Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35362e302f32322d3232203d3e20323634303235.roa
File:                     3136382e3139372e35362e302f32322d3232203d3e20323634303235.roa (raw, json)
Hash identifier:          SJKMO31mM7fX1HIllXmQwm8IvqWfqoPSf/dw6sGcu2k=
Subject key identifier:   9D:9A:9D:D7:5D:41:04:6F:4A:7A:88:B0:9B:63:7A:25:FE:DB:24:49
Certificate issuer:       /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial:       6EA0B53267F646D3C665E952E93613582AB8E266
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35362e302f32322d3232203d3e20323634303235.roa
Signing time:             Fri 08 Mar 2024 20:55:37 +0000
ROA not before:           Fri 08 Mar 2024 20:50:37 +0000
ROA not after:            Fri 07 Mar 2025 20:55:37 +0000
asID:                     264025
IP address blocks:        168.197.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a0:b5:32:67:f6:46:d3:c6:65:e9:52:e9:36:13:58:2a:b8:e2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
        Validity
            Not Before: Mar  8 20:50:37 2024 GMT
            Not After : Mar  7 20:55:37 2025 GMT
        Subject: CN=9D9A9DD75D41046F4A7A88B09B637A25FEDB2449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:5f:c2:36:13:18:65:fd:74:59:88:33:84:
                    b2:7c:02:a1:0d:6a:65:2f:36:eb:df:ad:73:63:cc:
                    36:de:b7:13:88:57:1c:17:7c:82:fd:70:b0:4e:6b:
                    48:97:aa:0c:f2:37:91:2c:ba:d6:4f:88:aa:5e:10:
                    99:79:fe:30:81:5d:0c:b5:fd:7c:82:d8:28:21:c1:
                    a9:d7:99:b3:65:9f:3b:b3:5d:72:9e:5e:72:d5:9e:
                    b7:af:b6:64:61:e0:08:d1:a5:27:11:18:83:2d:f4:
                    2a:5e:77:33:c8:f5:73:75:7f:af:06:dd:52:2d:9e:
                    7d:ba:61:7e:1c:8b:96:9d:71:3b:83:29:29:c8:98:
                    e4:6b:79:6d:57:99:f0:21:2f:ee:f4:1c:39:59:e1:
                    a1:4c:b2:00:dd:90:9b:f5:78:2f:be:4a:4d:96:77:
                    af:4e:0f:1e:19:65:d0:9f:5a:f2:e9:28:e1:ae:6e:
                    b2:ee:2c:27:3a:19:9e:eb:29:4f:6b:5a:8f:84:bd:
                    4a:05:27:c3:e5:a0:63:0c:fb:62:1f:46:23:f5:33:
                    7d:8c:3f:10:90:8c:c9:11:23:90:41:1d:4c:a1:58:
                    8f:a5:7b:30:9b:49:98:cc:8c:0b:18:e9:16:ac:0a:
                    27:5e:1a:e5:70:dc:44:f5:c5:9a:5e:98:e2:c3:ea:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9A:9D:D7:5D:41:04:6F:4A:7A:88:B0:9B:63:7A:25:FE:DB:24:49
            X509v3 Authority Key Identifier:
                keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35362e302f32322d3232203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:90:22:0c:4c:0a:6a:c7:e1:42:82:93:3c:a7:d4:e7:58:62:
         9a:7f:aa:65:a4:f1:de:3e:b1:ef:f4:89:6e:a7:a2:c5:62:d0:
         82:2e:7f:ec:78:7c:e5:b8:44:9a:e4:3c:ed:c3:15:d9:e6:f3:
         d6:e2:1c:40:8b:b2:fe:3b:03:02:27:76:ac:92:60:b7:c4:99:
         8b:6b:d2:32:b4:96:b1:94:01:d5:ee:76:71:45:a3:19:54:9f:
         05:ba:01:08:7c:08:ce:a3:b1:f1:92:03:3c:7e:40:d9:76:70:
         b3:f2:6c:fd:92:24:1c:b5:4c:ba:14:38:a2:2b:18:79:9e:40:
         cb:11:99:5f:18:70:1c:c9:05:d0:8d:bb:ca:f8:6f:fd:4a:17:
         34:61:f7:1b:e9:18:f3:36:6f:ab:76:2a:4a:25:9d:80:bd:45:
         e6:af:c6:f3:14:d2:df:6e:5c:36:e3:7e:8c:18:f6:d0:5d:3b:
         9c:15:43:3e:b1:3b:6c:9a:d8:e1:2f:b6:73:9e:93:ee:a3:a8:
         46:1d:ed:b2:0a:51:00:70:19:66:45:dc:2e:46:22:91:5c:2f:
         57:9c:cb:4f:99:be:3b:ed:a2:20:20:86:4c:32:4c:e4:9c:86:
         fb:d8:fc:6b:e8:61:d4:6c:2c:3f:a6:1c:b8:20:77:48:44:9f:
         e1:37:91:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org