Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136342e302f32322d3234203d3e20323635343236.roa
File:                     3136382e3139352e3136342e302f32322d3234203d3e20323635343236.roa (raw, json)
Hash identifier:          j9LR4Ju1iteguNaUfDbxOPSXcVQhDZVQ7/VORMPKEuw=
Subject key identifier:   D6:84:47:31:54:9F:F0:C3:E9:92:E7:CE:B3:7A:EE:F1:DD:5E:D7:7A
Certificate issuer:       /CN=8AB02931D76016C1DAC971891EFEB5791057829F
Certificate serial:       799A220BE54839A7E90318EA8476855E88061BCA
Authority key identifier: 8A:B0:29:31:D7:60:16:C1:DA:C9:71:89:1E:FE:B5:79:10:57:82:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB02931D76016C1DAC971891EFEB5791057829F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136342e302f32322d3234203d3e20323635343236.roa
Signing time:             Fri 09 Jun 2023 14:37:30 +0000
ROA not before:           Fri 09 Jun 2023 14:32:30 +0000
ROA not after:            Fri 07 Jun 2024 14:37:30 +0000
asID:                     265426
IP address blocks:        168.195.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9a:22:0b:e5:48:39:a7:e9:03:18:ea:84:76:85:5e:88:06:1b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB02931D76016C1DAC971891EFEB5791057829F
        Validity
            Not Before: Jun  9 14:32:30 2023 GMT
            Not After : Jun  7 14:37:30 2024 GMT
        Subject: CN=D6844731549FF0C3E992E7CEB37AEEF1DD5ED77A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:37:0c:fe:49:42:9d:6f:43:55:f8:59:cf:
                    08:3d:a6:49:8a:a2:2d:fa:e4:d8:7e:39:79:46:6c:
                    9d:87:ef:ba:e3:08:6c:69:e5:ba:72:43:a9:c0:3b:
                    e1:85:cd:74:c2:c5:8b:14:ac:26:0f:90:b0:88:2f:
                    88:63:51:4b:8b:2b:db:86:9a:69:00:e7:f9:d8:c6:
                    59:fe:fa:a4:59:31:b0:cb:37:71:72:c0:e3:cd:30:
                    9a:fa:6d:86:fa:f3:d6:2b:c9:74:84:0f:6b:ee:45:
                    dc:8d:48:d1:77:b0:e2:88:2a:30:92:c9:10:e9:22:
                    71:17:31:43:bf:86:37:a5:6b:29:10:74:bc:97:a4:
                    92:9a:98:a7:0e:c3:58:17:3f:49:a3:8d:c4:7a:b6:
                    12:fe:ac:d1:f7:25:d0:a0:44:06:2e:be:1a:b7:a3:
                    95:2e:4e:0c:a6:2a:b8:8c:25:e6:43:f6:66:53:c6:
                    a0:e0:a2:c4:28:c7:84:8c:a7:0c:c0:7e:b7:df:0d:
                    93:d7:98:ff:3d:dd:79:58:d7:e0:d1:ab:a0:9c:00:
                    13:6d:22:86:c7:82:ce:24:dc:95:4c:31:b0:12:68:
                    98:17:8b:3a:55:0b:7c:23:ce:68:5e:ec:99:40:04:
                    97:39:3c:51:77:0f:5e:c4:ba:32:86:d4:53:f9:ce:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:84:47:31:54:9F:F0:C3:E9:92:E7:CE:B3:7A:EE:F1:DD:5E:D7:7A
            X509v3 Authority Key Identifier:
                keyid:8A:B0:29:31:D7:60:16:C1:DA:C9:71:89:1E:FE:B5:79:10:57:82:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/8AB02931D76016C1DAC971891EFEB5791057829F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB02931D76016C1DAC971891EFEB5791057829F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136342e302f32322d3234203d3e20323635343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:c9:a9:10:34:8a:b4:cf:b2:03:cc:f1:05:36:2f:b0:f9:7a:
         d3:5c:c6:29:cc:a1:09:7d:ab:e3:c6:60:03:28:6c:6d:ca:59:
         f7:91:02:b7:37:3e:52:e1:6b:31:f0:c2:24:ae:3e:d2:b5:b8:
         89:c7:cd:c9:87:de:6c:51:67:2d:60:ce:fc:d7:f1:8c:91:d1:
         a7:f9:56:e1:2d:28:86:44:7d:9b:d3:ef:e8:a2:5a:97:b9:22:
         ef:11:46:f1:39:c4:40:c6:11:64:f4:5a:5a:b8:b7:d8:06:b3:
         1a:f7:99:bc:13:eb:a9:16:69:6b:6d:40:4a:c4:f1:32:3f:7f:
         41:99:ec:39:90:e9:4a:0f:59:16:f0:62:4e:d2:df:6c:20:c7:
         a4:a0:22:1b:7f:06:d4:00:c3:36:2c:d9:c9:4f:f5:47:44:95:
         a4:ca:e4:3a:ed:f7:03:fe:15:f1:5f:39:e6:6f:57:39:47:0e:
         b7:c4:c5:0e:29:c1:49:d1:a9:56:e8:5f:8b:07:93:1b:c3:06:
         1d:7c:74:07:6c:d2:74:fc:60:ed:a2:3c:69:af:01:db:e0:41:
         66:f6:8f:2b:8a:74:0b:c2:a7:09:d3:9c:c0:79:65:38:be:54:
         fd:c6:8a:37:a3:a7:4b:4a:e5:9d:89:ca:98:7e:f7:25:1f:68:
         ec:09:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org