Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32342d3234203d3e20323633363431.roa
File:                     3136382e3230352e36302e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          /7lX6klr+MLSzaBMg5GcZk1KKg1IP8c/q/wWjyqN0Yg=
Subject key identifier:   58:F8:DF:26:8A:F3:79:9A:16:45:5E:A7:D9:D6:A8:B3:4E:83:CB:28
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       770B0316B659D36C8F17747DB8946561613A8BE7
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32342d3234203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:35 +0000
ROA not before:           Tue 05 Dec 2023 15:39:35 +0000
ROA not after:            Tue 03 Dec 2024 15:44:35 +0000
asID:                     263641
IP address blocks:        168.205.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0b:03:16:b6:59:d3:6c:8f:17:74:7d:b8:94:65:61:61:3a:8b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:35 2023 GMT
            Not After : Dec  3 15:44:35 2024 GMT
        Subject: CN=58F8DF268AF3799A16455EA7D9D6A8B34E83CB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:29:88:cc:5b:a0:bc:df:66:3f:f5:89:c5:
                    89:3c:77:aa:e8:40:99:66:72:d2:63:16:17:a0:0b:
                    d6:00:78:e4:cf:bf:27:cc:e3:ef:18:97:c2:f5:82:
                    ca:fe:90:70:2c:a4:58:ea:7e:48:04:a5:ba:cc:dc:
                    e7:02:16:55:c5:ca:da:7b:4e:70:33:6e:d3:05:25:
                    29:e8:d8:39:a1:60:1e:15:67:01:8d:96:1a:20:14:
                    c3:5b:cd:77:57:1c:b3:38:20:e2:a7:f3:f5:31:23:
                    9a:78:e3:f1:cf:7a:52:d4:f3:8b:10:16:9b:21:0b:
                    47:7f:b0:df:aa:38:5c:a2:ef:50:37:47:f5:6a:11:
                    fe:4f:a2:5d:3e:a5:d3:94:cb:56:c8:e1:68:30:00:
                    de:eb:7b:9a:07:16:b8:c1:21:06:ee:0c:bf:c0:ed:
                    99:87:dc:76:0c:cb:79:8e:31:9e:22:8c:73:b6:c9:
                    09:79:76:ee:d4:cf:93:33:87:54:fa:92:c9:58:26:
                    02:be:b1:22:ad:bc:5d:3b:ca:d6:b0:a3:99:83:26:
                    49:9d:64:0b:82:96:26:82:7e:b9:03:25:2c:5a:29:
                    20:9e:4c:87:e7:d4:28:cb:19:75:a6:58:83:33:a6:
                    9a:49:14:e3:25:31:db:31:38:01:8a:26:67:a8:0b:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F8:DF:26:8A:F3:79:9A:16:45:5E:A7:D9:D6:A8:B3:4E:83:CB:28
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:54:24:53:25:96:22:61:90:4f:e8:d8:0d:95:72:ec:53:73:
         e5:54:cc:cc:f4:8b:58:7e:62:f2:18:c3:ec:dc:f9:1e:07:6f:
         93:d7:b3:93:20:43:ed:7b:91:c2:22:3e:b0:1c:b7:c7:3c:36:
         b0:f6:2f:d3:a1:be:88:92:88:06:55:c7:58:6e:bc:60:f5:c5:
         d4:72:ba:70:ff:20:d0:80:b8:c2:8a:f4:53:5b:c1:1e:9f:0b:
         15:b5:79:5c:0c:de:28:02:bd:63:26:d2:31:59:fb:45:ac:a4:
         77:0b:2a:93:8a:ef:c6:8b:1d:07:c8:a3:7d:be:36:9e:fc:96:
         6f:13:ba:ec:ef:9f:5a:a7:f5:04:e3:cf:dc:c6:c8:0d:6d:db:
         7a:7b:c0:c6:7a:85:09:20:8f:db:41:6d:8c:73:2e:bb:d0:95:
         51:49:a2:09:f7:a4:43:b1:f0:96:b5:1f:69:f9:33:cd:2d:4f:
         c6:f1:aa:c9:b7:80:70:47:8a:e7:74:34:8a:d7:fe:3c:35:05:
         44:e3:94:da:9d:42:51:b4:4c:e6:64:62:0b:6b:50:e5:ef:a6:
         53:93:19:cc:d4:92:46:f9:35:37:37:dd:b2:81:a1:40:2c:b3:
         b8:1e:c4:d4:d7:f8:c1:21:ab:fb:e7:64:33:f2:47:77:8e:bd:
         9d:50:03:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org