Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/3136382e3139362e34302e302f32322d3234203d3e20323635343432.roa
File:                     3136382e3139362e34302e302f32322d3234203d3e20323635343432.roa (raw, json)
Hash identifier:          cfFoK6ZmyQK+LklWG+hauAoT4BssrRB1AdOiwR/CfZA=
Subject key identifier:   83:B3:CC:42:E8:18:85:54:E2:CF:D7:97:A4:AD:67:0C:6B:E8:03:4C
Certificate issuer:       /CN=96241E2937532ADFA240CD6F40331679CB3DEFD8
Certificate serial:       35DFD26131F3E7846C997E8880C17512E26846CA
Authority key identifier: 96:24:1E:29:37:53:2A:DF:A2:40:CD:6F:40:33:16:79:CB:3D:EF:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/3136382e3139362e34302e302f32322d3234203d3e20323635343432.roa
Signing time:             Mon 31 Jul 2023 17:55:54 +0000
ROA not before:           Mon 31 Jul 2023 17:50:54 +0000
ROA not after:            Mon 29 Jul 2024 17:55:54 +0000
asID:                     265442
IP address blocks:        168.196.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:df:d2:61:31:f3:e7:84:6c:99:7e:88:80:c1:75:12:e2:68:46:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96241E2937532ADFA240CD6F40331679CB3DEFD8
        Validity
            Not Before: Jul 31 17:50:54 2023 GMT
            Not After : Jul 29 17:55:54 2024 GMT
        Subject: CN=83B3CC42E8188554E2CFD797A4AD670C6BE8034C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:47:c4:ad:0a:de:9f:29:70:9c:4f:eb:29:
                    73:97:10:fb:09:11:b5:96:2d:49:84:03:50:6c:a6:
                    e9:1d:82:06:f6:bb:8a:a5:46:ef:46:ed:fb:23:92:
                    32:57:69:f4:5f:0b:15:b5:a3:23:91:fe:99:bf:c0:
                    d1:ad:cb:9c:83:56:4f:03:25:eb:24:02:c7:ef:b0:
                    10:9b:f4:49:88:cf:96:c7:ec:cf:75:b1:d9:66:cf:
                    92:77:74:ec:a1:b9:02:08:e0:31:93:1d:a0:18:d4:
                    ec:8e:8b:2a:59:27:12:cc:65:a1:30:6b:da:a2:72:
                    48:c2:c1:ab:b7:c0:b0:bd:45:d5:b2:72:61:86:6a:
                    e6:73:76:b1:0d:25:15:9d:c9:b0:c9:47:64:8b:f8:
                    f9:96:eb:2a:aa:e8:ca:7a:a2:ec:b7:d9:c7:29:8d:
                    9e:f3:82:d1:f5:43:9a:45:c1:41:60:ee:84:6d:0f:
                    64:c2:44:cc:25:07:c6:b7:88:d9:73:57:70:c0:88:
                    0a:46:0c:46:dd:7b:6f:86:01:ee:a1:10:61:c5:40:
                    c4:8b:e6:6e:ba:f9:5f:67:c0:34:7f:c3:3f:01:42:
                    46:ab:06:dd:ef:45:42:39:da:0f:d4:27:05:26:8d:
                    be:d2:47:cd:dc:26:dd:eb:6e:43:16:07:56:07:5b:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B3:CC:42:E8:18:85:54:E2:CF:D7:97:A4:AD:67:0C:6B:E8:03:4C
            X509v3 Authority Key Identifier:
                keyid:96:24:1E:29:37:53:2A:DF:A2:40:CD:6F:40:33:16:79:CB:3D:EF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/3136382e3139362e34302e302f32322d3234203d3e20323635343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:ec:c4:1a:f0:96:29:2e:8a:c5:0a:a4:8e:22:19:f5:09:51:
         61:db:a9:fd:f9:3b:67:4e:d1:ec:42:91:50:d8:d6:d9:68:c6:
         ac:36:25:d4:63:19:43:70:3e:09:ba:ab:de:f0:57:84:82:3f:
         91:4d:f6:82:f1:db:78:26:0f:f8:59:c3:9a:51:6f:de:aa:93:
         18:e2:fe:85:d4:bc:3a:68:d1:fb:d5:3c:78:86:c7:b6:03:55:
         57:30:91:d5:2e:c3:f7:ef:c5:30:20:31:55:5b:ac:83:4a:d8:
         76:97:48:a8:fb:0a:67:aa:54:cc:b5:b3:41:4f:64:bb:14:59:
         9c:1f:65:0e:e0:5c:ad:bb:31:8f:e0:84:12:a9:6e:75:1b:1a:
         0a:b0:a0:dd:0c:13:41:8c:30:60:28:99:92:ea:3f:91:07:f0:
         2f:bd:dc:cf:dd:75:b8:28:51:91:f2:9e:73:c4:a2:4e:cc:9d:
         a1:6c:af:f0:a6:45:14:77:ea:19:da:9f:e3:b8:74:a1:0e:32:
         dd:56:76:ab:02:13:26:17:a3:22:96:8c:49:b7:b1:3b:8d:dd:
         c4:ba:f1:2b:9a:87:e5:84:92:bb:e4:6e:1a:e0:51:4c:32:54:
         b5:c5:fb:d1:f9:dd:32:4e:b5:19:a7:57:71:42:77:82:80:75:
         10:f7:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org