Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231342e302f32332d3233203d3e20323635343338.roa
File:                     3136382e3139352e3231342e302f32332d3233203d3e20323635343338.roa (raw, json)
Hash identifier:          +VWMcgf2Qsg4osAYuoFlUgoe/gfyD2oN8Mpzu8CYW0M=
Subject key identifier:   CA:AC:81:35:52:AE:76:89:4D:73:15:CB:DA:E8:2E:3A:65:E5:A5:45
Certificate issuer:       /CN=F195F9C596ADB608642A133DA471E40CFD879710
Certificate serial:       0B3FD347D098D7B5CC4BBC5A954BB9D9629FA5FF
Authority key identifier: F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231342e302f32332d3233203d3e20323635343338.roa
Signing time:             Tue 21 Nov 2023 15:56:05 +0000
ROA not before:           Tue 21 Nov 2023 15:51:05 +0000
ROA not after:            Tue 19 Nov 2024 15:56:05 +0000
asID:                     265438
IP address blocks:        168.195.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3f:d3:47:d0:98:d7:b5:cc:4b:bc:5a:95:4b:b9:d9:62:9f:a5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F195F9C596ADB608642A133DA471E40CFD879710
        Validity
            Not Before: Nov 21 15:51:05 2023 GMT
            Not After : Nov 19 15:56:05 2024 GMT
        Subject: CN=CAAC813552AE76894D7315CBDAE82E3A65E5A545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:82:4a:b8:15:0f:96:96:f0:62:21:cb:e8:
                    d7:d4:2b:46:3b:87:b7:a6:11:66:7e:3e:38:f5:7d:
                    92:36:5c:4f:23:87:74:b0:51:55:ff:ec:39:8e:71:
                    bf:65:18:3c:f6:de:32:16:49:11:e3:b2:56:aa:d8:
                    4e:35:90:36:54:6d:53:bf:9f:48:61:6a:8a:7c:61:
                    5e:7b:ce:e5:2c:47:40:30:7f:78:45:e8:a5:73:06:
                    fa:76:bb:a8:90:5d:12:f1:27:b3:91:8e:13:e1:3e:
                    0e:df:73:ea:0f:24:f3:59:53:d1:8b:06:52:e5:07:
                    95:f0:6d:37:a1:30:a0:47:41:2b:00:36:5b:63:62:
                    be:38:d7:bb:70:0a:37:1e:ab:86:36:7a:58:8e:1a:
                    8c:82:a8:28:49:72:17:c3:cc:c4:0d:ff:86:99:81:
                    02:6a:32:9d:13:a9:bb:c6:b6:97:00:26:be:25:88:
                    0f:ef:b9:ac:2b:50:28:fe:c4:40:a7:97:ac:0c:07:
                    64:27:85:d0:c7:c4:1b:29:02:db:84:0d:3d:91:03:
                    d7:db:0a:73:29:c5:8b:78:bc:3a:ba:3c:98:f7:44:
                    06:32:85:a2:f4:5e:e7:70:4a:e6:ba:fb:88:ff:3a:
                    ab:07:84:65:86:ab:31:6f:1d:1c:dd:25:d2:33:9e:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AC:81:35:52:AE:76:89:4D:73:15:CB:DA:E8:2E:3A:65:E5:A5:45
            X509v3 Authority Key Identifier:
                keyid:F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/F195F9C596ADB608642A133DA471E40CFD879710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/3136382e3139352e3231342e302f32332d3233203d3e20323635343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:6a:78:ed:0b:a2:d6:83:c5:f4:43:bd:5f:49:00:02:c5:1f:
         d3:4f:c8:74:aa:36:5a:84:62:8a:15:56:09:99:95:de:0f:db:
         1c:30:da:e9:f2:a2:74:da:70:89:80:e0:ba:e4:28:d5:00:65:
         ac:e0:e5:73:8a:8c:82:55:5e:cf:e5:e6:8f:e4:89:0b:88:b0:
         16:09:87:a1:92:55:7c:35:c6:b8:41:71:86:61:4b:81:3e:a6:
         a9:aa:6c:69:cc:49:70:05:f9:95:92:e5:ed:0e:10:d2:a1:42:
         f5:99:c2:fb:2f:f9:45:fc:4e:1f:9d:05:6e:c7:5b:83:b8:60:
         fc:e1:27:cb:8e:10:00:40:71:54:33:49:7b:75:60:b3:82:07:
         36:c0:1e:8a:ad:c0:d2:53:a1:92:ac:b3:36:b7:a3:5c:d9:ab:
         db:44:8c:a7:57:23:86:c5:17:49:81:3a:ea:9a:c4:ec:8e:d6:
         15:36:fb:b8:a8:cf:71:3e:77:a3:bc:dd:67:0c:48:06:5a:7c:
         78:04:82:76:a3:22:90:8e:7b:b4:bb:ef:55:b3:bd:95:78:7b:
         ba:e9:55:35:da:38:66:ff:da:9d:1d:3d:5d:c1:5c:84:b7:f6:
         e0:08:9d:38:dc:51:9f:f2:1b:0c:1b:e0:61:98:70:c3:f4:df:
         ba:af:93:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org