Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3133302e302f32342d3234203d3e20323635333635.roa
File:                     3136382e3230352e3133302e302f32342d3234203d3e20323635333635.roa (raw, json)
Hash identifier:          S46WCc+eMP6piDrDsV1u0r0LY/C6UefXAzHkBxhPikk=
Subject key identifier:   B8:1D:67:A5:52:52:E4:10:EF:1B:31:AD:5E:9C:96:D3:B3:75:11:AA
Certificate issuer:       /CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
Certificate serial:       7321CDA00843D896B1F01418A672B41163A7DEC8
Authority key identifier: 47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3133302e302f32342d3234203d3e20323635333635.roa
Signing time:             Sun 14 Jan 2024 12:00:00 +0000
ROA not before:           Sun 14 Jan 2024 11:55:00 +0000
ROA not after:            Sun 12 Jan 2025 12:00:00 +0000
asID:                     265365
IP address blocks:        168.205.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:21:cd:a0:08:43:d8:96:b1:f0:14:18:a6:72:b4:11:63:a7:de:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
        Validity
            Not Before: Jan 14 11:55:00 2024 GMT
            Not After : Jan 12 12:00:00 2025 GMT
        Subject: CN=B81D67A55252E410EF1B31AD5E9C96D3B37511AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:b1:10:ad:34:d7:c9:66:81:4c:e8:da:b7:
                    53:fb:6e:bc:a6:82:4a:2f:9f:c8:b5:4e:5a:16:4a:
                    95:4b:0c:2f:a2:2c:73:fb:a5:0f:37:f6:46:2d:3b:
                    6d:75:23:86:fa:a5:77:7e:e1:d2:39:4b:7f:af:05:
                    67:c0:27:ed:3d:bd:7f:17:b1:36:cf:d2:ed:49:cc:
                    21:d8:f0:ca:4a:f0:c9:32:f8:63:5c:ec:85:f8:a3:
                    20:f2:40:42:4c:a0:5d:1c:da:b7:5d:36:3d:42:58:
                    c5:1e:3a:b3:31:8a:02:36:bc:e4:b9:05:b1:1a:dd:
                    27:36:ff:df:c5:ba:f0:93:ef:b2:f4:41:ba:2a:72:
                    7e:f1:19:1d:a2:ac:c2:88:36:3f:7a:ba:21:81:a2:
                    9f:1d:ac:4c:6e:23:e4:ce:0b:66:ca:7f:b6:cd:9c:
                    7a:ee:02:51:c1:9d:a1:3f:73:f4:f9:65:77:b4:7c:
                    86:ff:b6:e9:e6:80:e3:6e:0d:c5:14:2c:cc:44:f4:
                    20:f0:b5:14:0f:f3:ac:f4:53:f8:2f:dd:84:5d:22:
                    a0:c1:cd:18:fd:c8:af:c7:3f:68:07:50:46:d8:82:
                    15:b7:ae:84:d3:a1:5f:f0:5b:9f:31:40:e4:7f:db:
                    b5:c7:e8:aa:74:79:a4:01:88:2d:2a:a2:b2:3e:af:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1D:67:A5:52:52:E4:10:EF:1B:31:AD:5E:9C:96:D3:B3:75:11:AA
            X509v3 Authority Key Identifier:
                keyid:47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3133302e302f32342d3234203d3e20323635333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:fe:3e:82:cf:e5:a7:45:d2:1b:92:f2:1d:24:5a:d3:cf:f2:
         06:90:23:82:8a:58:96:62:2b:61:8e:d8:03:0d:fa:7d:14:37:
         a7:ad:6b:d9:82:a4:08:74:0d:22:e0:4d:1c:76:02:f7:dc:63:
         cc:1b:36:ab:b8:17:f0:f4:86:ce:66:13:d6:f3:4c:fe:94:58:
         45:3e:7b:26:f6:f9:8c:26:23:65:97:7d:eb:57:b5:75:0c:d8:
         2e:5e:72:d3:c8:cb:8c:43:45:64:12:c2:9b:2e:81:05:e5:f7:
         6b:ce:27:58:d8:89:2d:b0:b0:99:04:e0:0d:05:41:5e:76:77:
         9b:f2:7c:cd:14:c1:29:c8:40:7a:d1:18:29:45:45:14:9d:36:
         ce:6a:20:84:81:ed:a5:2b:11:01:3d:98:1d:52:22:77:14:a6:
         32:ec:e7:b9:6c:1f:df:0c:34:c7:20:6f:6a:e3:48:55:e4:41:
         89:8b:04:ea:fc:77:61:0a:39:03:97:c7:12:16:3a:4b:72:56:
         9d:8b:66:b9:0a:b3:1a:c3:d1:94:e8:83:28:1b:4b:ed:ce:73:
         f7:50:25:8a:ff:71:fa:f4:7a:11:f2:d9:9b:31:26:96:45:a0:
         a5:c3:93:8e:07:1e:02:99:ae:92:90:0a:60:b3:5e:7d:9d:31:
         fa:ac:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org