Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231332e302f32342d3234203d3e20323635343338.roa
File:                     3136382e3139352e3231332e302f32342d3234203d3e20323635343338.roa (raw, json)
Hash identifier:          rKYNSS0V0Upk5M7kAuYpHHupKo/IzcZultsKYMKPCwI=
Subject key identifier:   73:21:56:D5:5B:70:2F:5D:6D:6E:28:5B:9B:D9:44:E6:94:50:24:DB
Certificate issuer:       /CN=F195F9C596ADB608642A133DA471E40CFD879710
Certificate serial:       792FBC310A533981F1B73AF5FD6D5C3A5EBCE825
Authority key identifier: F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231332e302f32342d3234203d3e20323635343338.roa
Signing time:             Tue 21 Nov 2023 15:56:06 +0000
ROA not before:           Tue 21 Nov 2023 15:51:06 +0000
ROA not after:            Tue 19 Nov 2024 15:56:06 +0000
asID:                     265438
IP address blocks:        168.195.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2f:bc:31:0a:53:39:81:f1:b7:3a:f5:fd:6d:5c:3a:5e:bc:e8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F195F9C596ADB608642A133DA471E40CFD879710
        Validity
            Not Before: Nov 21 15:51:06 2023 GMT
            Not After : Nov 19 15:56:06 2024 GMT
        Subject: CN=732156D55B702F5D6D6E285B9BD944E6945024DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:7f:53:ae:17:72:a5:84:48:fc:d1:d5:f4:
                    3b:fc:e7:4d:49:84:19:48:44:bd:a5:47:b3:29:e8:
                    ab:eb:93:6c:3e:95:01:dd:33:8f:b0:f8:37:f2:c2:
                    2d:a2:d6:ca:48:ea:d1:9b:fe:25:b6:53:b1:cb:fa:
                    b3:8a:8e:2b:88:32:64:92:81:f7:49:8a:4b:af:79:
                    eb:31:11:0e:54:e2:98:c1:aa:2a:49:f7:5c:25:00:
                    53:0d:cc:43:85:82:17:81:f0:51:2a:99:a0:97:27:
                    cd:01:dc:04:f4:5e:c8:47:9a:88:8f:03:37:0b:5a:
                    5a:51:0c:39:6a:f5:ba:91:45:2d:fa:83:52:f3:50:
                    3b:3b:58:b7:54:b0:ea:f8:77:e4:4a:ce:95:0c:99:
                    46:8e:f1:bc:ec:79:ec:f3:3a:31:df:08:5e:a9:dd:
                    f6:4f:13:c9:d0:64:ea:0c:aa:46:ec:48:41:59:ff:
                    8c:09:29:b4:78:17:69:9e:20:ce:59:29:bf:21:82:
                    6b:4e:11:87:a9:a9:8c:3d:64:0d:d0:d4:cc:49:48:
                    17:93:5e:2a:a3:32:ce:06:84:5e:87:04:26:28:47:
                    83:a6:ea:60:55:07:7e:d7:1a:98:20:ac:f5:5e:9e:
                    80:0a:b1:40:a1:c3:4f:56:88:d9:ed:04:87:2f:d9:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:21:56:D5:5B:70:2F:5D:6D:6E:28:5B:9B:D9:44:E6:94:50:24:DB
            X509v3 Authority Key Identifier:
                keyid:F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/F195F9C596ADB608642A133DA471E40CFD879710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231332e302f32342d3234203d3e20323635343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:9d:c3:68:18:5d:04:f3:f8:e4:7b:cd:c0:3e:41:6e:46:a2:
         47:24:70:60:9d:eb:57:74:1c:2c:14:9d:09:d9:dc:a0:a1:85:
         f5:97:7e:6b:64:ba:90:80:c2:77:32:d1:e3:08:e3:47:11:3f:
         8f:66:8b:68:79:15:cf:6a:52:18:a8:65:ed:b7:cd:fd:1e:0e:
         4f:df:ea:4d:78:dc:e4:5b:31:eb:e5:cf:35:02:19:18:cb:42:
         1a:fa:73:88:c7:33:4a:a2:0b:45:99:8a:ce:07:34:bb:01:88:
         5d:66:cc:09:41:00:a6:79:c6:39:e5:5f:a8:a7:6b:2a:00:cc:
         12:e5:df:0e:f2:45:2e:d6:a5:03:2f:2b:5d:fb:0b:52:50:2b:
         9f:aa:bc:1f:a5:0c:bc:b1:99:7d:f4:2f:80:83:fd:c8:c0:ec:
         cc:46:86:bf:88:31:69:36:53:5c:1f:90:3a:6d:06:3f:28:a5:
         0b:4f:f4:05:40:91:a6:f9:14:f9:ff:da:d6:83:89:1a:93:9d:
         4c:c0:6f:8b:2c:13:25:fa:45:38:ef:4c:fb:6d:b4:93:55:88:
         56:2b:24:8c:59:e6:e2:b5:41:34:9b:54:69:93:89:a6:f2:d7:
         07:47:81:28:79:20:11:70:06:94:c9:dd:37:42:77:a8:95:d4:
         d0:72:5c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org