Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/1/3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa
File:                     3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa (raw, json)
Hash identifier:          jelprtKjacA567Q7WsP0tkBkG0GVyer023gbOnU7xag=
Subject key identifier:   25:B9:78:6C:8E:0F:4E:E2:D7:EE:3B:07:DC:4D:21:A1:52:BD:EE:DC
Certificate issuer:       /CN=DF4056594C79E710ED473E96AAF3A32B0E263C13
Certificate serial:       4626B650E5660C9DD7162E93F79D708F115FA2CF
Authority key identifier: DF:40:56:59:4C:79:E7:10:ED:47:3E:96:AA:F3:A3:2B:0E:26:3C:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF4056594C79E710ED473E96AAF3A32B0E263C13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/1/3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa
Signing time:             Thu 04 Apr 2024 19:13:28 +0000
ROA not before:           Thu 04 Apr 2024 19:08:28 +0000
ROA not after:            Thu 03 Apr 2025 19:13:28 +0000
asID:                     267429
IP address blocks:        181.191.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:26:b6:50:e5:66:0c:9d:d7:16:2e:93:f7:9d:70:8f:11:5f:a2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF4056594C79E710ED473E96AAF3A32B0E263C13
        Validity
            Not Before: Apr  4 19:08:28 2024 GMT
            Not After : Apr  3 19:13:28 2025 GMT
        Subject: CN=25B9786C8E0F4EE2D7EE3B07DC4D21A152BDEEDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:6f:9a:f1:de:c3:b1:9b:be:aa:70:44:da:
                    63:bc:ec:0e:21:dd:53:f5:e2:00:ae:76:0d:0e:85:
                    22:4a:f7:bd:bd:cb:e8:72:cd:c3:9d:7d:62:a2:fc:
                    7b:0f:19:c1:8a:e7:f5:86:06:63:97:2c:4e:b0:9a:
                    a6:7d:f9:d7:a9:3e:bf:42:9c:24:28:f0:7c:40:2b:
                    c0:7d:b8:33:d0:9d:65:8e:7c:d4:cb:7b:0f:59:1d:
                    e0:07:6c:f4:05:38:bb:76:65:94:be:a4:2a:af:11:
                    40:4a:fa:8c:16:42:64:a9:7d:0d:ab:3c:ec:b8:86:
                    d1:53:a5:d3:4c:06:e8:81:92:c3:ef:a1:5a:e4:59:
                    0d:c8:c6:66:c2:9b:1e:2b:d4:6a:ae:de:4c:c6:a3:
                    f4:bf:ec:cf:e9:a9:bb:c5:a9:cc:47:4c:90:e6:a8:
                    8f:46:a4:92:40:b8:78:b1:0f:a8:8e:ce:a0:22:c3:
                    16:dd:69:9f:73:71:46:25:b5:c7:2f:07:1a:4f:17:
                    56:4f:7e:73:c1:df:61:6c:27:cb:18:4a:58:61:df:
                    57:f6:c2:be:29:7c:6b:ea:e1:cd:3a:2b:87:f7:6a:
                    46:a4:73:d6:71:58:f5:ea:71:f8:6b:6f:5c:64:91:
                    49:b9:36:13:8c:c0:33:3a:98:e3:7d:29:0b:51:a3:
                    91:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B9:78:6C:8E:0F:4E:E2:D7:EE:3B:07:DC:4D:21:A1:52:BD:EE:DC
            X509v3 Authority Key Identifier:
                keyid:DF:40:56:59:4C:79:E7:10:ED:47:3E:96:AA:F3:A3:2B:0E:26:3C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/1/DF4056594C79E710ED473E96AAF3A32B0E263C13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF4056594C79E710ED473E96AAF3A32B0E263C13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/1/3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:d1:15:cd:a5:0d:2e:e9:64:39:3c:4f:a6:67:c6:7f:01:c3:
         7d:cd:9a:5e:7c:0d:f5:2b:d1:b8:7f:28:58:a0:70:a2:43:53:
         56:0b:40:7c:ed:76:9f:31:2c:cb:0c:39:ba:95:31:8a:0c:35:
         dc:95:4e:a4:f5:08:fe:01:8d:de:b4:9e:0c:aa:12:4c:a1:df:
         5c:f8:32:73:9c:c5:69:3d:88:e8:b8:c5:ab:ab:7a:75:5d:a9:
         93:2a:86:cf:ad:a2:99:72:fb:5e:3f:a5:b8:43:54:56:3d:5e:
         8c:48:29:e2:ee:cf:61:5e:52:0e:f2:78:f1:2d:83:ff:95:c9:
         cc:ac:68:de:8f:3b:54:f4:d8:c2:f8:01:57:7d:3a:eb:69:29:
         97:01:87:25:60:83:b4:0b:d0:49:cd:59:e2:0e:af:7b:84:91:
         89:4f:71:8a:d3:ff:05:0a:f4:18:8e:7c:08:36:62:c0:12:2a:
         7b:cd:44:32:5f:d6:c7:59:97:91:96:a4:57:1c:6d:64:2d:ce:
         4e:8c:3f:64:69:cc:5f:2d:cf:30:c7:14:5a:82:a3:8a:0c:18:
         6e:a2:c8:4d:9e:ad:9b:0b:8d:43:5d:db:6e:85:20:3e:85:3b:
         85:f4:60:96:f9:f4:3d:4b:4d:c5:e5:f0:f2:56:71:7b:71:fa:
         bc:2d:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org