Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa
File:                     3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa (raw, json)
Hash identifier:          br3FAN1VjGnLSLhfwMfgywmNkMXafXesyeBEJ/qVe94=
Subject key identifier:   D6:6E:75:5E:47:BC:32:C5:F0:D9:F9:57:AE:C3:5D:13:94:1D:A6:5E
Certificate issuer:       /CN=089532F8915FBA77F2B07B59B91FADAD8FE95EB0
Certificate serial:       549CEA41BF9E02D88ABB8CE8D87E9027003E90A1
Authority key identifier: 08:95:32:F8:91:5F:BA:77:F2:B0:7B:59:B9:1F:AD:AD:8F:E9:5E:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa
Signing time:             Wed 03 Apr 2024 22:00:37 +0000
ROA not before:           Wed 03 Apr 2024 21:55:37 +0000
ROA not after:            Wed 02 Apr 2025 22:00:37 +0000
asID:                     265487
IP address blocks:        168.197.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9c:ea:41:bf:9e:02:d8:8a:bb:8c:e8:d8:7e:90:27:00:3e:90:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089532F8915FBA77F2B07B59B91FADAD8FE95EB0
        Validity
            Not Before: Apr  3 21:55:37 2024 GMT
            Not After : Apr  2 22:00:37 2025 GMT
        Subject: CN=D66E755E47BC32C5F0D9F957AEC35D13941DA65E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:c6:21:fb:1e:df:fa:b4:10:db:08:b5:ee:
                    5d:c4:0f:58:c5:bd:99:5e:46:7d:0f:62:0b:35:01:
                    bd:72:42:4a:b7:bc:f4:d2:6e:a5:8f:f8:87:dd:c3:
                    d6:4a:66:a3:f0:a2:61:de:7c:8a:33:e3:55:53:3d:
                    17:5b:c2:3d:b3:22:0d:fc:ee:fd:ef:d5:14:6c:db:
                    a3:9c:ef:22:13:90:ac:eb:94:8f:20:3a:99:6e:87:
                    20:8e:fb:2b:ec:75:26:20:07:f1:5b:2a:cf:2e:2e:
                    b1:af:1f:6f:80:df:21:a9:7b:de:8f:7b:bb:a1:7e:
                    87:ae:ca:e6:03:5c:25:95:44:01:f6:e6:c9:79:f5:
                    4e:80:d6:e1:5e:61:1c:b1:c8:1e:9d:0f:54:8a:c8:
                    5b:fd:5b:2d:30:be:81:43:80:14:c1:a3:10:33:4c:
                    a5:af:59:55:bd:c4:e9:77:02:0f:56:20:d7:30:1e:
                    a8:4b:65:34:21:ee:ee:06:c6:11:a7:c1:3d:21:4d:
                    57:a1:75:f6:2e:f3:dd:88:fd:2c:ae:ba:5a:59:e7:
                    c4:1c:a2:44:e7:27:c7:32:46:87:10:34:f9:9f:34:
                    73:6d:29:4a:c6:89:10:f8:67:17:85:ee:48:9f:7a:
                    37:58:73:59:ff:6d:cb:97:b4:49:a0:55:5f:26:47:
                    1d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6E:75:5E:47:BC:32:C5:F0:D9:F9:57:AE:C3:5D:13:94:1D:A6:5E
            X509v3 Authority Key Identifier:
                keyid:08:95:32:F8:91:5F:BA:77:F2:B0:7B:59:B9:1F:AD:AD:8F:E9:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:66:46:2b:5a:6f:c2:6f:70:ca:f9:7c:c5:58:ce:e7:3e:bc:
         8e:cc:26:73:34:00:c7:29:f6:5e:7e:9a:18:0f:21:b2:1f:96:
         94:40:88:d5:c1:01:0d:f1:58:3a:c6:1f:43:54:65:03:f5:62:
         fc:fb:d7:f8:3e:b9:3a:ab:54:0e:16:a4:24:b8:7a:23:03:bd:
         83:c2:ba:10:1d:3d:ec:81:e2:a5:ef:15:56:35:2f:8a:92:98:
         1e:25:0b:06:a7:31:ec:87:1c:c1:1c:2c:95:de:2f:8b:57:1e:
         48:21:db:5f:49:d5:e6:a3:57:2d:e7:32:f3:b9:e0:fe:ab:95:
         d4:84:aa:a2:73:3b:5d:00:1d:d2:5e:cf:1c:11:48:88:2c:2a:
         2c:f2:1f:a0:e6:52:b7:a2:74:3a:cf:cb:f6:6c:dc:56:45:3a:
         55:52:c3:54:21:9f:2d:11:7c:a3:73:cf:25:26:df:1c:62:3f:
         ba:4c:95:e3:40:e3:9e:1f:30:18:e9:1b:22:95:71:23:f0:0a:
         d5:57:51:f9:4b:d8:bf:c6:4c:94:55:54:17:30:23:2d:49:1f:
         45:a8:7f:5b:aa:79:06:c0:c1:d2:7d:a7:65:d6:91:25:a9:ec:
         03:a3:13:2d:7d:5d:5a:e1:8c:22:ad:bc:9f:cd:b6:23:cb:8f:
         2a:f8:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org