Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa
File:                     3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa (raw, json)
Hash identifier:          r7n+PUe3E04IYF6bB/iDFr6AqmMisa5E3a5xlC+ellI=
Subject key identifier:   87:32:48:7D:C8:5E:36:A4:39:65:9A:00:3E:2C:F3:9E:60:AB:D9:EF
Certificate issuer:       /CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Certificate serial:       61A482CCF513BF01C02162B6EF8473E98F0703C9
Authority key identifier: 21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa
Signing time:             Tue 20 Feb 2024 13:52:14 +0000
ROA not before:           Tue 20 Feb 2024 13:47:14 +0000
ROA not after:            Tue 18 Feb 2025 13:52:14 +0000
asID:                     263860
IP address blocks:        168.227.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a4:82:cc:f5:13:bf:01:c0:21:62:b6:ef:84:73:e9:8f:07:03:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21D786A9E3E9F6FD8067630222961B177E0DA001
        Validity
            Not Before: Feb 20 13:47:14 2024 GMT
            Not After : Feb 18 13:52:14 2025 GMT
        Subject: CN=8732487DC85E36A439659A003E2CF39E60ABD9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:9f:d3:07:e8:eb:1f:9d:c1:40:fb:b1:a9:
                    89:b6:fd:02:ce:18:75:20:d1:5c:d4:62:20:25:17:
                    09:23:45:0a:f2:5f:20:41:84:70:79:d6:8d:cc:15:
                    b4:8a:ed:67:ce:fc:2d:34:a7:be:b6:12:8a:a3:01:
                    82:47:e3:90:a3:79:c5:f2:4e:17:d7:5a:b2:43:06:
                    38:af:66:27:da:6c:72:a1:ab:8c:9f:e1:44:04:31:
                    c9:50:c0:5e:b9:0d:bb:98:0e:eb:5a:a2:27:92:cf:
                    25:0d:65:ae:a3:9d:0d:99:89:bf:6c:96:71:fe:76:
                    11:08:e3:75:9e:4a:80:b3:22:2c:93:a8:da:28:a2:
                    82:fc:de:2c:22:71:3f:c4:fd:d7:23:e1:44:61:a8:
                    7f:9a:b2:e6:95:47:c5:94:08:43:9d:cb:0f:a1:e6:
                    1b:64:00:c0:87:6e:31:13:e2:c1:21:31:f4:ea:c0:
                    bc:4a:84:2d:8f:47:2a:32:31:ea:42:be:c0:06:b7:
                    8b:ec:fb:66:a2:a6:03:76:1a:8b:8b:87:c2:51:74:
                    32:e9:fb:5d:68:08:35:aa:c4:7e:e9:1c:38:a0:c1:
                    0c:9e:de:35:08:c8:bd:8e:17:61:0d:3f:45:8d:45:
                    ec:19:48:12:a3:d8:91:f0:83:54:03:66:90:54:c1:
                    77:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:32:48:7D:C8:5E:36:A4:39:65:9A:00:3E:2C:F3:9E:60:AB:D9:EF
            X509v3 Authority Key Identifier:
                keyid:21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:c4:82:9b:67:19:2e:3d:fc:a7:2b:0a:4f:4b:61:d3:89:a4:
         85:4f:18:f0:c5:03:cd:c2:35:93:f6:27:23:7f:39:0d:db:db:
         03:a3:23:b5:8b:8c:01:2e:2f:44:04:3d:05:62:d3:bb:09:81:
         bd:a4:3c:36:38:1a:b7:a7:c9:6b:6d:0a:e7:18:25:30:24:1a:
         72:7b:70:10:40:78:a2:a4:2a:d7:45:9e:20:71:a9:21:53:d5:
         89:81:8d:60:37:f2:df:db:bd:91:0d:5d:2b:fd:ce:10:92:ba:
         a1:0e:57:0b:ae:6f:3b:40:ee:79:a0:43:6e:26:d4:9b:f2:09:
         45:03:ef:52:be:2e:e6:44:32:bc:51:ed:fd:cf:3c:67:88:3a:
         3f:14:c4:ee:ba:6b:22:16:d8:d2:a0:3e:e6:b6:b8:56:86:60:
         ce:4e:dd:72:8a:55:ec:2a:4b:70:a0:1d:98:71:18:65:54:65:
         ef:a5:23:89:d3:d2:ba:20:e2:dc:46:e3:f0:e4:b5:18:89:6e:
         b1:39:fe:8e:e0:df:9d:de:2d:eb:22:33:0a:39:6d:ac:37:be:
         6e:15:92:e1:75:77:19:86:a7:97:db:f2:6b:23:ec:9d:87:2e:
         45:a3:69:b6:fd:dd:97:0d:77:27:18:9f:95:c9:ac:93:e0:5d:
         9a:14:a6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org