Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa
File:                     3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa (raw, json)
Hash identifier:          LtI4WnS2Xb5OyyqpI7AMAgnnCnaKQcEHQm4XRMwAcd0=
Subject key identifier:   8C:60:53:5F:DD:1C:86:2D:52:13:AC:F8:0E:84:10:15:C2:D8:B0:AE
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       095498772DD858D74FA04227097A05CB7D03F3A9
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa
Signing time:             Tue 09 May 2023 14:22:01 +0000
ROA not before:           Tue 09 May 2023 14:17:01 +0000
ROA not after:            Tue 07 May 2024 14:22:01 +0000
asID:                     263641
IP address blocks:        168.205.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:54:98:77:2d:d8:58:d7:4f:a0:42:27:09:7a:05:cb:7d:03:f3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: May  9 14:17:01 2023 GMT
            Not After : May  7 14:22:01 2024 GMT
        Subject: CN=8C60535FDD1C862D5213ACF80E841015C2D8B0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:77:0d:00:6e:0a:e1:67:fb:6f:d4:11:f0:91:
                    50:e5:78:cd:0f:21:e7:71:ba:e2:a6:a7:1b:1c:e6:
                    d7:80:fa:cb:b3:ab:46:49:78:52:70:31:aa:37:c9:
                    a9:72:64:4c:0f:55:5a:7a:31:d9:e8:33:84:b6:37:
                    c5:1b:cf:bc:61:e4:64:9d:d7:84:5e:16:db:7c:e8:
                    82:71:39:28:04:66:be:82:0c:17:dd:3a:11:ce:b9:
                    a6:50:f3:85:91:b9:42:f1:65:51:b5:f1:67:20:e0:
                    bf:90:8a:7d:98:ce:3e:e5:14:2f:3d:74:eb:4e:4f:
                    12:69:72:a9:e0:41:43:61:9e:59:fb:b6:6a:b4:56:
                    7c:a8:4e:2d:8d:29:ee:13:1b:1d:e3:db:2c:f1:15:
                    91:b1:5b:49:13:0e:d5:cd:56:4e:e7:cf:b2:3c:1f:
                    ec:cc:f5:54:be:f8:93:42:98:e8:97:bd:92:0b:56:
                    49:dd:01:71:a6:2b:b8:6d:68:6f:02:9b:25:b9:ea:
                    c7:96:14:c3:8b:38:23:d6:19:72:54:dd:bf:7e:26:
                    f2:43:be:c7:5d:da:c0:92:5e:7a:dc:6d:c5:50:32:
                    de:84:08:73:ac:9f:db:1d:8b:39:10:96:75:ca:80:
                    89:ae:2e:e6:c6:9a:0f:21:8f:2e:bf:c3:9a:0a:f7:
                    93:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:60:53:5F:DD:1C:86:2D:52:13:AC:F8:0E:84:10:15:C2:D8:B0:AE
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:eb:9b:80:7c:4a:72:4d:6b:ec:0b:56:3b:c2:e6:21:51:17:
         26:75:81:4c:8c:94:95:0a:b1:a4:7f:3c:98:c5:55:a2:14:63:
         5a:27:29:ca:09:6a:e5:3c:0a:1b:ec:a1:bc:5f:a7:90:ba:85:
         7c:1b:5a:b2:32:2f:e1:9c:d1:cc:e4:55:ce:a1:ef:be:97:15:
         e6:58:1e:60:52:53:a5:87:b3:ea:f2:63:7c:35:97:20:57:f7:
         ef:8d:cc:52:f0:fa:31:e1:05:33:f1:5c:24:3b:2a:c5:9b:ba:
         9d:f7:4b:7d:1b:20:4a:1a:49:95:e7:18:66:b0:3e:a5:df:da:
         d2:f8:40:34:3d:e1:6f:87:e7:0e:ed:08:bb:d2:32:27:05:5f:
         9d:a4:4b:bb:fb:de:d6:df:17:78:f7:7b:eb:27:9b:df:da:ca:
         47:4f:88:23:ee:68:53:40:ee:4f:76:82:89:1a:8a:ae:97:bd:
         a4:84:da:e5:37:39:5d:d5:f3:83:c3:77:b4:b6:43:46:42:44:
         80:37:04:41:96:5c:c6:e2:88:58:25:2b:56:f7:65:75:d2:7a:
         42:91:de:f3:e3:53:6b:d0:a4:95:c8:89:59:f1:8c:38:65:49:
         d1:66:eb:dc:aa:f0:1f:55:f8:3e:51:08:a3:e7:34:10:9b:f0:
         06:84:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org