Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/3136312e32322e35362e302f32312d3234203d3e20323632343831.roa
File:                     3136312e32322e35362e302f32312d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          tSxtlhxgzmn2NFZvWQOtMoJ06QAE21YkXMTDKWgKULk=
Subject key identifier:   79:D5:A2:85:1E:3A:EA:BB:16:C4:07:5A:7B:E1:30:9D:3E:41:3E:EF
Certificate issuer:       /CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
Certificate serial:       3A37C8C3DD2B034522E76BFAB16254434ABCFDA1
Authority key identifier: E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/3136312e32322e35362e302f32312d3234203d3e20323632343831.roa
Signing time:             Thu 19 Aug 2021 19:20:00 +0000
ROA not before:           Thu 19 Aug 2021 19:15:00 +0000
ROA not after:            Thu 18 Aug 2022 19:20:00 +0000
asID:                     262481
IP address blocks:        161.22.56.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:37:c8:c3:dd:2b:03:45:22:e7:6b:fa:b1:62:54:43:4a:bc:fd:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
        Validity
            Not Before: Aug 19 19:15:00 2021 GMT
            Not After : Aug 18 19:20:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:01:fa:ea:48:93:b5:6e:3f:7a:e9:c0:fd:0f:
                    c3:00:48:d6:63:b1:72:98:95:ed:f8:31:8f:3e:5c:
                    16:7b:d7:58:c1:c9:18:15:18:8e:30:21:bf:77:1e:
                    a4:d2:3f:98:94:15:00:f8:e4:50:09:6b:34:f1:12:
                    7f:af:61:a2:2b:e3:68:e0:60:4f:78:d4:28:02:d2:
                    8a:74:6c:13:a9:f5:8e:35:e5:71:83:41:43:b4:70:
                    45:d6:0a:25:f8:63:1d:38:ba:42:a5:5f:8d:16:eb:
                    ab:12:31:48:37:1c:73:62:1e:eb:76:dd:44:82:c8:
                    fb:6f:78:b5:32:88:61:bb:85:f7:05:e3:d0:bd:9b:
                    ce:aa:15:4c:c9:7c:ec:51:41:32:cb:d9:e8:d4:35:
                    9b:07:3f:15:42:52:58:51:06:88:48:bc:74:b1:ea:
                    2f:83:e2:60:e7:40:10:6e:56:da:7c:96:62:c9:cf:
                    2b:71:5b:a5:2f:32:89:e5:9f:b6:5f:bf:06:6d:8b:
                    f2:50:12:ea:7c:df:45:19:35:04:c2:58:a4:7b:b2:
                    eb:04:bf:ce:97:94:bd:f6:35:24:6c:f7:03:63:e0:
                    0d:db:77:79:b5:fc:c9:38:91:f6:34:3e:57:dc:f6:
                    0d:ce:25:cf:86:93:ab:21:46:62:a1:e4:c7:0c:4e:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D5:A2:85:1E:3A:EA:BB:16:C4:07:5A:7B:E1:30:9D:3E:41:3E:EF
            X509v3 Authority Key Identifier:
                keyid:E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/3136312e32322e35362e302f32312d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cf:7e:62:31:71:3d:b0:68:e6:4d:04:76:da:56:00:20:ae:e8:
         aa:fb:cb:b6:8d:0d:59:06:42:88:28:e7:5e:bb:23:86:15:49:
         ca:5f:25:a8:09:4a:a1:9c:71:95:b6:4a:be:c5:cb:c1:96:b6:
         0d:98:74:bf:51:59:37:ce:c0:54:17:9b:20:a6:bc:6d:bc:b3:
         78:bf:db:a6:2d:64:98:65:6f:4a:49:1e:2e:41:9d:de:29:bd:
         7d:f1:08:78:57:20:1e:c1:b0:44:a4:69:b9:2d:f6:08:6e:0a:
         2f:2d:c2:a3:cb:3e:1d:1a:e2:94:e0:5a:37:d2:04:ec:ca:34:
         26:65:16:91:4e:98:3f:8d:9e:60:0e:c4:21:4f:08:ea:de:1b:
         b6:9a:5f:b6:f0:7b:17:af:aa:07:00:b4:64:f6:02:f7:92:04:
         8a:0d:86:3a:1b:c0:52:bf:4e:41:ec:13:4b:1c:e3:4f:19:6d:
         bf:1a:f2:d9:84:e9:8b:1a:fc:56:97:6d:5d:64:90:87:dd:b8:
         cf:c8:79:36:07:7f:ac:86:e9:5e:1b:c7:10:48:82:9d:15:b0:
         a8:43:66:3f:b9:36:f5:f1:12:d7:f6:2a:73:2f:0c:e2:0c:7f:
         7b:e5:ac:e1:92:91:9a:1c:7d:55:a4:6d:c5:8e:4e:ba:89:73:
         69:2b:6d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org