Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa
File:                     3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa (raw, json)
Hash identifier:          STJ+Ie/cuAWuIQSZrsCDyo49mKc8XuGBvGUZhp+zbJM=
Subject key identifier:   1A:10:AB:F5:1E:76:44:32:20:FE:AA:AB:82:8A:8E:13:49:ED:E3:29
Certificate issuer:       /CN=A537C256EA0CE31BF05A91887303244145ACE8AD
Certificate serial:       1794E5F122AD6A84A8DDD5BBC2EC91B8AC66F172
Authority key identifier: A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa
Signing time:             Sat 27 Apr 2024 14:58:03 +0000
ROA not before:           Sat 27 Apr 2024 14:53:03 +0000
ROA not after:            Sat 26 Apr 2025 14:58:03 +0000
asID:                     265300
IP address blocks:        168.121.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:94:e5:f1:22:ad:6a:84:a8:dd:d5:bb:c2:ec:91:b8:ac:66:f1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537C256EA0CE31BF05A91887303244145ACE8AD
        Validity
            Not Before: Apr 27 14:53:03 2024 GMT
            Not After : Apr 26 14:58:03 2025 GMT
        Subject: CN=1A10ABF51E76443220FEAAAB828A8E1349EDE329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f3:be:a8:a8:a3:99:9c:4f:bc:b7:a9:c8:25:
                    66:50:8d:42:9f:e0:6e:61:2d:b9:6f:b8:3a:6d:bd:
                    25:41:65:a3:64:bd:62:c5:89:13:d4:04:07:a0:11:
                    38:26:84:e2:8a:5e:2d:0a:48:d8:b6:be:0b:32:b0:
                    ad:64:e1:8b:50:1f:4c:23:7b:1b:7b:fa:6b:ce:a2:
                    be:fc:89:af:e7:03:28:ee:1a:f6:6a:51:1c:f4:74:
                    82:9e:2e:c7:ac:47:f6:0f:90:96:2f:05:c9:32:9e:
                    8f:03:10:82:2c:95:1c:81:21:10:94:05:ca:5e:35:
                    e8:42:f7:c4:4f:57:95:82:85:3d:4d:43:fa:cc:c0:
                    c1:ca:b1:51:72:6d:cb:83:76:29:d4:0f:6e:a2:14:
                    de:4a:6d:84:86:45:39:8f:f4:73:66:64:15:1b:5e:
                    6e:70:ac:17:7e:18:06:29:59:67:c9:2f:fc:18:b9:
                    54:98:ad:40:b9:9b:71:b7:fd:b2:61:ab:90:7f:e5:
                    47:d9:1b:b2:f6:dd:e9:a3:7f:ee:3f:b0:4d:34:b7:
                    29:ba:2a:08:e1:0d:b5:2b:73:dd:f5:49:77:88:9e:
                    0e:6b:1a:9c:03:44:c3:d4:57:ad:e8:16:48:31:a3:
                    1c:57:f7:37:d2:83:76:30:ae:68:84:5d:77:f1:08:
                    e4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:10:AB:F5:1E:76:44:32:20:FE:AA:AB:82:8A:8E:13:49:ED:E3:29
            X509v3 Authority Key Identifier:
                keyid:A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/A537C256EA0CE31BF05A91887303244145ACE8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:96:11:d2:c2:6b:e7:8e:5e:76:d2:51:be:4b:07:a7:d0:
         6e:ee:ac:33:a6:70:6a:a9:e1:28:7a:3c:90:ee:ff:75:ff:86:
         7a:a9:05:62:23:74:2e:e1:69:dc:f6:39:50:4c:6a:a6:57:f4:
         29:40:08:1b:92:16:a5:82:0c:c3:b1:a5:5a:90:e3:ef:7b:22:
         4f:00:44:d1:c4:44:83:0d:c6:11:14:83:b8:eb:22:3e:2f:cd:
         17:a1:d5:8b:17:a9:10:94:78:0a:73:6f:d1:be:53:1a:4e:3d:
         b4:24:04:f9:ec:2e:d3:71:9c:ee:6d:a1:ea:57:91:d1:8d:32:
         a6:46:47:9d:98:11:d0:06:0f:50:5f:5a:bc:af:43:9d:18:c3:
         df:97:2b:d8:a6:d3:88:1d:48:d9:ec:cc:cb:b1:86:74:1c:b8:
         fa:9a:27:d1:2d:d3:72:75:80:77:d5:fc:e0:38:7a:e3:87:bc:
         76:57:5f:58:50:64:a9:09:bb:2e:76:0e:b4:ee:71:a5:0a:ec:
         fa:39:fe:16:43:4d:04:93:f7:db:a7:f9:dd:03:66:03:38:a5:
         ed:d3:bb:d3:26:49:35:63:93:ce:89:b7:21:50:29:9a:4e:3f:
         ef:13:61:ba:c1:d3:c2:dc:37:f4:da:b4:f9:e5:23:22:c1:1b:
         24:45:5a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org