Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3136382e3138312e31342e302f32332d3233203d3e20323635333335.roa
File:                     3136382e3138312e31342e302f32332d3233203d3e20323635333335.roa (raw, json)
Hash identifier:          QuYXLb+aU5z3JxgF02C/M3sG7zsQBB1pEWgMK0tyiHU=
Subject key identifier:   72:CF:58:79:FA:4D:E8:98:95:69:51:C9:DD:71:35:3A:83:0F:FA:B8
Certificate issuer:       /CN=8319C00145CEE71D1AC6721E2397253B924DE6E6
Certificate serial:       297AF029E71C85AE872B8DC9EE065DB7BBA37B48
Authority key identifier: 83:19:C0:01:45:CE:E7:1D:1A:C6:72:1E:23:97:25:3B:92:4D:E6:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8319C00145CEE71D1AC6721E2397253B924DE6E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3136382e3138312e31342e302f32332d3233203d3e20323635333335.roa
Signing time:             Thu 23 Mar 2023 12:35:51 +0000
ROA not before:           Thu 23 Mar 2023 12:30:51 +0000
ROA not after:            Thu 21 Mar 2024 12:35:51 +0000
asID:                     265335
IP address blocks:        168.181.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7a:f0:29:e7:1c:85:ae:87:2b:8d:c9:ee:06:5d:b7:bb:a3:7b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8319C00145CEE71D1AC6721E2397253B924DE6E6
        Validity
            Not Before: Mar 23 12:30:51 2023 GMT
            Not After : Mar 21 12:35:51 2024 GMT
        Subject: CN=72CF5879FA4DE898956951C9DD71353A830FFAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:1a:cd:db:72:1c:b3:cc:ad:93:27:e4:d8:
                    50:36:8d:76:44:1d:b3:f3:da:9f:9d:4b:a6:c0:e0:
                    17:cd:d0:d0:c4:d5:83:d1:74:ad:e9:77:13:d7:c1:
                    be:52:42:ec:70:f3:82:80:05:12:84:c4:7c:3a:fe:
                    b1:36:b9:2a:57:7b:93:ef:a4:5d:d6:c8:1d:4e:14:
                    5a:e6:e0:61:e9:5a:29:a6:5c:fc:c6:6f:92:35:d3:
                    db:e8:4c:c2:5b:0b:12:9a:6a:17:bd:85:f7:87:bc:
                    89:b0:8e:cb:6b:f1:fd:73:41:8f:2c:76:d5:72:34:
                    f0:c4:ec:75:8b:1e:f5:98:3d:68:0f:e0:56:81:ff:
                    be:72:a1:68:ae:16:73:3d:19:b1:19:a7:94:7a:7e:
                    81:52:bc:44:04:cf:4a:18:5c:26:9d:1c:cf:c5:bd:
                    73:02:e1:4c:2f:2d:83:f7:e0:4c:d2:13:7b:91:21:
                    b2:80:96:d4:b8:5e:fe:5d:18:8a:9b:3d:9a:19:bc:
                    42:88:fd:02:68:7d:46:ca:3c:44:c4:3a:2e:5c:2d:
                    74:bf:ca:24:c4:30:ee:b8:2d:37:d3:ba:2b:d5:11:
                    84:c3:05:db:91:72:77:92:8a:da:d4:36:19:f2:23:
                    fb:d4:69:8f:cd:b0:76:41:c3:46:7a:d1:34:5f:4e:
                    f6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CF:58:79:FA:4D:E8:98:95:69:51:C9:DD:71:35:3A:83:0F:FA:B8
            X509v3 Authority Key Identifier:
                keyid:83:19:C0:01:45:CE:E7:1D:1A:C6:72:1E:23:97:25:3B:92:4D:E6:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/8319C00145CEE71D1AC6721E2397253B924DE6E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8319C00145CEE71D1AC6721E2397253B924DE6E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3136382e3138312e31342e302f32332d3233203d3e20323635333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:c1:aa:6c:29:11:a9:55:7b:2c:f6:05:0a:b6:28:d0:5b:17:
         65:ce:20:bc:d4:e8:a8:36:54:9a:e3:0d:ac:74:1e:88:e7:a8:
         e7:28:fa:3a:3b:24:48:5e:96:f8:33:1e:b1:0e:55:2f:75:f2:
         74:a4:8c:3b:5e:04:b3:e3:08:d9:64:1c:45:fd:43:6d:98:a6:
         c6:27:b9:b6:3d:ba:fd:b1:a4:c8:9f:4c:aa:79:25:45:f7:1f:
         86:cf:71:9b:24:35:d8:5c:36:cf:08:c5:d2:34:7b:c4:8c:dc:
         1d:5c:84:f3:5d:67:3e:02:db:45:e1:36:58:39:18:8a:a4:05:
         68:97:15:48:75:c6:f7:41:5f:d0:81:1c:d5:2b:c6:fa:53:62:
         bf:1f:e4:b1:8a:7c:eb:3d:5f:42:cd:30:70:33:e0:cb:bb:48:
         6d:be:e9:68:52:8f:b1:7d:59:d8:eb:df:94:2e:e6:f0:48:6f:
         e1:31:b1:b7:b1:5b:c2:38:9b:3e:32:db:88:e4:01:e8:89:87:
         1c:f3:f2:91:20:fc:df:4d:f6:2a:8c:7f:ef:2a:ea:c8:e7:8b:
         49:75:2e:23:bb:b8:bc:43:49:1c:cb:f6:dc:3d:fe:5f:ec:3a:
         4d:1a:a5:3f:ee:ae:a2:40:41:af:91:4d:f0:ea:14:13:b6:c1:
         48:a5:38:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org