Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3136382e3139362e382e302f32332d3233203d3e20323634323431.roa
File:                     3136382e3139362e382e302f32332d3233203d3e20323634323431.roa (raw, json)
Hash identifier:          vj2/PJazYHlw34oGgZMcFiUnYsqTvuh69lJrDMC9JWU=
Subject key identifier:   81:FD:82:19:BE:49:F8:53:87:DD:9A:9D:FD:8F:E5:09:19:5D:D7:74
Certificate issuer:       /CN=5F8FFB1FA6A12CA394255F5031399D9A137B3EC7
Certificate serial:       6FFA4194D43384F405F4A4BF3A358EB444C6878B
Authority key identifier: 5F:8F:FB:1F:A6:A1:2C:A3:94:25:5F:50:31:39:9D:9A:13:7B:3E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3136382e3139362e382e302f32332d3233203d3e20323634323431.roa
Signing time:             Tue 28 Mar 2023 12:04:00 +0000
ROA not before:           Tue 28 Mar 2023 11:59:00 +0000
ROA not after:            Tue 26 Mar 2024 12:04:00 +0000
asID:                     264241
IP address blocks:        168.196.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fa:41:94:d4:33:84:f4:05:f4:a4:bf:3a:35:8e:b4:44:c6:87:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F8FFB1FA6A12CA394255F5031399D9A137B3EC7
        Validity
            Not Before: Mar 28 11:59:00 2023 GMT
            Not After : Mar 26 12:04:00 2024 GMT
        Subject: CN=81FD8219BE49F85387DD9A9DFD8FE509195DD774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:82:02:a1:23:6b:c1:b0:90:13:46:c0:cd:
                    94:19:5a:77:a0:fe:40:ab:e6:9e:36:b0:16:6e:f8:
                    8a:18:ad:1e:e1:03:29:1e:f1:f7:25:5e:96:f1:9f:
                    e0:26:18:14:e7:82:2a:57:a3:de:83:b4:18:e1:3f:
                    2c:19:6f:3a:03:7c:44:fe:5e:32:80:47:9b:65:b2:
                    fc:98:25:ab:19:b8:16:f3:04:b9:b7:7f:cf:80:54:
                    68:28:2b:3c:38:10:55:99:b6:66:19:b0:3b:8b:5b:
                    51:6c:65:f4:cc:4c:4a:ad:8a:a0:44:84:bc:4c:05:
                    4d:05:7e:be:f1:67:41:1f:f2:c2:d4:d6:ec:6e:08:
                    1e:c4:8a:b3:86:a9:10:97:e5:c6:76:93:1e:eb:2b:
                    cc:42:c5:26:93:e2:52:8c:76:2b:b9:4d:f2:7f:99:
                    0b:89:50:dd:d6:57:f0:16:b7:6f:2d:d3:01:c3:94:
                    8c:07:bc:5c:93:6a:f7:85:c8:2e:28:0b:e6:fb:26:
                    af:9b:10:42:b9:a7:a6:c2:37:a2:ef:0a:fd:b1:3b:
                    36:b0:92:fd:b9:c8:bb:51:c2:e1:3a:ab:83:12:34:
                    d7:0f:bd:3c:26:ed:77:c1:33:84:80:1d:c5:6b:2a:
                    4b:03:e7:90:34:7a:07:3f:1b:b9:7e:00:4e:81:9c:
                    63:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FD:82:19:BE:49:F8:53:87:DD:9A:9D:FD:8F:E5:09:19:5D:D7:74
            X509v3 Authority Key Identifier:
                keyid:5F:8F:FB:1F:A6:A1:2C:A3:94:25:5F:50:31:39:9D:9A:13:7B:3E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3136382e3139362e382e302f32332d3233203d3e20323634323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:40:93:b0:46:ba:9f:a5:88:0a:8d:65:f0:ff:1a:5e:16:1e:
         db:4e:96:b0:a4:8d:e8:63:86:86:0f:1d:56:a1:de:c0:54:da:
         32:82:cc:af:77:ea:c0:5a:8e:d3:e3:f4:20:ec:66:09:5e:f1:
         7b:d3:8b:22:24:39:ee:1d:23:85:84:97:93:ec:2e:1d:3a:80:
         a5:71:81:d1:57:72:cf:d2:c6:52:dd:2b:d2:d2:ac:04:48:70:
         2e:43:c6:17:2b:f1:d7:b0:d3:2a:9d:7c:16:1a:ff:5f:4e:a9:
         e5:a4:66:e0:5a:88:a3:06:3f:26:fb:a6:93:64:4e:fc:0f:4b:
         d7:2f:a5:b0:e5:0b:91:95:11:74:80:29:34:1f:e0:81:a1:57:
         c3:36:ff:2f:a1:91:90:d9:5d:3f:c5:9a:83:58:eb:56:49:87:
         b4:f0:db:31:a9:5f:fe:73:7c:66:0c:bb:f4:bc:72:cb:c9:38:
         d0:ed:a0:a4:fc:b6:79:f8:3c:87:7b:65:2e:0b:fb:a6:14:bd:
         9e:d1:dc:08:0f:86:1f:1d:bf:da:c7:89:aa:ac:73:dc:14:83:
         6c:2c:c8:ee:b7:20:f1:fb:9e:5a:0f:6f:ee:92:8e:a2:96:15:
         31:06:42:f9:25:a4:6c:74:a3:cb:88:ff:da:fd:64:49:c0:32:
         8f:c5:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org