Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32332d3233203d3e20323635343632.roa
File:                     3136382e3139362e3232302e302f32332d3233203d3e20323635343632.roa (raw, json)
Hash identifier:          OfHGa3trNbxiQvIAznbd6utRE3v9DIgpC13eEGJwcOw=
Subject key identifier:   1D:DD:AB:66:33:E7:26:55:AF:5F:25:D8:B7:F4:E0:64:C0:C4:E5:D6
Certificate issuer:       /CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
Certificate serial:       3D92EB8DF6D56D95DFA0D285C2B77F01B6CC59B6
Authority key identifier: 1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32332d3233203d3e20323635343632.roa
Signing time:             Mon 26 Jun 2023 13:08:05 +0000
ROA not before:           Mon 26 Jun 2023 13:03:05 +0000
ROA not after:            Mon 24 Jun 2024 13:08:05 +0000
asID:                     265462
IP address blocks:        168.196.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:92:eb:8d:f6:d5:6d:95:df:a0:d2:85:c2:b7:7f:01:b6:cc:59:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
        Validity
            Not Before: Jun 26 13:03:05 2023 GMT
            Not After : Jun 24 13:08:05 2024 GMT
        Subject: CN=1DDDAB6633E72655AF5F25D8B7F4E064C0C4E5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:58:6c:95:b9:9f:8e:49:82:bf:e6:db:7b:
                    60:1c:37:0b:e4:07:f0:af:3f:43:f1:1b:02:c4:36:
                    de:d0:ec:99:22:3d:f0:67:d7:37:ea:f7:2e:60:8c:
                    ed:e8:8f:87:ed:c8:c3:55:54:c4:69:ba:93:ab:4c:
                    86:78:3b:6a:85:02:19:1d:5e:85:59:af:c5:18:40:
                    bc:1a:9f:14:3e:14:ce:6b:62:2c:cd:ca:4b:e5:0e:
                    09:c4:03:47:db:2a:b4:57:38:05:3b:1e:35:f5:12:
                    d5:b6:eb:8e:01:9a:62:34:d0:99:8f:e0:b2:f4:28:
                    36:87:3e:f5:93:78:64:6c:40:89:e3:4f:ca:f9:a3:
                    a3:0d:d7:a1:c0:f0:09:83:96:fa:c7:9b:00:bf:83:
                    2e:0e:b3:25:30:5c:87:32:d2:17:7b:9d:83:71:1b:
                    e4:1b:b3:12:46:bc:c1:e0:65:c2:b3:6a:a0:91:1b:
                    a0:0e:c5:3e:fb:63:01:e9:96:4d:71:46:6a:40:6a:
                    00:3f:33:e9:42:ab:52:c2:58:3d:e1:54:c8:8a:fe:
                    6d:ef:fd:b9:07:07:d0:a4:a0:64:12:59:c0:de:50:
                    88:58:e4:2b:9b:95:60:a6:32:6d:2c:f7:ba:fd:ab:
                    79:9c:e3:d0:8d:ea:0d:05:fd:88:47:ca:7d:6e:c2:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DD:AB:66:33:E7:26:55:AF:5F:25:D8:B7:F4:E0:64:C0:C4:E5:D6
            X509v3 Authority Key Identifier:
                keyid:1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32332d3233203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:81:25:66:3a:40:ce:ab:58:f6:98:a8:aa:06:42:03:41:
         41:cf:f5:df:c0:6f:e8:1b:82:ce:a6:06:48:95:be:52:7e:d2:
         10:f7:93:39:92:ab:97:1d:e0:95:76:68:68:23:e7:ec:04:2f:
         ed:2a:a0:b8:1d:22:f0:89:1b:41:04:28:db:6c:1e:f5:d8:fc:
         fb:a1:02:b2:d6:e9:f6:45:66:bc:ce:2c:c4:42:0f:e0:e1:5a:
         b5:2d:62:d0:ae:fe:36:86:8e:3b:bf:57:90:91:ca:4a:75:96:
         10:f9:ea:37:03:8f:00:75:9e:36:26:0a:d6:ab:ec:8b:96:bb:
         4a:f6:ab:ea:39:c1:e3:f0:3c:da:76:21:86:bb:f8:cf:20:32:
         04:53:cc:8d:1b:bb:4a:17:13:00:68:aa:c7:39:31:d4:27:fc:
         aa:97:e1:72:69:ba:fb:06:7f:1f:55:c5:ff:15:1c:ce:de:e9:
         58:ca:60:97:ea:44:bf:d9:cb:68:8c:8c:bd:b2:a5:54:bf:5d:
         58:e1:c8:cc:44:34:2f:51:b8:80:f9:af:f8:b2:81:a8:bb:78:
         25:71:ac:e1:60:02:24:a4:66:1d:18:38:65:45:0d:e3:80:7f:
         79:2c:84:df:5a:46:29:51:f9:d8:e0:7b:cb:e4:52:2f:a7:1f:
         b1:12:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org