Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa
File:                     3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa (raw, json)
Hash identifier:          FmT7W2moMIS5jkq3VcpWZHaHc6splPA93V1b/2XHA2w=
Subject key identifier:   45:06:1B:71:A4:DB:E6:4C:9E:DB:95:00:6B:B8:38:B5:D3:50:D4:D7
Certificate issuer:       /CN=380AE62845C4468F9462327C41A0D22DA68054FD
Certificate serial:       3EDF7FB232650CC6B1BE97D4DE542B511927FA67
Authority key identifier: 38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa
Signing time:             Tue 23 Jan 2024 13:03:10 +0000
ROA not before:           Tue 23 Jan 2024 12:58:10 +0000
ROA not after:            Tue 21 Jan 2025 13:03:10 +0000
asID:                     262908
IP address blocks:        168.196.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:df:7f:b2:32:65:0c:c6:b1:be:97:d4:de:54:2b:51:19:27:fa:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380AE62845C4468F9462327C41A0D22DA68054FD
        Validity
            Not Before: Jan 23 12:58:10 2024 GMT
            Not After : Jan 21 13:03:10 2025 GMT
        Subject: CN=45061B71A4DBE64C9EDB95006BB838B5D350D4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:91:fe:84:56:c3:4c:70:8f:9a:86:76:ac:
                    85:69:16:e1:b7:14:90:ad:d5:a3:3c:97:3b:4a:37:
                    b0:b3:f9:68:8a:43:f7:1c:96:b7:c4:f7:3b:e9:86:
                    e2:dd:47:d3:85:18:7d:ec:7b:a0:5c:be:f5:17:c9:
                    3c:8e:06:f0:d1:e8:f7:ad:f2:27:00:01:2f:ff:09:
                    74:0a:88:29:45:de:7d:20:ed:77:4d:21:a7:52:c1:
                    d5:b1:12:e1:54:ad:b5:ae:a8:d1:37:de:8a:c4:7f:
                    f3:cb:aa:25:57:d0:2e:3f:bb:11:88:30:7f:45:5d:
                    61:fb:3e:8b:3a:79:ea:31:c8:eb:f6:42:7a:9f:60:
                    0a:9b:63:0a:14:ee:a4:dc:67:b2:88:56:26:9c:aa:
                    92:96:c9:95:16:a5:2d:16:19:d6:bf:8b:f7:ca:11:
                    a1:26:4d:04:9f:28:f8:33:67:0e:39:a4:90:9c:37:
                    1d:dc:5e:38:72:58:91:99:6f:b3:59:ed:bc:e0:fa:
                    58:15:5f:44:9e:ec:ee:6e:b6:76:0b:d2:b3:b3:f5:
                    63:03:8d:0d:41:e2:79:fe:ed:a1:05:3a:9b:9b:96:
                    d5:b1:fe:91:7b:45:91:5b:f6:43:b3:50:ab:ac:d8:
                    ed:54:d5:76:2e:c7:33:42:f6:e0:34:59:d7:84:5d:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:06:1B:71:A4:DB:E6:4C:9E:DB:95:00:6B:B8:38:B5:D3:50:D4:D7
            X509v3 Authority Key Identifier:
                keyid:38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/380AE62845C4468F9462327C41A0D22DA68054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:e7:34:76:fa:41:68:d5:97:c7:07:12:85:f9:e0:4b:96:10:
         ca:b7:a8:48:1c:b3:27:5f:6a:c5:cf:b3:dc:b8:31:db:a4:7b:
         4b:c7:b6:56:c8:81:03:00:41:66:ec:f9:d1:28:5a:58:cf:5a:
         62:f2:02:ea:e3:78:38:0b:53:27:f1:32:eb:e2:b4:d5:eb:f4:
         45:ec:88:4c:cb:ca:2e:84:4d:3a:3c:f3:1a:9f:65:82:77:9d:
         7d:75:a8:2d:6b:27:af:e1:6c:63:db:cc:75:11:a5:89:4f:20:
         f5:c4:b0:ae:65:06:d4:1d:75:11:cd:71:d7:95:4c:fe:0b:96:
         89:5d:1b:a8:fc:34:54:d8:17:8f:52:be:61:e8:e4:10:3b:fa:
         bc:c9:3b:99:7f:80:4f:47:1a:09:01:77:b3:f2:e9:81:75:57:
         83:a4:60:4e:32:c8:14:35:8c:e1:57:de:2c:53:46:8b:74:4a:
         0b:ad:ee:3b:89:4d:9a:1a:f0:11:04:99:2e:25:b6:ce:36:59:
         8a:36:80:80:d4:7c:d9:58:3e:56:7e:65:27:73:9f:8b:c5:75:
         6a:12:1e:12:9e:d6:b4:17:97:07:cb:dd:8d:de:4c:57:61:82:
         97:a2:78:a5:3f:a3:f9:77:dc:c6:14:23:81:81:41:9e:af:a5:
         b5:4c:3a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org