Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232312e302f32342d3234203d3e20323635343632.roa
File:                     3136382e3139362e3232312e302f32342d3234203d3e20323635343632.roa (raw, json)
Hash identifier:          mR/n+cuGYMtDD129U8V+5ycXwLHYOKLVnFQKY3PxWT8=
Subject key identifier:   CA:D7:A6:E0:D3:BE:55:7F:82:4B:BE:33:71:68:1E:DF:57:24:4B:92
Certificate issuer:       /CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
Certificate serial:       4A4C4420994E0AC75C06CEBCEB4C7F9E8F1DC169
Authority key identifier: 1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232312e302f32342d3234203d3e20323635343632.roa
Signing time:             Thu 31 Aug 2023 20:32:56 +0000
ROA not before:           Thu 31 Aug 2023 20:27:56 +0000
ROA not after:            Thu 29 Aug 2024 20:32:56 +0000
asID:                     265462
IP address blocks:        168.196.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4c:44:20:99:4e:0a:c7:5c:06:ce:bc:eb:4c:7f:9e:8f:1d:c1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
        Validity
            Not Before: Aug 31 20:27:56 2023 GMT
            Not After : Aug 29 20:32:56 2024 GMT
        Subject: CN=CAD7A6E0D3BE557F824BBE3371681EDF57244B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:02:cd:b9:77:15:fa:cd:e3:25:71:19:a3:23:
                    2b:bd:89:8f:7f:e4:c8:6e:42:40:8c:5c:05:5f:a3:
                    31:94:b5:29:85:5c:fd:4c:4a:38:90:fa:97:92:d7:
                    a3:76:17:fb:be:0c:c7:2b:68:4f:43:d3:9d:65:ec:
                    38:a8:a5:35:f7:fe:39:86:dd:ea:d1:0d:b6:b8:5b:
                    6a:dd:e0:f6:b7:3a:5b:7b:33:78:a3:96:f7:3d:9b:
                    cc:fa:2f:d3:4e:8a:9b:ea:3a:1c:9f:50:b7:9f:d0:
                    6b:df:36:ce:db:42:71:1e:7d:b8:0a:80:52:5b:6c:
                    96:48:48:58:1a:01:00:55:b5:78:f1:cc:b8:f1:82:
                    8b:bf:db:0d:92:fe:e7:a3:30:d1:41:46:ee:30:d1:
                    5d:32:6f:e4:61:a7:0f:61:78:ac:e3:44:47:29:65:
                    81:11:eb:40:8d:4c:67:b3:83:1a:bd:dc:cf:5a:08:
                    9d:68:87:f4:18:09:f7:32:9b:4f:e8:2a:13:43:50:
                    39:e3:90:e1:43:f5:a6:ae:b3:ed:71:ae:f7:8b:2b:
                    f0:83:2c:25:d1:9e:6a:61:dd:a4:af:49:b9:95:f6:
                    19:29:b0:d2:97:28:4e:90:11:b4:a5:3c:b0:f3:b1:
                    3c:93:47:62:9c:94:2d:56:c1:73:c0:42:7b:13:22:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D7:A6:E0:D3:BE:55:7F:82:4B:BE:33:71:68:1E:DF:57:24:4B:92
            X509v3 Authority Key Identifier:
                keyid:1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232312e302f32342d3234203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:e7:8e:f2:9e:d7:32:97:7b:ff:d1:c9:bd:17:f8:29:0e:
         8f:fd:fa:e6:c6:00:19:27:ba:ff:9e:a3:a6:30:1a:07:18:49:
         1b:0d:6a:b6:64:55:73:a1:37:9c:49:67:e3:88:8a:aa:9c:8d:
         40:6f:c8:22:36:41:4e:a9:30:4f:80:5b:73:ee:e3:32:8a:38:
         74:b1:3b:9e:e8:7f:cc:2c:29:cc:8f:16:12:0b:66:65:16:72:
         17:1c:7e:37:fb:ae:50:c9:43:76:d2:67:77:e8:45:c6:1f:de:
         50:ca:05:b0:b7:4a:a2:5b:38:f4:66:1e:83:65:1a:eb:f3:90:
         e6:ee:0a:40:03:01:83:c3:bb:64:13:d3:5a:c6:36:b0:3d:42:
         e4:ca:b5:26:d8:f3:6e:fb:63:10:63:06:db:a8:49:b1:83:b4:
         7b:23:ef:a5:c6:bc:d8:61:3c:53:b8:9c:c7:e3:50:a0:2d:11:
         44:3d:47:74:55:24:4d:1e:34:16:47:9a:66:20:32:6f:8a:c8:
         55:01:95:f8:9b:72:78:79:73:54:85:7f:46:05:11:5a:fe:c4:
         52:ec:08:b6:6f:b0:03:24:fc:ba:3e:69:9d:1e:13:d6:20:dd:
         00:62:9e:bb:2b:87:7d:fd:d9:c4:04:99:71:39:a3:67:5f:6e:
         2b:c3:5c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org