Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130392e302f32342d3234203d3e20323635393530.roa
File:                     3136342e3136332e3130392e302f32342d3234203d3e20323635393530.roa (raw, json)
Hash identifier:          KQcEGOn9/3qsstHfaYtV2kQpWSYv3n3J5ss8754Bnj4=
Subject key identifier:   31:74:C1:85:C5:DB:50:84:5A:FD:E5:69:DA:34:38:D2:9C:60:5C:CA
Certificate issuer:       /CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
Certificate serial:       35C5D0A30F95E5D09CABB1E30C81388E38874C85
Authority key identifier: 1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130392e302f32342d3234203d3e20323635393530.roa
Signing time:             Sun 24 Sep 2023 21:58:54 +0000
ROA not before:           Sun 24 Sep 2023 21:53:54 +0000
ROA not after:            Sun 22 Sep 2024 21:58:54 +0000
asID:                     265950
IP address blocks:        164.163.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c5:d0:a3:0f:95:e5:d0:9c:ab:b1:e3:0c:81:38:8e:38:87:4c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
        Validity
            Not Before: Sep 24 21:53:54 2023 GMT
            Not After : Sep 22 21:58:54 2024 GMT
        Subject: CN=3174C185C5DB50845AFDE569DA3438D29C605CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:ad:da:2f:e9:a3:c4:ec:35:34:be:2f:d4:
                    81:fe:6b:95:e5:b5:09:a5:37:bc:c7:51:91:a0:93:
                    a9:97:ec:56:12:8e:a5:1a:c5:66:3b:76:cf:ce:7d:
                    22:d1:43:9a:bd:88:74:f3:da:58:db:10:0a:65:af:
                    07:82:bd:61:f6:47:0c:a6:42:b1:80:67:78:e8:7c:
                    f3:f7:1e:d9:2f:dd:bb:75:64:d2:10:98:e8:4c:ff:
                    1f:3a:e9:8e:09:d4:87:d0:40:e8:0b:49:86:2b:fa:
                    d8:b8:42:5d:1b:b8:74:56:af:e2:20:d8:03:61:8f:
                    65:a3:a9:e1:5e:a2:b2:12:dc:5c:28:64:b7:b0:d8:
                    03:97:c3:c6:e9:c5:81:42:21:2c:cb:51:97:af:4d:
                    0b:5f:6b:d5:05:f2:b2:01:40:30:75:c4:e1:a6:c8:
                    fd:1a:eb:e0:0e:95:70:f8:b3:62:23:b0:8d:73:20:
                    c6:7d:73:94:77:27:4a:2a:33:8f:6c:a5:b3:45:cd:
                    30:6e:08:9f:a7:4e:95:b0:76:4d:4c:ab:89:6a:20:
                    c6:b8:a4:f9:11:2c:b4:77:bd:10:6e:30:c2:fb:c1:
                    e0:fb:cd:be:2e:23:98:f8:aa:fa:e5:93:d1:fc:3d:
                    c3:df:29:bf:89:86:45:4b:27:86:d6:95:8c:72:2c:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:74:C1:85:C5:DB:50:84:5A:FD:E5:69:DA:34:38:D2:9C:60:5C:CA
            X509v3 Authority Key Identifier:
                keyid:1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130392e302f32342d3234203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:bf:2c:72:af:cf:3d:bb:d1:84:a3:78:2f:26:f6:cb:34:ba:
         27:73:64:32:ea:75:84:bc:f1:36:a6:5f:44:42:0f:36:34:e9:
         18:b0:a0:ab:23:76:66:f2:62:02:66:0c:ae:94:8e:2a:3f:f3:
         de:29:2d:db:95:9a:c8:88:61:24:98:fc:8f:cd:91:9b:5b:16:
         d8:a0:a2:76:c4:b7:eb:51:d0:19:57:10:1c:72:81:46:88:04:
         5d:a1:93:b1:6e:a4:08:fa:32:b0:57:b9:ff:8a:ce:c4:0d:1d:
         9f:0e:d9:29:e7:2b:a8:b8:d9:4f:11:2d:d0:f8:1b:2d:d8:f4:
         d8:e9:cb:89:a8:93:b4:5a:94:96:bd:9e:0d:9b:df:f0:b1:7a:
         c6:6e:80:ae:14:30:f9:a3:8c:62:0a:e8:b7:1d:0a:cf:69:4f:
         8a:cc:30:00:59:c9:c9:16:ef:24:af:c7:13:b2:cd:d4:5e:96:
         ea:34:e6:d7:74:77:17:f1:f3:d8:c0:c7:6d:00:28:33:27:66:
         a8:61:3f:72:f5:8c:d9:96:4f:e2:2b:0d:17:78:9f:24:78:0d:
         4c:ba:1b:f5:b6:38:d5:5a:72:d8:55:6c:4f:08:ed:c8:1b:4a:
         a8:7b:6c:60:fc:e6:e3:c5:c9:95:55:63:68:e8:78:c8:a1:96:
         3c:78:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org