Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3136382e3233322e3138342e302f32322d3234203d3e203631363332.roa
File:                     3136382e3233322e3138342e302f32322d3234203d3e203631363332.roa (raw, json)
Hash identifier:          XrN3AnxyxUIpoypfmXf6hpVvTk1C15saOs71evxGwPU=
Subject key identifier:   37:65:7C:58:10:86:6F:C9:1F:B2:45:E7:D4:E8:53:92:23:E8:40:2B
Certificate issuer:       /CN=A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4
Certificate serial:       3D2330068C89C8CEEE203DC296777F1180750A82
Authority key identifier: A7:A9:4F:13:9E:AB:DF:3D:B9:FC:5F:1C:56:6F:4C:7A:64:D5:87:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3136382e3233322e3138342e302f32322d3234203d3e203631363332.roa
Signing time:             Mon 21 Feb 2022 14:20:00 +0000
ROA not before:           Mon 21 Feb 2022 14:15:00 +0000
ROA not after:            Mon 20 Feb 2023 14:20:00 +0000
asID:                     61632
IP address blocks:        168.232.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:23:30:06:8c:89:c8:ce:ee:20:3d:c2:96:77:7f:11:80:75:0a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4
        Validity
            Not Before: Feb 21 14:15:00 2022 GMT
            Not After : Feb 20 14:20:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:2b:2d:e3:cd:64:15:87:d7:05:9f:3f:5a:
                    d1:6c:88:48:b7:dd:1e:20:1d:61:ac:60:d4:ee:2f:
                    d8:d8:e4:46:06:34:0c:01:b6:4c:fa:42:c8:16:8f:
                    31:8a:26:78:c4:e8:67:35:33:d1:d1:61:2d:7e:5b:
                    63:cc:f1:49:6b:58:6d:b7:99:14:f2:70:4a:27:d4:
                    e2:06:3b:a9:89:9e:08:c3:2f:74:48:0c:1b:eb:73:
                    c7:c3:99:9d:11:f0:a2:0d:0e:1b:61:98:81:0c:bc:
                    88:2c:bf:06:c3:22:79:55:05:ed:a4:a8:69:76:94:
                    13:c2:6b:98:f0:6a:c9:46:26:ce:f4:49:99:de:8e:
                    df:a1:7b:05:09:ec:f6:d5:c0:3c:30:dc:0b:3a:3a:
                    f9:76:a2:d2:8b:fd:b1:d5:b3:f3:08:80:15:1b:4e:
                    ce:ca:0a:5c:67:e8:df:44:40:57:84:7d:52:7f:de:
                    17:dc:23:cf:a8:99:0c:e7:ac:25:b5:f3:47:7c:6e:
                    75:eb:94:e3:8a:29:99:3d:fe:6c:36:97:23:bf:b4:
                    1f:99:4a:fd:6e:3b:f2:54:e1:0b:8e:0f:47:71:b3:
                    7a:17:83:be:3f:84:ec:7c:1c:a7:a7:9e:c4:4d:68:
                    e1:5b:e2:32:67:95:e7:d0:0e:07:3b:88:a2:56:9e:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:65:7C:58:10:86:6F:C9:1F:B2:45:E7:D4:E8:53:92:23:E8:40:2B
            X509v3 Authority Key Identifier:
                keyid:A7:A9:4F:13:9E:AB:DF:3D:B9:FC:5F:1C:56:6F:4C:7A:64:D5:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3136382e3233322e3138342e302f32322d3234203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:e7:10:66:2f:75:29:35:d2:11:60:c7:4b:ae:08:f1:06:e7:
         e1:77:d7:5a:d3:44:a9:22:52:40:fe:91:92:11:d2:0a:ea:9e:
         33:6d:c8:15:72:bb:be:2d:8c:ac:b5:4c:a4:ad:77:88:52:df:
         ec:8f:0c:bb:ad:68:90:fd:cb:99:f9:4a:96:5d:0b:52:ca:b3:
         3b:01:0c:28:c4:10:1c:51:ae:3b:73:7d:f8:03:ee:60:2d:72:
         68:d4:57:0b:f5:26:4b:d2:1d:35:26:ce:c6:b6:76:f2:fb:e9:
         54:1a:25:6d:6a:d6:05:83:56:d5:a2:50:9d:63:33:0b:78:2e:
         53:2f:a2:bd:08:22:72:3b:99:25:6c:b5:81:5d:83:da:1f:46:
         74:d4:89:5d:57:ca:b5:db:0a:02:f3:f5:b3:c3:d6:c8:2f:4a:
         27:e7:81:75:70:80:b7:0c:e5:94:86:f9:03:a8:b1:0e:f5:2c:
         2f:16:80:5b:6b:51:42:e9:a0:3b:fb:bf:26:9f:ac:58:0d:28:
         c5:c6:06:64:37:0c:be:a0:ad:b4:10:8d:15:35:a7:6c:d9:53:
         3a:e2:32:e5:05:61:7f:c4:9f:7a:ce:34:00:04:fe:91:a9:15:
         b2:ce:00:e6:53:57:63:59:b6:2e:c8:33:f8:9b:34:5e:60:29:
         7c:2a:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:44 2023 by rpki-client on console-ams.rpki-client.org