Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3136382e3132312e36382e302f32322d3234203d3e20323635333030.roa
File:                     3136382e3132312e36382e302f32322d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          zFWg0yGn0/j1Vnjg903tKL0YADRROkFrf2ETPbJGOCs=
Subject key identifier:   1C:7E:FA:02:99:C6:53:95:BE:8E:68:39:99:8F:8B:6B:DC:CD:99:3A
Certificate issuer:       /CN=8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372
Certificate serial:       44F6818F677A5D1A5C3A5C230FD29A26D5C4E42A
Authority key identifier: 8B:5A:0B:B8:12:E6:DF:7D:ED:B8:59:93:29:C2:B1:4B:B7:C0:03:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3136382e3132312e36382e302f32322d3234203d3e20323635333030.roa
Signing time:             Mon 24 Jul 2023 22:00:45 +0000
ROA not before:           Mon 24 Jul 2023 21:55:45 +0000
ROA not after:            Mon 22 Jul 2024 22:00:45 +0000
asID:                     265300
IP address blocks:        168.121.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f6:81:8f:67:7a:5d:1a:5c:3a:5c:23:0f:d2:9a:26:d5:c4:e4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372
        Validity
            Not Before: Jul 24 21:55:45 2023 GMT
            Not After : Jul 22 22:00:45 2024 GMT
        Subject: CN=1C7EFA0299C65395BE8E6839998F8B6BDCCD993A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1a:e9:cb:32:8d:2d:19:ee:4c:97:f0:b7:e6:
                    42:c6:ee:1f:73:56:57:59:8e:a1:7e:b9:45:1d:b9:
                    51:47:34:c6:cc:39:2e:90:ac:10:a7:68:69:45:91:
                    72:68:13:c3:72:01:40:72:03:40:f0:9f:94:31:8f:
                    9c:ee:5c:d9:1e:a1:b3:2f:f0:07:c5:e0:70:51:a9:
                    ff:e2:ff:c6:be:47:05:c2:73:7f:b0:cf:5b:0b:67:
                    bc:76:8f:9d:4f:d9:d5:78:40:62:20:25:10:2a:54:
                    61:9f:08:7d:44:92:c2:6b:34:7f:91:46:66:61:90:
                    f5:7e:a6:13:c0:67:91:b7:1a:c5:60:d4:bc:25:ab:
                    f4:44:3b:95:49:55:40:1d:65:61:94:f5:44:2e:7b:
                    93:66:52:a4:f8:b5:aa:71:d4:5f:55:0e:1c:5f:1c:
                    e7:a0:19:70:c4:b1:28:0f:08:03:89:36:d6:b4:09:
                    0b:c0:13:8f:73:d8:1f:04:82:d1:46:3f:cb:70:27:
                    58:85:7f:f6:66:f8:3d:18:d7:96:c8:27:7e:e3:d3:
                    da:0a:2b:19:b6:1d:a8:57:be:ec:19:ff:6b:6d:d8:
                    aa:35:70:7c:34:f4:17:b3:50:61:cc:f8:59:7c:d4:
                    59:07:f6:e7:ce:bb:19:72:c9:8a:ba:f1:b0:8c:4a:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7E:FA:02:99:C6:53:95:BE:8E:68:39:99:8F:8B:6B:DC:CD:99:3A
            X509v3 Authority Key Identifier:
                keyid:8B:5A:0B:B8:12:E6:DF:7D:ED:B8:59:93:29:C2:B1:4B:B7:C0:03:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3136382e3132312e36382e302f32322d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:55:f1:42:f7:ed:14:f3:7e:92:3c:ec:19:04:03:6c:8b:ab:
         bd:d2:0f:b5:d5:52:c0:84:4a:b9:93:40:44:f4:da:a3:f3:f3:
         ff:f6:45:3d:7c:33:98:0e:e5:b3:d4:2b:45:eb:7a:10:4c:54:
         0d:32:52:3d:96:83:ca:b1:d2:37:8e:50:f8:af:6a:9a:47:13:
         be:5b:39:14:5e:82:d0:ce:96:91:93:8f:b6:87:b4:24:87:36:
         42:c1:c7:59:1f:56:20:06:0b:97:a6:21:b0:4a:c1:21:ca:a8:
         cf:62:f4:ed:c3:aa:38:94:40:4a:f5:3e:7a:ef:16:af:85:ae:
         d9:ac:9b:15:9e:2b:07:70:1f:50:c8:8d:47:71:8d:1e:76:80:
         f7:99:43:d9:8a:04:7b:c1:a6:78:df:40:98:19:5e:66:91:d9:
         94:d5:4d:c0:d4:f8:48:0e:c3:5d:a4:5b:a7:4a:a8:aa:45:29:
         91:1f:2d:6f:26:13:84:64:4a:8b:e3:01:c1:a2:61:c1:40:8a:
         14:2e:f1:87:bf:00:28:01:19:25:97:f6:5b:d8:ed:47:09:a7:
         ef:9c:6e:b2:3e:b9:ef:3c:a0:9b:cb:f8:0e:d7:66:a6:42:0d:
         f5:d5:cb:36:e0:b5:9f:ad:ff:71:d2:25:4f:da:17:72:59:5e:
         9e:5d:7a:32
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURPaBj2d6XRpcOlwjD9KaJtXE5CowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI1QTBCQjgxMkU2REY3REVEQjg1OTkzMjlDMkIxNEJC
N0MwMDM3MjAeFw0yMzA3MjQyMTU1NDVaFw0yNDA3MjIyMjAwNDVaMDMxMTAvBgNV
BAMTKDFDN0VGQTAyOTlDNjUzOTVCRThFNjgzOTk5OEY4QjZCRENDRDk5M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGunLMo0tGe5Ml/C35kLG7h9z
VldZjqF+uUUduVFHNMbMOS6QrBCnaGlFkXJoE8NyAUByA0Dwn5Qxj5zuXNkeobMv
8AfF4HBRqf/i/8a+RwXCc3+wz1sLZ7x2j51P2dV4QGIgJRAqVGGfCH1EksJrNH+R
RmZhkPV+phPAZ5G3GsVg1Lwlq/REO5VJVUAdZWGU9UQue5NmUqT4tapx1F9VDhxf
HOegGXDEsSgPCAOJNta0CQvAE49z2B8EgtFGP8twJ1iFf/Zm+D0Y15bIJ37j09oK
Kxm2HahXvuwZ/2tt2Ko1cHw09BezUGHM+Fl81FkH9ufOuxlyyYq68bCMSmKlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHH76ApnGU5W+jmg5mY+La9zNmTowHwYDVR0j
BBgwFoAUi1oLuBLm333tuFmTKcKxS7fAA3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMS84QjVBMEJCODEyRTZERjdERURCODU5OTMyOUMyQjE0QkI3QzAwMzcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCNUEwQkI4MTJFNkRGN0RF
REI4NTk5MzI5QzJCMTRCQjdDMDAzNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzEv
MzEzNjM4MmUzMTMyMzEyZTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoeUQwDQYJKoZIhvcNAQELBQADggEBAJ9V8UL3
7RTzfpI87BkEA2yLq73SD7XVUsCESrmTQET02qPz8//2RT18M5gO5bPUK0XrehBM
VA0yUj2Wg8qx0jeOUPivappHE75bORRegtDOlpGTj7aHtCSHNkLBx1kfViAGC5em
IbBKwSHKqM9i9O3DqjiUQEr1PnrvFq+FrtmsmxWeKwdwH1DIjUdxjR52gPeZQ9mK
BHvBpnjfQJgZXmaR2ZTVTcDU+EgOw12kW6dKqKpFKZEfLW8mE4RkSovjAcGiYcFA
ihQu8Ye/ACgBGSWX9lvY7UcJp++cbrI+ue88oJvL+A7XZqZCDfXVyzbgtZ+t/3HS
JU/aF3JZXp5dejI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org