Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231362e302f32342d3234203d3e20323632383038.roa
File:                     3139312e3235332e3231362e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          bjAvSVktxoPckgOnXOFaZINij57uo+m+LxZUT0PE9lM=
Subject key identifier:   87:C6:D1:65:32:DA:0A:E8:7E:56:61:85:69:E7:DD:73:63:CB:3B:37
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       236FF3E4FB4C3D712EA56F7A4C3D607C58F06853
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231362e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:24 +0000
ROA not before:           Tue 10 Oct 2023 13:52:24 +0000
ROA not after:            Tue 08 Oct 2024 13:57:24 +0000
asID:                     262808
IP address blocks:        191.253.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6f:f3:e4:fb:4c:3d:71:2e:a5:6f:7a:4c:3d:60:7c:58:f0:68:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:24 2023 GMT
            Not After : Oct  8 13:57:24 2024 GMT
        Subject: CN=87C6D16532DA0AE87E56618569E7DD7363CB3B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:1a:cf:4e:e1:31:ce:33:ad:0e:89:d9:c3:
                    2d:a2:f9:47:b7:2b:cf:28:14:ee:76:9c:cf:48:6b:
                    ef:9a:cf:1f:64:5f:53:54:82:ef:2f:f9:74:f2:35:
                    ba:d1:77:26:f1:44:5a:57:a8:7f:4c:cd:d0:79:ec:
                    e3:83:38:f9:77:ab:54:d1:e6:ec:25:67:b5:e7:f3:
                    f5:51:55:16:ce:86:29:14:14:8c:a1:78:6d:90:af:
                    4e:04:2d:bf:df:85:4e:e5:29:88:9d:a8:b0:2c:fc:
                    f1:9e:06:ab:47:d8:b6:99:87:9e:98:e9:fc:51:15:
                    24:1f:24:fe:b8:9b:97:5d:59:07:61:2f:86:37:6f:
                    9f:77:26:be:f1:0d:52:12:6a:4b:84:ec:c9:71:5b:
                    4c:7f:8c:dd:c0:4f:32:01:4d:04:14:f0:a6:e2:2e:
                    9b:fe:5c:75:0d:a7:93:6f:02:84:bc:ae:a5:33:4f:
                    b8:d4:b3:0a:4a:a1:89:3b:1a:66:ae:19:52:36:ba:
                    9e:6b:8e:52:1f:c6:c3:65:69:58:c5:a1:86:fe:ed:
                    58:a2:1d:01:dc:42:50:be:e0:8b:ab:39:20:3e:b4:
                    e3:36:ba:c6:b1:23:49:60:28:5b:86:23:84:ce:5b:
                    65:3b:63:3b:3c:7c:fb:64:ca:a7:7e:25:7a:3e:60:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C6:D1:65:32:DA:0A:E8:7E:56:61:85:69:E7:DD:73:63:CB:3B:37
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231362e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:06:5a:60:e9:c8:c6:c7:c1:48:50:34:77:ee:20:fa:c9:0c:
         ee:b6:7d:4b:06:7a:08:f8:07:e0:3d:de:5e:5d:01:95:c5:4c:
         8a:ad:7e:30:3f:b2:63:bc:87:3f:48:b0:e1:ba:ad:57:df:4c:
         1d:76:fe:f3:22:43:90:c0:29:e0:f9:44:18:f4:ef:a8:5c:31:
         0e:9a:3c:74:58:81:5d:70:60:80:d0:eb:0e:10:5a:62:46:e1:
         b4:0c:1c:db:26:3e:89:d3:cc:5c:5d:cb:1f:92:53:3f:85:ae:
         dc:c3:9e:9d:35:2f:ba:8c:bf:2e:0d:e6:ed:05:76:3a:59:92:
         ac:5c:2d:e5:db:93:7f:5a:65:e3:7e:eb:85:05:6c:35:45:1e:
         99:1f:93:e2:d8:41:59:d0:13:76:85:51:3f:f8:75:66:b1:af:
         d0:aa:90:ae:9d:a9:9f:1b:11:56:6a:90:40:8c:48:15:51:c8:
         21:e7:87:e7:29:36:3a:62:9e:3e:8d:48:30:5d:8e:00:f6:36:
         50:86:31:c9:eb:fb:df:b2:69:dd:e1:d3:83:aa:e9:08:16:0e:
         da:cf:42:c6:50:dd:4d:26:52:c2:61:53:bb:59:3d:24:a0:83:
         c3:a6:ad:fb:e9:aa:9d:05:ad:b4:bd:94:d4:69:80:0b:40:80:
         db:07:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org