Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/3136382e3139352e3135322e302f32342d3332203d3e20323635343335.roa
File:                     3136382e3139352e3135322e302f32342d3332203d3e20323635343335.roa (raw, json)
Hash identifier:          76SaW+VF+yZwCHIVCuQBoezRZkjVGCJHgDYw6Giem+4=
Subject key identifier:   7D:8D:B1:22:8D:A6:6D:14:0F:58:32:90:49:00:A4:EA:00:02:09:1F
Certificate issuer:       /CN=7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B
Certificate serial:       13FFCB1C99AC3373DD92EED50FCB1EF3F8DA32B4
Authority key identifier: 7A:C3:F8:6B:BB:41:4B:AC:E7:98:C3:4B:BF:24:8A:BF:FE:48:CB:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/3136382e3139352e3135322e302f32342d3332203d3e20323635343335.roa
Signing time:             Sat 18 Mar 2023 18:29:31 +0000
ROA not before:           Sat 18 Mar 2023 18:24:31 +0000
ROA not after:            Sat 16 Mar 2024 18:29:31 +0000
asID:                     265435
IP address blocks:        168.195.152.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ff:cb:1c:99:ac:33:73:dd:92:ee:d5:0f:cb:1e:f3:f8:da:32:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B
        Validity
            Not Before: Mar 18 18:24:31 2023 GMT
            Not After : Mar 16 18:29:31 2024 GMT
        Subject: CN=7D8DB1228DA66D140F5832904900A4EA0002091F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:7a:ac:16:7b:2e:87:b7:1a:6e:c0:c7:ab:
                    92:a7:d2:f3:0e:e8:7d:a8:8f:fd:55:7b:e6:24:9e:
                    26:86:17:03:d5:71:d7:7b:11:d3:de:75:cf:fe:49:
                    fe:b5:4c:fe:96:c7:4b:15:8b:b6:cc:c7:9d:9d:eb:
                    f2:39:0d:24:d6:d5:54:1d:4e:34:a3:34:ce:dd:39:
                    e7:bd:64:7b:72:aa:c9:4a:0c:51:e5:c8:37:73:72:
                    9f:70:03:bc:32:1f:5f:6f:a3:f6:d8:9e:18:76:40:
                    df:6d:62:02:61:d4:ee:55:e1:fc:67:ba:9b:50:a4:
                    80:cf:da:63:c5:b3:72:51:c6:f0:ab:4e:95:49:98:
                    d3:af:ad:d6:f7:34:14:c5:9d:c2:1a:6d:cc:08:a2:
                    74:48:94:08:ae:5a:85:d6:0c:e8:56:23:e6:90:9c:
                    16:ab:d3:14:d9:07:6d:5b:f5:56:31:a1:bd:f3:fc:
                    d9:a0:e6:0c:d8:d6:d8:72:0c:40:e7:0e:58:fc:03:
                    f9:61:37:04:27:8e:52:cf:33:cb:73:c9:c6:88:3f:
                    7d:eb:0c:f1:3a:53:72:26:51:83:9a:30:3f:1d:0a:
                    14:4a:08:19:cc:6c:f2:5e:b8:42:eb:f7:37:c1:f4:
                    50:c9:43:44:e8:76:2b:3a:d7:49:f6:40:80:83:f5:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8D:B1:22:8D:A6:6D:14:0F:58:32:90:49:00:A4:EA:00:02:09:1F
            X509v3 Authority Key Identifier:
                keyid:7A:C3:F8:6B:BB:41:4B:AC:E7:98:C3:4B:BF:24:8A:BF:FE:48:CB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/3136382e3139352e3135322e302f32342d3332203d3e20323635343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:9c:3c:4d:76:56:a0:a3:82:89:85:39:c1:86:ad:95:da:b9:
         57:a8:cb:7a:50:95:86:fd:ae:fb:25:63:14:03:5d:8c:7c:69:
         77:eb:82:78:c7:26:e1:01:a8:9f:99:07:05:0b:f0:85:d8:f5:
         25:ad:7c:e8:d4:2d:bf:12:f9:83:76:81:0d:7b:20:49:3b:20:
         27:68:35:4c:fa:c4:a9:a7:84:57:7b:c7:cc:df:ab:f5:0e:4b:
         9c:31:6b:f3:7f:73:78:ac:74:63:8b:81:4f:e2:a2:8b:53:d3:
         4b:f1:62:35:c5:78:c0:9e:78:72:aa:92:93:0a:8b:8e:cb:be:
         42:90:68:71:65:7c:a5:ce:bb:93:d6:ad:52:4b:14:9c:3c:47:
         d7:9c:ee:60:67:eb:43:24:a6:48:4f:c3:80:5e:5d:df:5f:6e:
         8c:71:0e:d7:8e:e6:1c:b2:5a:01:ef:65:9d:f1:bd:0d:76:85:
         3f:a5:99:dc:b5:32:04:c0:a3:ec:a5:d4:e4:e5:a6:a5:f9:e5:
         a6:73:f3:9c:bd:11:f1:4b:93:10:f0:be:43:bc:e0:9b:9a:fb:
         dd:ec:49:b6:b1:3a:9e:92:80:a1:40:66:ad:d5:5c:66:77:5a:
         72:ac:56:ed:98:cd:b4:dd:60:bd:5d:56:68:65:a4:7d:36:d3:
         60:1a:d5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org