Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/32342e3135322e3131362e302f32332d3332203d3e20323730343937.roa
File:                     32342e3135322e3131362e302f32332d3332203d3e20323730343937.roa (raw, json)
Hash identifier:          79W3817Q+smDgkHsdVf+ol/ClYQCq714vTCPhyRvZp4=
Subject key identifier:   8E:C3:49:9D:12:79:54:40:19:96:FC:55:06:AF:57:17:51:F8:AA:30
Certificate issuer:       /CN=168914F4DB078B44B18ED648C964C70D7A65DCCB
Certificate serial:       193EC8722F0803D23233BCD27D06E619D44738BE
Authority key identifier: 16:89:14:F4:DB:07:8B:44:B1:8E:D6:48:C9:64:C7:0D:7A:65:DC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/168914F4DB078B44B18ED648C964C70D7A65DCCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/32342e3135322e3131362e302f32332d3332203d3e20323730343937.roa
Signing time:             Mon 25 Mar 2024 09:15:01 +0000
ROA not before:           Mon 25 Mar 2024 09:10:01 +0000
ROA not after:            Mon 24 Mar 2025 09:15:01 +0000
asID:                     270497
IP address blocks:        24.152.116.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3e:c8:72:2f:08:03:d2:32:33:bc:d2:7d:06:e6:19:d4:47:38:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168914F4DB078B44B18ED648C964C70D7A65DCCB
        Validity
            Not Before: Mar 25 09:10:01 2024 GMT
            Not After : Mar 24 09:15:01 2025 GMT
        Subject: CN=8EC3499D127954401996FC5506AF571751F8AA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:b4:25:7a:91:7f:3d:a5:70:fd:f7:43:64:
                    9d:1b:52:f2:59:d6:9b:6c:f9:cb:7b:45:27:38:ea:
                    16:48:dc:db:9e:df:24:d6:dd:33:6e:23:2b:aa:b1:
                    3e:46:0f:14:80:e9:5e:ad:02:ed:ed:5f:98:41:a8:
                    ab:5b:1b:26:83:df:6d:6e:7d:5c:84:07:41:e3:8e:
                    a5:b6:43:61:58:16:45:04:ee:eb:2d:90:d0:20:dd:
                    01:6d:9f:14:c2:4f:8b:f8:f1:52:0b:bb:08:ab:5a:
                    5b:4b:15:6b:92:05:45:2a:85:5c:83:76:b7:3c:9a:
                    82:f0:a2:91:b1:82:3a:a2:e4:4b:a1:55:bb:c4:21:
                    74:f9:3f:0c:8d:b5:9c:e0:f9:22:f9:e1:6e:7e:7b:
                    a2:70:b7:0b:5a:77:d1:02:a6:28:28:b5:8f:5b:d9:
                    c0:51:7e:52:f0:75:6f:05:2b:ce:19:0e:54:56:ee:
                    0e:ee:cf:46:12:c3:a5:21:7f:79:84:b5:04:bc:44:
                    4f:4f:ba:5e:fc:15:da:b0:ab:2d:0b:5f:02:37:66:
                    63:f5:ec:3c:70:c5:16:84:da:ad:03:25:78:1b:ff:
                    b8:73:5a:bc:84:bc:71:f6:c1:6f:70:53:4a:b8:40:
                    e1:81:94:07:a7:20:c2:ed:a7:11:6f:60:ae:41:4f:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C3:49:9D:12:79:54:40:19:96:FC:55:06:AF:57:17:51:F8:AA:30
            X509v3 Authority Key Identifier:
                keyid:16:89:14:F4:DB:07:8B:44:B1:8E:D6:48:C9:64:C7:0D:7A:65:DC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/168914F4DB078B44B18ED648C964C70D7A65DCCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/168914F4DB078B44B18ED648C964C70D7A65DCCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/32342e3135322e3131362e302f32332d3332203d3e20323730343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:da:12:e8:8c:bd:eb:21:1f:b3:2b:60:c1:c7:81:02:e7:09:
         b6:29:cc:14:5e:27:05:74:73:59:17:3c:ac:e6:2a:cc:01:a3:
         ea:49:57:50:d1:9c:0e:2c:d4:1a:08:42:a8:11:bb:97:90:33:
         ba:e2:97:0d:79:9b:d8:9a:37:e7:31:6b:6e:d2:14:d4:9f:cb:
         b2:99:83:01:5d:50:e2:19:6e:9a:71:19:cc:a8:63:a7:4e:8c:
         c6:55:b3:fd:1c:63:81:8b:c5:51:e8:ee:a1:97:1a:5f:a8:ed:
         d2:9a:3c:68:2a:2b:de:3f:40:be:54:bb:07:14:60:a8:bb:00:
         9a:eb:43:2d:4d:b5:67:f4:24:23:1f:f4:38:7c:c4:81:c2:5f:
         22:6c:ae:d1:e9:bc:63:f1:46:c9:74:97:5d:7d:a9:2b:8c:90:
         76:84:6a:ba:f4:33:ec:9c:a6:ae:0f:2c:d0:28:d1:df:09:bd:
         a0:83:1c:f1:5e:db:25:95:d1:1a:e5:a5:eb:26:f4:17:1e:d2:
         15:32:ca:ea:56:fd:c2:79:a7:51:6a:b6:f0:76:94:6f:50:5d:
         4e:b8:24:30:b8:f9:c8:d8:31:ee:e6:29:a5:9a:c9:b5:5e:02:
         fa:1f:10:85:ab:e2:f8:b6:12:8d:bf:e9:99:29:e6:25:f1:ce:
         f4:94:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----