Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39392e302f32342d3234203d3e20323635343137.roa
File:                     3136382e3139352e39392e302f32342d3234203d3e20323635343137.roa (raw, json)
Hash identifier:          PLHObR9eFI5J5d7KBEh0+Cig9lExPou6+W0C0zW8LZM=
Subject key identifier:   DE:70:CC:F8:89:02:D2:9C:16:D3:B6:F2:74:2E:9A:31:88:CC:69:41
Certificate issuer:       /CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
Certificate serial:       44E1B50658C89DD0EEE0630D2F2F8D8134F7D110
Authority key identifier: 56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39392e302f32342d3234203d3e20323635343137.roa
Signing time:             Thu 29 Jun 2023 20:00:02 +0000
ROA not before:           Thu 29 Jun 2023 19:55:02 +0000
ROA not after:            Thu 27 Jun 2024 20:00:02 +0000
asID:                     265417
IP address blocks:        168.195.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e1:b5:06:58:c8:9d:d0:ee:e0:63:0d:2f:2f:8d:81:34:f7:d1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
        Validity
            Not Before: Jun 29 19:55:02 2023 GMT
            Not After : Jun 27 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:cd:64:c5:78:9a:ac:7a:82:59:30:1f:e1:
                    f2:bc:ff:6c:52:a2:10:fd:90:e5:59:2c:b9:b5:52:
                    c7:2b:7c:e5:39:54:63:be:36:2b:02:13:b5:dc:5f:
                    49:0b:d9:1a:cc:6a:49:7f:60:78:33:b3:b4:f4:ba:
                    38:f1:75:b9:b7:fa:b6:51:22:58:ea:da:1a:cc:da:
                    4e:5d:28:29:eb:37:11:36:21:8d:2a:c2:3a:7b:7d:
                    72:e0:c6:28:44:93:99:66:2e:eb:f7:7d:73:db:0f:
                    7c:61:c4:6a:68:eb:84:1f:b9:6b:f9:64:d2:eb:dd:
                    f7:99:38:26:00:38:fa:47:5b:ea:80:36:51:c6:a6:
                    22:78:25:63:97:43:ea:fd:fb:38:cf:2d:fe:6e:ee:
                    43:39:cf:f4:6b:fd:c6:c1:47:01:46:f5:e9:5f:d7:
                    28:b6:f2:ed:df:5e:26:a1:15:c5:7b:87:11:af:a8:
                    1e:ac:35:9d:5a:33:04:48:a7:74:f9:7d:e5:31:34:
                    f0:62:7e:e9:41:8a:5b:f5:d0:e3:fa:cd:1f:c8:8f:
                    4d:ff:31:38:da:98:51:e3:a7:4c:07:75:71:a9:43:
                    8f:0a:71:99:c4:da:e6:68:12:ab:6a:e7:be:33:23:
                    fb:b9:fa:6e:64:31:4c:5f:f4:7a:ea:3f:8e:ad:77:
                    24:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:70:CC:F8:89:02:D2:9C:16:D3:B6:F2:74:2E:9A:31:88:CC:69:41
            X509v3 Authority Key Identifier:
                keyid:56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/3136382e3139352e39392e302f32342d3234203d3e20323635343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b4:65:d1:bd:6e:47:3e:20:0f:81:1d:52:8a:21:67:7f:95:
         08:81:b3:74:0d:41:87:c8:60:44:b7:e6:41:fa:4d:91:99:98:
         00:b0:53:a1:fe:ff:f9:52:a7:bd:1c:65:c5:06:d1:89:f5:c3:
         3f:18:8b:3e:4e:a4:7f:a1:ef:45:a7:b2:f7:a1:5f:ba:c1:70:
         66:c9:bc:60:32:8b:58:1e:28:0f:d1:00:6b:f5:9f:24:36:a2:
         45:fe:e4:5d:b2:31:66:0f:79:b6:87:cd:8c:49:7d:4e:9e:25:
         83:97:37:ce:13:c5:2d:b7:2b:03:11:82:ca:0a:ea:9a:57:dc:
         5e:85:a9:ea:78:83:77:c8:fa:37:b9:b1:cf:7e:bc:e3:d7:9f:
         19:f9:46:ed:3a:ea:98:79:e3:ed:ec:9c:0e:5f:50:dc:11:99:
         e4:84:97:c2:2a:c3:92:2e:76:6f:1c:1b:06:2e:6c:4d:f7:a9:
         c4:a5:f7:5d:79:b9:61:75:cc:d6:21:90:4e:c8:d7:87:b3:ae:
         ae:47:14:6b:bf:a0:d1:92:e1:25:bc:32:f7:bb:99:47:ec:2e:
         37:db:6e:46:7d:c9:f9:c2:84:fa:70:59:dc:d9:e0:56:13:ca:
         fc:e1:e5:fd:8d:58:52:5b:ed:6d:56:28:40:92:33:72:9f:c5:
         fe:f3:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org