Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3136382e3132312e36382e302f32332d3233203d3e20323635333030.roa
File:                     3136382e3132312e36382e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          qSrgIcIITarsT6usLwJ7ktcBZmurTpAt5jBPxdIcimk=
Subject key identifier:   67:37:B1:53:BA:0C:A3:73:64:17:B6:6D:F5:F6:39:78:30:11:78:DE
Certificate issuer:       /CN=A537C256EA0CE31BF05A91887303244145ACE8AD
Certificate serial:       4C1B9445F04D4ACC187176A8AC5514C93346DFAA
Authority key identifier: A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3136382e3132312e36382e302f32332d3233203d3e20323635333030.roa
Signing time:             Sat 27 Apr 2024 14:58:07 +0000
ROA not before:           Sat 27 Apr 2024 14:53:07 +0000
ROA not after:            Sat 26 Apr 2025 14:58:07 +0000
asID:                     265300
IP address blocks:        168.121.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1b:94:45:f0:4d:4a:cc:18:71:76:a8:ac:55:14:c9:33:46:df:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537C256EA0CE31BF05A91887303244145ACE8AD
        Validity
            Not Before: Apr 27 14:53:07 2024 GMT
            Not After : Apr 26 14:58:07 2025 GMT
        Subject: CN=6737B153BA0CA3736417B66DF5F63978301178DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:a8:c0:45:c6:51:8e:bf:05:0b:f7:86:7c:
                    80:da:a9:a1:64:17:97:f1:34:1a:39:b6:27:d5:ad:
                    0e:e6:4d:a7:f9:bf:fb:19:9c:77:98:25:23:18:6b:
                    d5:d9:b6:a5:3d:68:d3:ed:b1:79:cb:4a:a5:5b:28:
                    a4:78:e4:bb:52:02:d7:82:1e:67:38:23:e8:f4:fd:
                    48:d7:8a:65:91:60:f9:16:25:33:4a:1e:a0:f0:1e:
                    db:07:f4:e2:ca:88:b5:a3:68:43:12:30:51:60:d0:
                    7b:f5:61:cc:38:31:2b:17:aa:a5:71:fb:59:09:4c:
                    7a:3e:27:fa:e0:c1:90:65:10:2b:6a:3a:fb:6e:1a:
                    05:f3:90:76:18:ab:de:3a:bb:e0:51:10:5b:68:d0:
                    56:58:49:1c:89:34:b2:8b:50:06:ec:70:5a:da:99:
                    65:84:f2:55:7d:4d:4e:e0:66:49:55:49:39:fc:c7:
                    43:4b:8f:0e:cf:99:d5:d5:85:38:a0:76:0b:c0:1f:
                    92:0f:78:a6:bc:07:c0:97:d5:c9:24:b6:ef:c7:4f:
                    4d:3c:85:4e:b3:44:30:58:67:3c:64:4c:c9:37:dd:
                    f6:e2:c1:5b:9f:b9:ed:fc:d3:ef:23:90:e3:a5:35:
                    5f:49:67:03:5f:7f:a9:ca:f3:16:5f:ca:1f:4f:4f:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:37:B1:53:BA:0C:A3:73:64:17:B6:6D:F5:F6:39:78:30:11:78:DE
            X509v3 Authority Key Identifier:
                keyid:A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/A537C256EA0CE31BF05A91887303244145ACE8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3136382e3132312e36382e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:3f:ae:20:08:2e:11:46:08:76:eb:83:e5:84:81:93:04:1c:
         02:7d:5c:88:a7:69:40:2c:17:49:4c:dd:27:b5:69:6f:30:cd:
         ed:3c:30:f3:65:eb:f0:4c:58:9f:6f:1b:bd:93:a2:a3:83:38:
         d7:75:73:80:73:ab:ff:e4:99:75:5c:c4:2a:7f:d8:da:ba:12:
         cf:cf:38:35:85:b7:f2:4c:f2:c7:a4:83:01:eb:8f:76:72:88:
         8a:c8:45:b5:42:7f:38:d3:14:57:ba:61:ec:86:f1:d3:e5:6e:
         f0:0f:4f:c8:8b:25:d5:c0:7b:fa:8f:08:b6:8e:05:36:f5:a9:
         7a:04:1c:5c:3f:be:3e:ba:62:53:90:41:4b:c8:ea:c9:1d:f7:
         29:9b:a4:76:a3:95:55:a1:d4:2d:9b:3b:f3:9d:65:b3:b7:f3:
         fc:bd:56:b5:0d:83:1a:7a:66:ed:49:9c:eb:97:f8:a8:a4:3a:
         a8:f6:a0:12:ca:58:ec:1d:00:fa:e2:fb:e5:9d:e4:b9:11:14:
         92:c9:e0:18:45:9e:c3:5e:2f:4e:42:89:90:37:b7:50:b4:7f:
         fe:05:d2:95:1e:5e:91:52:82:30:62:cf:92:7c:20:95:bf:8d:
         00:85:de:d6:f2:6e:dd:a2:4a:76:de:41:34:75:17:8b:09:d6:
         d0:c7:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org