Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32322d3232203d3e20323633363431.roa
File:                     3136382e3230352e36302e302f32322d3232203d3e20323633363431.roa (raw, json)
Hash identifier:          L8htJ/TPZ3fiUewZC6gHYPSbbih9VDssI6iQwzM66YA=
Subject key identifier:   87:37:76:6F:5C:95:E0:BA:EB:FE:42:11:13:91:F5:47:A1:38:DF:6D
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       22D035D266EE6EBBF882A3CF52F4ED6C5F2B48EC
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32322d3232203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:33 +0000
ROA not before:           Tue 05 Dec 2023 15:39:33 +0000
ROA not after:            Tue 03 Dec 2024 15:44:33 +0000
asID:                     263641
IP address blocks:        168.205.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d0:35:d2:66:ee:6e:bb:f8:82:a3:cf:52:f4:ed:6c:5f:2b:48:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:33 2023 GMT
            Not After : Dec  3 15:44:33 2024 GMT
        Subject: CN=8737766F5C95E0BAEBFE42111391F547A138DF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:d1:78:6d:0c:14:e8:da:8c:69:d0:83:af:
                    0f:a6:97:42:1e:7d:5e:5c:8e:9a:77:b2:62:6e:f8:
                    92:3a:d0:02:51:5e:03:23:ac:6c:58:dc:ca:8d:bf:
                    c6:d9:20:0d:6e:e0:6e:e6:fc:e8:4f:c4:15:7f:7a:
                    dc:67:1a:53:d5:31:80:8e:ee:6c:67:94:78:79:76:
                    fa:bd:9c:b0:4a:b1:ca:4a:57:b0:3f:ac:07:97:5f:
                    7c:ba:eb:c6:74:e8:93:74:18:09:56:5b:e3:02:af:
                    7b:70:6c:cd:27:3a:8d:e5:bd:14:6d:b4:6a:c0:43:
                    26:22:0c:e8:ad:ad:84:c5:db:a6:9f:a5:e2:7b:1a:
                    6f:0d:18:f7:b2:51:20:27:8c:d5:07:cd:e4:3b:f0:
                    cc:c5:6a:1c:b3:95:3b:e7:81:f9:d8:f6:ec:88:f7:
                    fd:f2:4a:ab:71:34:f0:fe:4f:52:fa:3c:b9:05:0a:
                    34:84:d3:eb:a3:54:89:ed:41:35:51:de:78:f4:28:
                    28:f2:90:d7:d5:40:e2:16:d0:60:5b:75:23:69:13:
                    9c:a4:5b:b3:40:3c:bf:3f:59:49:08:dd:79:c5:6e:
                    27:c8:44:f0:75:84:2c:10:3f:3e:f4:62:03:e7:bf:
                    8c:29:f4:ca:da:e6:36:44:07:7f:38:d2:e1:c8:20:
                    77:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:37:76:6F:5C:95:E0:BA:EB:FE:42:11:13:91:F5:47:A1:38:DF:6D
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32322d3232203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:be:ef:ad:ee:5f:6f:87:91:a4:8e:8c:c6:c8:f3:e1:d3:cf:
         1e:87:8e:48:54:5c:9d:3d:99:c1:f5:04:c3:bd:6e:ae:c8:d6:
         ae:55:2f:55:ff:e0:8f:5e:a3:2e:7f:10:10:58:7f:d7:f0:87:
         08:9b:13:b6:91:83:03:cd:e2:cc:8f:f1:60:bf:0e:8a:65:f5:
         d3:47:9d:28:07:5f:72:8d:05:d6:67:da:d4:d2:35:9e:be:a9:
         b8:2c:58:8c:7d:b4:02:c4:5e:5c:e0:c8:e1:44:0e:7b:66:0e:
         87:72:9f:15:23:8a:eb:70:a1:96:cf:d6:2b:f8:81:d3:92:75:
         96:9b:24:d6:9e:e5:7d:a2:68:53:bb:70:cd:f5:03:ef:ff:3d:
         45:3c:8f:48:c6:b1:3c:84:9b:1a:d5:be:e4:b1:99:0c:d1:f0:
         ad:ce:25:d2:d2:1f:6f:56:f3:8b:41:7f:62:68:e3:4a:0c:62:
         cc:56:b9:21:0c:ca:f9:e1:66:59:ec:02:39:20:49:dd:83:c9:
         89:15:7e:ad:d9:d7:5c:33:70:85:da:62:7c:bd:b5:e4:75:34:
         99:39:01:b2:f8:51:a0:23:7b:ab:9e:18:d1:28:ac:2b:c8:8b:
         96:83:cc:6e:a6:e4:b6:62:82:34:8e:5d:43:e9:64:bc:56:ca:
         7a:ef:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org