Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa
File:                     3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa (raw, json)
Hash identifier:          22n7FQstVBQpTJbamyilrt4jbgidODsPIA4eDOluN94=
Subject key identifier:   F2:1A:1A:1E:77:F5:A3:EF:69:EF:B2:7B:6C:18:10:A8:81:EC:2F:E6
Certificate issuer:       /CN=29C9D754F8BEED45A868D3E229FE1DE3FB0A6FC8
Certificate serial:       64104C2619FF4ACBE1A29C5511EB3EDEBBC9102A
Authority key identifier: 29:C9:D7:54:F8:BE:ED:45:A8:68:D3:E2:29:FE:1D:E3:FB:0A:6F:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29C9D754F8BEED45A868D3E229FE1DE3FB0A6FC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa
Signing time:             Thu 27 Apr 2023 18:25:32 +0000
ROA not before:           Thu 27 Apr 2023 18:20:32 +0000
ROA not after:            Thu 25 Apr 2024 18:25:32 +0000
asID:                     265408
IP address blocks:        168.195.44.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:10:4c:26:19:ff:4a:cb:e1:a2:9c:55:11:eb:3e:de:bb:c9:10:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29C9D754F8BEED45A868D3E229FE1DE3FB0A6FC8
        Validity
            Not Before: Apr 27 18:20:32 2023 GMT
            Not After : Apr 25 18:25:32 2024 GMT
        Subject: CN=F21A1A1E77F5A3EF69EFB27B6C1810A881EC2FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:da:61:de:67:aa:2d:a3:bf:9b:b7:5e:4b:
                    3f:11:19:d4:2a:94:81:3a:88:a0:06:a7:4a:d4:54:
                    f0:4e:ec:47:91:bf:f2:6e:c2:67:b9:ff:46:34:f3:
                    42:eb:62:63:60:fa:20:d6:09:50:5d:4f:f9:3e:50:
                    e7:ec:df:80:15:15:57:a7:7e:ba:4f:13:a5:02:7b:
                    b1:16:ac:3f:17:77:9d:91:de:d8:48:77:47:ae:ea:
                    89:0b:d6:d0:75:9b:ba:fb:98:26:d5:56:db:6c:42:
                    b6:39:b5:5a:b7:a4:0a:f8:50:67:e4:4c:f7:fd:a8:
                    9a:82:0f:cf:35:f5:98:b7:db:55:09:c2:99:56:5c:
                    be:8a:16:bf:bd:04:bb:84:07:5d:10:f6:0b:2d:98:
                    ef:65:e4:bc:35:65:4f:b2:c6:3c:f0:31:02:76:b9:
                    db:04:bd:11:4f:2e:8e:2c:50:50:3d:17:d5:dc:62:
                    c5:2d:b9:e5:91:44:89:88:05:ac:52:8e:5b:d6:18:
                    55:75:90:49:3b:b5:bf:ed:d4:09:5a:ee:21:7f:c0:
                    ac:24:95:2d:c7:db:97:7b:60:b3:9e:94:dd:3d:d4:
                    a6:33:3d:37:f4:4d:8d:43:ea:15:ed:c6:1f:0e:fc:
                    86:83:bb:d7:ba:3b:cf:c1:6c:b5:fa:59:dd:0e:9b:
                    4c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1A:1A:1E:77:F5:A3:EF:69:EF:B2:7B:6C:18:10:A8:81:EC:2F:E6
            X509v3 Authority Key Identifier:
                keyid:29:C9:D7:54:F8:BE:ED:45:A8:68:D3:E2:29:FE:1D:E3:FB:0A:6F:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/29C9D754F8BEED45A868D3E229FE1DE3FB0A6FC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29C9D754F8BEED45A868D3E229FE1DE3FB0A6FC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:40:c6:6f:09:59:bc:69:3f:0c:ac:10:13:9e:d6:cd:90:73:
         5c:19:97:de:38:7f:bd:f6:d9:00:7a:60:bd:6c:17:d8:fb:08:
         bc:8f:8d:c6:40:a5:24:9a:41:1f:32:df:9d:96:71:62:e4:f2:
         c0:a2:3a:46:84:59:53:84:6e:16:e6:ef:c3:4f:88:c0:00:da:
         ae:7c:23:9a:f4:7c:86:25:64:56:8a:91:4c:d2:d2:d5:24:4d:
         19:e8:e4:cc:6a:fd:e6:fc:51:a3:87:fe:de:ab:0b:da:de:66:
         db:b1:a8:87:41:23:24:4a:47:80:4c:7a:07:b3:95:97:36:98:
         31:7c:ef:e2:13:a9:c6:47:82:88:58:b5:7a:fb:fa:ed:c6:e5:
         84:06:b0:3e:15:51:19:14:e5:d4:08:c2:68:6d:d2:50:e4:3d:
         e6:ed:4f:e0:ef:26:35:f9:7e:b8:60:18:54:8b:b9:ae:58:b0:
         5d:ab:d1:1e:33:23:08:21:bc:07:75:5f:7a:27:75:8f:ce:4f:
         f3:53:bb:01:1a:d9:d9:8c:ce:2e:fb:be:cb:ba:3f:73:5a:96:
         cc:6f:cf:e9:b6:be:f7:0e:78:ab:7b:6c:77:f6:d6:cc:1d:ab:
         0f:a9:41:2a:64:03:3d:00:a7:a6:28:65:86:67:50:fe:16:98:
         72:43:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org