Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32342d3234203d3e20323632333136.roa
File:                     3136372e3235302e3135322e302f32342d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          QuoqJX+u2kY1UXMtuHI+up8pv+yO8bhfvXPoF0rXeOk=
Subject key identifier:   70:A9:6B:3A:FE:DE:DE:79:71:4F:17:3B:4A:ED:D9:4C:F4:9C:6A:33
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       2A6C6A2819A0F91AA2501BBA04BD495AAB982D7E
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32342d3234203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:38 +0000
ROA not before:           Mon 21 Aug 2023 13:21:38 +0000
ROA not after:            Mon 19 Aug 2024 13:26:38 +0000
asID:                     262316
IP address blocks:        167.250.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6c:6a:28:19:a0:f9:1a:a2:50:1b:ba:04:bd:49:5a:ab:98:2d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:38 2023 GMT
            Not After : Aug 19 13:26:38 2024 GMT
        Subject: CN=70A96B3AFEDEDE79714F173B4AEDD94CF49C6A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:10:9b:7b:48:a3:2e:8d:05:60:f8:bb:6c:
                    89:a6:a1:b8:73:c0:ab:96:d7:bb:34:34:63:60:ec:
                    a5:41:ed:31:93:1c:0d:b9:30:55:75:ea:c8:39:62:
                    32:70:72:71:c4:e2:49:c8:84:2d:39:55:ef:cd:4c:
                    c4:e9:fa:5c:5d:67:fa:10:8f:ba:5f:3e:cb:38:e7:
                    78:1c:7e:9d:cc:6e:13:de:07:ca:bd:9d:fb:85:d3:
                    54:32:3a:5d:78:16:8d:99:d6:41:2f:94:92:b8:f3:
                    3c:a1:2b:2e:43:8d:6c:35:87:b2:aa:97:ab:72:66:
                    18:4f:ff:67:af:67:c4:7a:a3:89:1b:a1:57:b0:da:
                    49:c4:2b:3f:90:1f:ec:04:c1:62:ef:31:11:7c:45:
                    e2:d8:41:b6:be:eb:97:ec:22:a6:90:86:b1:7a:13:
                    fe:21:9b:ff:81:8e:6d:9f:bf:3d:6b:d0:45:85:54:
                    8f:d7:f8:47:5c:38:fb:ca:8a:c9:95:14:b0:e7:78:
                    98:d9:a0:c9:25:68:e7:ed:eb:89:69:e2:ba:2e:38:
                    2b:86:72:cf:0f:20:07:bf:60:da:12:79:53:09:08:
                    96:02:67:03:97:d3:bd:24:df:8e:e7:bf:92:c7:06:
                    4e:cd:ec:bf:7b:c0:d4:34:b3:0e:8b:e6:4b:74:07:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A9:6B:3A:FE:DE:DE:79:71:4F:17:3B:4A:ED:D9:4C:F4:9C:6A:33
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32342d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:36:c0:a0:51:fe:6f:38:62:21:16:b8:d3:39:19:1f:ef:cf:
         a8:1e:9d:33:88:fd:2b:c9:a3:84:fd:5a:5e:9d:5b:33:28:24:
         75:b8:bc:e0:ad:1c:87:39:d6:bf:c1:9d:08:54:cf:d1:65:58:
         e2:80:40:6d:3f:24:f4:5e:6f:a7:08:40:24:10:6e:75:b7:73:
         e2:57:fe:c8:43:85:0c:bf:f9:f6:e2:32:ef:fb:46:4b:3d:c8:
         c4:32:6e:00:79:0b:c5:4a:4e:74:65:19:6b:cc:20:66:58:6f:
         2e:2c:ef:a1:13:6a:28:00:f4:e8:99:41:a8:79:3e:fa:bf:f4:
         8b:46:5b:09:f2:69:b7:96:9f:c2:e2:fd:32:79:70:2b:8f:4d:
         61:38:80:50:f9:c6:1c:cc:b4:14:d5:b1:57:fa:03:4f:84:30:
         50:1e:5e:14:7e:c1:d5:a6:9d:d9:a9:f2:03:3d:ba:7f:26:1a:
         29:d0:a3:31:67:78:4a:9d:b6:2c:b7:8a:cc:fb:29:0e:71:96:
         a2:af:b8:a3:c3:1d:90:0e:de:0a:29:4a:97:5e:af:75:ef:b0:
         02:68:de:05:0d:49:37:35:9e:33:45:52:c2:d9:32:75:b5:8e:
         d0:94:29:a1:9b:ed:05:ea:fb:af:f3:6f:2a:14:ab:0d:8f:db:
         cf:08:18:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org