Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39362e302f32332d3233203d3e20323635343137.roa
File:                     3136382e3139352e39362e302f32332d3233203d3e20323635343137.roa (raw, json)
Hash identifier:          0mIMC7fs6myl0imtJym3YoA6QmqrFz767ilcqjlgenw=
Subject key identifier:   18:94:40:D7:42:08:86:74:5D:D7:A3:9D:AD:09:40:38:29:7B:26:3E
Certificate issuer:       /CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
Certificate serial:       6EE8EAB2793479E00DFCABF354B7DE519DEECD24
Authority key identifier: 56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39362e302f32332d3233203d3e20323635343137.roa
Signing time:             Thu 29 Jun 2023 20:00:02 +0000
ROA not before:           Thu 29 Jun 2023 19:55:02 +0000
ROA not after:            Thu 27 Jun 2024 20:00:02 +0000
asID:                     265417
IP address blocks:        168.195.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e8:ea:b2:79:34:79:e0:0d:fc:ab:f3:54:b7:de:51:9d:ee:cd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
        Validity
            Not Before: Jun 29 19:55:02 2023 GMT
            Not After : Jun 27 20:00:02 2024 GMT
        Subject: CN=3082010A0282010100CB8FDC83BD4202621E7B773CB5F73123BA709C1C4385BADFEA900DC0D6F17774387CA8E81001273E57DE38BF0ED0654C1D684A969D5489161BCBAD42E1B759342CED6A28A2EA0F49CBD66C8046F72E6D75180ACCD3C8DF8C250643CA5758799AF7E6D52EEF0093DD1F9989DF1A1EEF145C64E13AC6C094ED3F802C8A1C0568F054C29A59DC0A69DD22B9F588926A916AFAD91186A87BCD5C718D989461C6EB2BF72D37D0B3496EF34712CE46506B67EDD9AFDE9AB184524A299BC5EE1DCF6D0FCB4CD241B49367669859D10225BF6565241BCE4AA1A964E090D26339D05068104DB289A255D7A291FFE9376C59EE51E59DB630604ED5DE3D7C2CC948A889AF350203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:dc:83:bd:42:02:62:1e:7b:77:3c:b5:f7:
                    31:23:ba:70:9c:1c:43:85:ba:df:ea:90:0d:c0:d6:
                    f1:77:74:38:7c:a8:e8:10:01:27:3e:57:de:38:bf:
                    0e:d0:65:4c:1d:68:4a:96:9d:54:89:16:1b:cb:ad:
                    42:e1:b7:59:34:2c:ed:6a:28:a2:ea:0f:49:cb:d6:
                    6c:80:46:f7:2e:6d:75:18:0a:cc:d3:c8:df:8c:25:
                    06:43:ca:57:58:79:9a:f7:e6:d5:2e:ef:00:93:dd:
                    1f:99:89:df:1a:1e:ef:14:5c:64:e1:3a:c6:c0:94:
                    ed:3f:80:2c:8a:1c:05:68:f0:54:c2:9a:59:dc:0a:
                    69:dd:22:b9:f5:88:92:6a:91:6a:fa:d9:11:86:a8:
                    7b:cd:5c:71:8d:98:94:61:c6:eb:2b:f7:2d:37:d0:
                    b3:49:6e:f3:47:12:ce:46:50:6b:67:ed:d9:af:de:
                    9a:b1:84:52:4a:29:9b:c5:ee:1d:cf:6d:0f:cb:4c:
                    d2:41:b4:93:67:66:98:59:d1:02:25:bf:65:65:24:
                    1b:ce:4a:a1:a9:64:e0:90:d2:63:39:d0:50:68:10:
                    4d:b2:89:a2:55:d7:a2:91:ff:e9:37:6c:59:ee:51:
                    e5:9d:b6:30:60:4e:d5:de:3d:7c:2c:c9:48:a8:89:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:94:40:D7:42:08:86:74:5D:D7:A3:9D:AD:09:40:38:29:7B:26:3E
            X509v3 Authority Key Identifier:
                keyid:56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39362e302f32332d3233203d3e20323635343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:73:1c:0e:e1:6b:97:0f:f4:9e:cd:db:99:c6:a7:cd:22:cf:
         a5:7c:a8:7c:14:14:16:af:0c:85:5e:ae:d5:47:f8:af:50:c7:
         5b:b0:41:d1:7e:c3:8a:53:b3:b1:e5:eb:68:73:60:0b:ab:24:
         5d:e2:44:c4:ff:69:58:7d:1d:a3:10:69:97:92:df:63:49:6d:
         4a:bd:23:d9:2a:86:dd:f9:4c:56:10:d7:57:d6:23:f1:99:ab:
         4c:83:eb:81:6d:a4:7e:98:74:70:99:5c:d3:1d:66:58:e4:63:
         98:1c:02:ae:98:29:b7:a2:3b:b5:f8:45:a7:f2:37:9d:08:9f:
         ab:b1:ef:13:48:92:e3:8d:7c:70:75:89:77:a1:7e:8b:4f:93:
         82:c3:e9:47:fd:6e:98:cf:dc:08:19:76:79:64:07:bf:fb:2b:
         a4:88:e6:af:97:ce:56:7c:9f:7a:97:d5:97:53:88:5a:3b:76:
         d6:c3:f4:35:7e:55:bd:5e:59:98:19:6f:97:54:93:fc:9f:10:
         53:58:52:14:f1:bf:da:f9:12:66:92:3d:7e:59:b6:2d:81:9b:
         36:f2:cf:5d:ec:2b:f2:4b:08:5a:82:d3:6c:e3:31:fc:d8:38:
         87:66:53:87:6c:23:ee:6c:79:77:9d:b2:a1:8c:55:51:c7:87:
         9d:12:34:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org