Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32342d3234203d3e20323633343231.roa
File:                     3136382e3139352e3232302e302f32342d3234203d3e20323633343231.roa (raw, json)
Hash identifier:          oIc7y/MXOyS3L0Qlt261/xNjbg/JSK/Lu5CqlethTiA=
Subject key identifier:   F0:91:37:9D:0F:9B:B3:6A:3A:A9:95:53:52:91:32:BB:1E:CB:D5:8A
Certificate issuer:       /CN=411194BD84722FD252C79F3307A7C3ACFDC84782
Certificate serial:       2269D8C9053AE8A7E756122EDE4E3347940ADF5F
Authority key identifier: 41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32342d3234203d3e20323633343231.roa
Signing time:             Thu 13 Apr 2023 20:21:47 +0000
ROA not before:           Thu 13 Apr 2023 20:16:47 +0000
ROA not after:            Thu 11 Apr 2024 20:21:47 +0000
asID:                     263421
IP address blocks:        168.195.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:69:d8:c9:05:3a:e8:a7:e7:56:12:2e:de:4e:33:47:94:0a:df:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Validity
            Not Before: Apr 13 20:16:47 2023 GMT
            Not After : Apr 11 20:21:47 2024 GMT
        Subject: CN=F091379D0F9BB36A3AA99553529132BB1ECBD58A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:85:76:34:94:99:74:3e:3a:fb:41:c2:27:
                    f8:d8:48:f7:e9:ed:f8:84:60:74:d0:5b:e0:34:c8:
                    bd:d5:1c:24:01:9f:16:b7:74:a9:d2:47:0e:f7:b3:
                    08:52:3c:54:cb:3f:a5:a6:d6:66:b4:97:74:b2:ce:
                    6a:22:6c:c7:ea:14:00:73:ba:49:9c:28:85:17:20:
                    d6:2d:ac:65:fb:ff:a8:29:3a:9c:32:03:ba:7b:c9:
                    c5:e2:27:4c:47:54:4a:b7:12:50:18:dc:b7:8a:cc:
                    dc:07:95:36:e5:6b:cb:bf:de:fb:8c:5d:d4:f7:fd:
                    3a:46:1c:72:4e:e4:c0:5a:27:5e:2f:5f:2d:0b:93:
                    a4:c5:ca:6e:31:71:b2:85:ac:e3:03:76:5b:32:31:
                    e1:38:9b:da:a0:fc:01:96:64:2a:ec:2e:82:f5:27:
                    64:27:25:9b:b9:23:cd:32:05:44:b4:3a:11:a2:91:
                    59:fd:62:6b:89:36:e6:a1:c2:f6:23:e0:9c:2a:c1:
                    04:be:6e:c6:2a:5a:ea:06:03:84:44:bc:93:1c:7d:
                    8f:8e:83:34:4a:04:30:b0:1c:1c:11:ec:51:70:42:
                    9b:10:b0:86:01:72:4d:74:49:5b:53:fd:44:98:78:
                    0d:c8:d9:e8:20:47:3e:29:5f:3e:20:96:61:71:b9:
                    63:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:91:37:9D:0F:9B:B3:6A:3A:A9:95:53:52:91:32:BB:1E:CB:D5:8A
            X509v3 Authority Key Identifier:
                keyid:41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32342d3234203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:2b:d0:50:f4:61:7a:57:a0:c8:ff:f6:3a:46:38:e5:14:f1:
         49:72:ec:c0:80:ed:63:1e:75:2e:28:37:85:d4:eb:9a:07:9d:
         b4:8c:c7:8b:b7:36:2b:dc:7e:11:7d:ca:8c:1e:b8:8e:2c:82:
         74:06:08:5c:0c:65:c3:b4:19:fe:17:22:2b:cf:cb:f3:c0:74:
         09:bc:37:0f:49:13:90:20:18:da:55:aa:c4:2b:05:a7:d9:e5:
         fd:99:47:d8:ee:2a:f4:02:a2:1b:2c:5d:62:aa:aa:8e:a0:c2:
         92:71:ad:d4:44:21:f3:77:06:81:52:66:04:79:f1:ad:bb:42:
         4b:17:09:f5:51:b5:d2:2e:ac:b9:79:02:68:cb:1e:62:dd:5a:
         88:a9:08:0e:52:c1:d1:b3:d7:da:73:27:7a:fb:fe:8d:27:0f:
         f1:53:7d:4d:1b:37:eb:c6:be:8c:48:25:0b:69:b5:fd:bf:7e:
         70:1d:94:c3:ac:b0:34:a0:0e:cf:e8:57:6e:08:70:a4:0a:a8:
         5b:39:8f:52:97:c3:9e:34:6d:86:28:6d:4b:73:fd:43:02:0f:
         1f:e0:1d:98:77:6f:1f:80:0f:aa:f0:e9:6c:92:ed:72:51:f8:
         63:ad:09:69:19:09:d6:ea:11:f9:26:93:b9:a9:75:57:da:2b:
         41:75:63:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org