Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3136382e3139362e382e302f32322d3332203d3e20323634323431.roa
File:                     3136382e3139362e382e302f32322d3332203d3e20323634323431.roa (raw, json)
Hash identifier:          cA9hx6cl4B4IB+25x/VzfptHILDz5QkculORRSUbwaI=
Subject key identifier:   0D:BE:F6:49:61:24:3D:05:23:CC:56:42:09:77:B5:83:BA:50:2F:4F
Certificate issuer:       /CN=19BE0ECF1929D351B8E8680C771D8EA7AFDEE677
Certificate serial:       20D84E1CE28C842547EB423182444686D88B1BB2
Authority key identifier: 19:BE:0E:CF:19:29:D3:51:B8:E8:68:0C:77:1D:8E:A7:AF:DE:E6:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19BE0ECF1929D351B8E8680C771D8EA7AFDEE677.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3136382e3139362e382e302f32322d3332203d3e20323634323431.roa
Signing time:             Wed 14 Feb 2024 14:43:23 +0000
ROA not before:           Wed 14 Feb 2024 14:38:23 +0000
ROA not after:            Wed 12 Feb 2025 14:43:23 +0000
asID:                     264241
IP address blocks:        168.196.8.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d8:4e:1c:e2:8c:84:25:47:eb:42:31:82:44:46:86:d8:8b:1b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BE0ECF1929D351B8E8680C771D8EA7AFDEE677
        Validity
            Not Before: Feb 14 14:38:23 2024 GMT
            Not After : Feb 12 14:43:23 2025 GMT
        Subject: CN=0DBEF64961243D0523CC56420977B583BA502F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:ed:fe:81:a7:e6:ba:af:09:1c:8f:af:6e:
                    ab:61:3d:15:58:6a:dc:c9:2a:d9:46:cc:d7:8b:0a:
                    d4:89:86:7f:dd:50:0a:78:d8:4d:4c:f9:2a:0b:20:
                    ae:19:d8:05:b9:16:3c:b2:22:ed:63:0e:b7:ad:54:
                    71:8a:64:8b:6b:2a:66:58:e1:ac:28:fc:73:aa:b4:
                    78:06:66:2b:90:46:60:e1:2a:93:e5:cc:5a:8c:04:
                    fa:3a:ed:7d:f4:4f:69:c6:49:0c:58:98:af:f7:b3:
                    ef:34:b1:af:03:ca:bc:53:7b:ec:31:ba:50:08:40:
                    6d:f5:24:dc:62:7f:03:35:de:e9:da:3e:8c:8b:5d:
                    d0:bb:45:a9:5a:fd:74:ee:12:7f:4c:fd:d0:73:e3:
                    0e:77:40:ae:31:b4:fe:5f:df:e3:fa:b8:83:84:03:
                    06:34:80:1d:f9:9e:42:74:87:5a:cf:e6:bd:2f:63:
                    2c:ab:2f:da:97:c8:c9:ca:76:63:32:e2:91:a3:54:
                    7b:32:a2:44:6a:b2:85:eb:32:8a:4f:bc:89:9b:34:
                    d1:34:f5:6f:a5:4f:b2:42:97:67:1a:04:47:c2:b8:
                    c5:68:00:a0:9a:01:28:7d:08:9d:b1:b6:ed:83:7b:
                    66:ea:e4:dd:ea:b1:47:9e:18:cc:05:4a:ad:6d:f0:
                    0a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BE:F6:49:61:24:3D:05:23:CC:56:42:09:77:B5:83:BA:50:2F:4F
            X509v3 Authority Key Identifier:
                keyid:19:BE:0E:CF:19:29:D3:51:B8:E8:68:0C:77:1D:8E:A7:AF:DE:E6:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/19BE0ECF1929D351B8E8680C771D8EA7AFDEE677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19BE0ECF1929D351B8E8680C771D8EA7AFDEE677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3136382e3139362e382e302f32322d3332203d3e20323634323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:cd:be:c0:ca:bf:d0:23:b5:8e:b7:27:ee:81:22:b3:ba:cb:
         4d:6b:93:dd:c0:d5:b0:5c:d6:e9:0e:17:ad:1b:0d:ac:ce:4f:
         82:8a:7e:89:c4:4d:9e:b2:b1:72:4b:91:de:f2:f2:e1:e1:0b:
         e3:34:77:65:f0:65:b6:08:97:90:24:ed:54:e1:e1:51:53:14:
         75:c7:1a:b3:99:0e:44:7c:c2:d7:9b:a6:97:f5:94:b3:0b:34:
         46:90:bc:01:be:33:7c:72:7a:8b:3d:f4:f2:50:e0:26:e9:6f:
         a1:ef:9a:e1:4e:3b:11:32:f6:fa:fe:bb:d0:40:53:4c:85:18:
         a6:39:28:a0:f4:1f:82:fb:cc:b0:09:87:6f:8b:f8:9b:03:d3:
         39:8b:a1:54:39:99:b2:a6:c9:33:e9:95:e9:56:c3:1d:46:6d:
         4f:79:a7:a1:8f:11:6f:e4:15:ff:c2:81:a9:8f:cc:66:ce:54:
         e2:09:ea:e6:bd:6b:62:f1:e7:7c:50:61:2d:18:41:e1:f7:90:
         d7:42:98:9b:03:91:56:df:1c:6b:28:93:a4:4c:f3:9f:8f:20:
         c8:ca:f2:cf:4f:f7:56:f1:a9:f1:51:06:f8:d5:19:f6:42:71:
         24:f5:42:32:53:39:c2:c2:31:5c:87:0b:10:fe:2f:5d:c7:8c:
         c8:1c:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org