e2:67:1d:22:1b:
         97:5e:5a:28:08:d4:c7:a4:e9:b6:13:1d:83:e8:d9:69:ac:9f:
         0d:9f:2c:96:fa:5e:52:60:67:17:f5:52:0e:dd:35:3a:5b:94:
         8f:00:78:ed:32:d8:45:81:57:df:37:10:37:58:2d:55:3f:ca:
         33:f5:83:f1:c3:36:b4:db:16:1b:16:67:51:5e:e8:30:e7:04:
         23:2b:cd:70:73:be:58:a7:49:a6:d9:6b:36:24:f7:cd:9d:aa:
         54:03:56:17:73:33:4b:65:ef:c7:8c:81:ff:5e:dc:f2:8a:dc:
         39:1c:cc:2e:32:05:f0:0f:ec:c1:59:2e:48:0b:e4:0d:fe:b3:
         3c:94:de:15:c0:02:62:9c:0d:20:6b:ff:fc:ca:bf:3b:2e:aa:
         79:fd:bd:db:97:ce:8e:f7:07:42:32:36:23:5a:70:b2:f4:d5:
         56:e1:26:4f:f2:17:49:1b:4b:05:35:b4:2b:5c:84:2b:05:cc:
         8d:22:4a:25:91:be:6c:e1:2f:ca:33:b9:f0:4a:67:24:aa:b4:
         ca:b5:36:e8:8f:83:9b:05:a7:f8:ac:78:79:f8:2c:e7:5e:19:
         6a:6e:ff:67:63:0a:0b:f3:03:7a:bf:b7:bd:ef:26:ab:60:d8:
         9e:51:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org