Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa
File:                     3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa (raw, json)
Hash identifier:          OivHHsUdWEqSsmPQTXHt5NdtfaTGZVy2EOuYe+Pnqh8=
Subject key identifier:   51:88:BC:6B:70:EC:AD:CF:C7:20:C2:86:75:99:8D:3B:8A:B9:94:13
Certificate issuer:       /CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
Certificate serial:       4E6ADCC3FF6A32B34E9957ABC39C9331EEEC6744
Authority key identifier: 1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa
Signing time:             Sun 24 Sep 2023 21:58:51 +0000
ROA not before:           Sun 24 Sep 2023 21:53:51 +0000
ROA not after:            Sun 22 Sep 2024 21:58:51 +0000
asID:                     265950
IP address blocks:        164.163.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6a:dc:c3:ff:6a:32:b3:4e:99:57:ab:c3:9c:93:31:ee:ec:67:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
        Validity
            Not Before: Sep 24 21:53:51 2023 GMT
            Not After : Sep 22 21:58:51 2024 GMT
        Subject: CN=5188BC6B70ECADCFC720C28675998D3B8AB99413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:80:f5:5e:00:33:13:66:a9:84:a1:61:d0:
                    79:cc:21:2b:f6:5f:cb:aa:2a:52:ab:f8:de:ce:94:
                    ac:00:92:3b:3f:c2:4c:62:de:b0:ad:fb:ee:2e:54:
                    1c:e6:18:6c:96:11:ee:65:38:fb:e6:2b:b3:b1:cd:
                    3b:bc:5e:9c:f0:3e:83:3c:13:34:c1:1d:76:c1:7f:
                    c5:35:e6:06:47:29:88:65:d2:de:76:d0:e2:af:d8:
                    c9:c9:45:02:76:19:92:db:f6:bb:a7:0f:62:50:70:
                    fc:0f:7c:b5:dd:08:d9:83:f7:d1:0b:6a:95:da:60:
                    f8:b0:5b:eb:b3:62:a2:6d:1b:ab:1d:ca:da:f2:b9:
                    03:47:6d:e7:ed:20:ac:e2:8f:c3:92:1a:db:60:fe:
                    9c:3e:e6:bb:17:02:44:f2:86:7a:f5:d8:86:6f:6d:
                    0a:dc:54:f5:f9:86:fd:0e:f7:12:79:41:9a:30:76:
                    6b:61:8b:d8:d8:d5:c9:c2:12:8c:4c:69:27:07:ef:
                    39:93:0c:52:7a:b9:db:ee:c8:8a:75:dc:5a:ea:e7:
                    fe:e2:a3:7b:01:32:fe:0c:4c:f5:88:bd:6e:e8:46:
                    62:87:51:e0:9c:ef:92:70:55:78:42:e3:2f:ef:48:
                    71:2d:6e:4d:9b:d5:af:f8:11:3b:5b:7b:6a:7b:46:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:88:BC:6B:70:EC:AD:CF:C7:20:C2:86:75:99:8D:3B:8A:B9:94:13
            X509v3 Authority Key Identifier:
                keyid:1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:56:fc:68:d1:cf:5e:f7:81:e8:fd:34:3a:f8:83:a6:87:e1:
         8a:16:b3:ab:41:e1:be:9c:14:16:d2:4f:d0:3e:34:94:19:53:
         7c:f6:2a:ad:00:d5:08:fc:aa:71:f0:fa:22:95:47:37:57:8d:
         cd:d0:ad:88:d9:6a:ef:d2:c2:66:b3:b3:4b:17:85:65:c4:ca:
         2d:19:ac:e9:16:03:d0:c4:f4:1b:32:3f:fa:3c:64:25:df:97:
         b9:1a:c9:ed:55:a0:17:29:5b:63:8f:00:c7:5f:89:9b:2f:3b:
         63:f4:af:e8:03:49:2d:99:13:9e:15:88:00:cf:e6:5f:cb:af:
         ee:20:97:9d:a0:f8:ca:df:fa:90:b4:1f:1f:37:47:cd:60:a6:
         2b:0f:3b:5c:2c:f9:50:44:0a:fe:7c:7a:33:c5:46:64:66:b0:
         20:da:30:d0:70:95:6a:bd:d6:f1:85:8c:cf:01:08:07:69:3d:
         3f:12:f5:6c:d2:6b:f8:4e:74:e9:d2:8d:ed:d0:99:b2:b2:b4:
         52:11:df:45:c0:01:7e:b8:25:64:be:7f:04:d9:85:4a:be:21:
         75:6e:7c:50:5e:ca:9f:eb:7d:4e:16:17:1a:0c:46:7a:df:95:
         99:b8:aa:dc:22:c9:cc:e0:92:e6:4f:f1:81:c6:55:a7:11:84:
         2e:85:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org