Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/3136382e3232382e3231362e302f32332d3233203d3e20323634393239.roa
File:                     3136382e3232382e3231362e302f32332d3233203d3e20323634393239.roa (raw, json)
Hash identifier:          2gohHnNPr2XjHG3AqHl/hWS/mymf3S8/GfaFY1AqFTs=
Subject key identifier:   61:EF:3C:D8:05:7B:0C:69:02:EB:D5:16:14:D3:3C:D9:3E:55:76:D8
Certificate issuer:       /CN=CB3B7616863B2F05AD85E6493F4FEA0906E4A07A
Certificate serial:       40DB7F2ABF740A5E693CBA86976AD7EE370E120F
Authority key identifier: CB:3B:76:16:86:3B:2F:05:AD:85:E6:49:3F:4F:EA:09:06:E4:A0:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/3136382e3232382e3231362e302f32332d3233203d3e20323634393239.roa
Signing time:             Fri 13 Oct 2023 04:05:14 +0000
ROA not before:           Fri 13 Oct 2023 04:00:14 +0000
ROA not after:            Fri 11 Oct 2024 04:05:14 +0000
asID:                     264929
IP address blocks:        168.228.216.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:db:7f:2a:bf:74:0a:5e:69:3c:ba:86:97:6a:d7:ee:37:0e:12:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB3B7616863B2F05AD85E6493F4FEA0906E4A07A
        Validity
            Not Before: Oct 13 04:00:14 2023 GMT
            Not After : Oct 11 04:05:14 2024 GMT
        Subject: CN=61EF3CD8057B0C6902EBD51614D33CD93E5576D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:e9:50:93:66:99:74:12:e7:dc:b8:46:4c:
                    ab:3e:41:2b:1c:f3:7e:95:6a:9d:36:f6:b0:b5:8f:
                    f9:73:4c:b4:58:23:80:f0:73:87:ed:98:b3:4c:c4:
                    7a:fe:4b:bd:4c:5c:25:8b:61:98:8e:3c:ec:75:80:
                    60:1e:e4:07:c7:5f:fc:4e:5e:e2:62:81:31:00:d9:
                    37:b7:6b:7e:ce:4e:66:4b:25:5e:45:31:eb:78:90:
                    12:e3:ce:25:3e:c4:19:2a:00:b3:c7:b8:78:b5:ea:
                    44:06:6a:cf:05:f9:12:e5:22:0e:cd:8f:50:3d:8c:
                    3c:cc:c6:2b:3f:06:a9:a1:be:71:fc:f5:c5:ce:a9:
                    75:2f:2b:97:bf:c6:d0:32:54:81:19:cc:74:61:e6:
                    8e:c6:83:4c:a6:2c:fc:d6:c4:91:32:5b:f7:68:f3:
                    8d:37:3b:ea:67:95:57:42:40:bf:dc:9c:90:f7:16:
                    c6:19:fc:7a:57:c2:65:36:91:e9:50:33:8f:62:1b:
                    55:c4:4c:44:89:9b:cc:d8:0c:8b:9d:05:71:56:82:
                    b5:dd:77:71:dc:fc:1d:04:34:e5:4f:b3:e6:39:2f:
                    b2:d7:95:e7:f3:d3:92:23:84:87:97:c6:ec:06:67:
                    65:d4:ef:2d:10:c1:18:8b:30:d3:40:d7:a1:21:59:
                    61:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EF:3C:D8:05:7B:0C:69:02:EB:D5:16:14:D3:3C:D9:3E:55:76:D8
            X509v3 Authority Key Identifier:
                keyid:CB:3B:76:16:86:3B:2F:05:AD:85:E6:49:3F:4F:EA:09:06:E4:A0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/3136382e3232382e3231362e302f32332d3233203d3e20323634393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:82:60:4b:39:a0:ea:7b:be:d5:98:58:fc:bc:aa:14:44:e9:
         ee:4e:b7:27:71:01:ac:64:3b:7b:a0:02:39:d0:9d:c5:bc:1f:
         50:f4:40:2f:f9:75:99:e1:64:2a:db:91:e3:f4:82:e8:90:66:
         45:f4:9b:fb:eb:c3:fd:08:5c:e5:c2:65:ca:e5:b9:0b:ef:dd:
         9e:70:8b:02:45:39:d3:46:21:8c:82:55:c7:f3:47:44:99:24:
         8d:00:66:f9:ec:93:ca:7d:7c:d6:0c:a4:b2:b8:8b:47:2e:4a:
         94:f5:f5:91:e6:9e:b7:f0:b3:12:f2:53:00:ff:48:09:18:67:
         8c:5e:1d:19:e2:fe:5c:30:a6:53:be:28:66:b7:ee:0e:15:77:
         fa:6b:b0:77:f2:36:eb:4d:87:91:61:3b:66:79:8d:75:f5:84:
         63:09:dd:c6:89:58:9e:80:e6:c3:20:cd:97:1e:65:c9:cf:6a:
         69:2a:61:36:aa:b1:ad:ed:1d:5e:0b:67:18:72:86:4d:98:1e:
         3a:36:9d:92:0a:17:fe:62:d1:96:6f:f1:17:cb:b5:c4:c6:22:
         41:0b:2e:c5:7f:b3:30:88:df:47:d9:38:85:80:a2:e1:6c:b2:
         c1:97:c2:ad:be:ed:8f:04:43:8e:9e:07:1a:e2:39:9e:19:9d:
         80:f3:8d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org