Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31372e302f32342d3234203d3e20323633303537.roa
File:                     3136382e3232382e31372e302f32342d3234203d3e20323633303537.roa (raw, json)
Hash identifier:          /q/z35sU8SmUUjGfY4L6qGAuUtEd8iSbL9lNqpcaLZc=
Subject key identifier:   F4:23:CF:CF:C1:91:85:14:F5:A0:20:2D:B5:3F:76:F6:7F:F9:4B:45
Certificate issuer:       /CN=C21F0113A7A311E6D682C1938972619E614335EC
Certificate serial:       0CE477321415A7E36C9CCC8B16E7D21D2354F9FF
Authority key identifier: C2:1F:01:13:A7:A3:11:E6:D6:82:C1:93:89:72:61:9E:61:43:35:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C21F0113A7A311E6D682C1938972619E614335EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31372e302f32342d3234203d3e20323633303537.roa
Signing time:             Fri 13 May 2022 20:08:04 +0000
ROA not before:           Fri 13 May 2022 20:03:04 +0000
ROA not after:            Fri 12 May 2023 20:08:04 +0000
asID:                     263057
IP address blocks:        168.228.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e4:77:32:14:15:a7:e3:6c:9c:cc:8b:16:e7:d2:1d:23:54:f9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C21F0113A7A311E6D682C1938972619E614335EC
        Validity
            Not Before: May 13 20:03:04 2022 GMT
            Not After : May 12 20:08:04 2023 GMT
        Subject: CN=F423CFCFC1918514F5A0202DB53F76F67FF94B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:92:29:58:3e:19:64:0a:43:89:64:8f:f9:
                    94:4e:aa:84:df:b1:6f:ea:ef:2d:bc:61:d0:0c:e4:
                    a9:cc:8c:08:c2:13:9f:6d:5c:80:f2:5e:ea:a0:7e:
                    5b:d5:bf:b2:72:67:14:34:60:ee:bb:14:6b:03:a1:
                    29:c3:3f:37:3d:f6:b4:de:b7:e0:2c:b5:96:2e:23:
                    70:88:ea:05:48:1e:c7:3e:46:2a:5a:a9:60:a0:7d:
                    e6:0b:26:95:3a:cb:c7:d5:0e:0a:50:6e:c0:b8:5c:
                    cf:4f:5a:85:b2:da:90:72:e3:7e:b7:64:03:76:af:
                    e4:0d:ab:f5:9b:16:16:95:a7:f9:14:f0:07:1b:71:
                    b7:e0:70:0c:98:9d:6a:02:4d:a1:12:b3:5f:d4:51:
                    8f:34:0c:29:93:5d:43:3b:45:74:43:b5:ee:3d:ab:
                    da:ac:5f:58:45:30:1c:c5:06:56:60:4f:0c:ad:31:
                    02:0e:31:78:a1:54:fd:d7:b5:5e:bc:f6:af:5e:cc:
                    23:d8:59:ea:ca:24:e2:d5:73:c0:86:c1:8e:83:d7:
                    37:06:34:d3:e4:39:eb:2b:2d:b3:7c:c0:ca:b9:35:
                    f0:4c:00:3b:0a:96:79:03:a4:45:37:d9:18:66:77:
                    ca:d9:e8:00:ef:39:28:38:ec:1c:0d:3c:fd:73:51:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:23:CF:CF:C1:91:85:14:F5:A0:20:2D:B5:3F:76:F6:7F:F9:4B:45
            X509v3 Authority Key Identifier:
                keyid:C2:1F:01:13:A7:A3:11:E6:D6:82:C1:93:89:72:61:9E:61:43:35:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/C21F0113A7A311E6D682C1938972619E614335EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C21F0113A7A311E6D682C1938972619E614335EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31372e302f32342d3234203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:84:3b:8e:5f:a3:6f:15:be:a4:c3:b5:02:10:90:aa:b9:04:
         15:ca:0a:28:6d:d3:2f:e0:4b:53:30:4a:ec:92:2c:9b:3c:a3:
         be:29:02:20:39:dc:e8:74:dc:79:e3:1e:1f:a1:50:e0:a3:f2:
         4b:87:4a:96:78:b7:62:1e:ac:3f:bb:bc:97:d7:af:22:02:f1:
         38:d3:36:71:e7:2c:8f:0c:6b:ec:8f:21:41:88:1a:58:71:af:
         09:21:92:cc:66:33:6e:44:18:80:c6:f2:43:c9:84:1e:cf:06:
         50:0d:a2:3e:d2:ff:8d:d3:60:dd:cc:ef:00:fe:2a:25:3e:9d:
         d2:6b:f0:72:b2:9b:82:f1:5a:ab:d7:98:ec:77:3e:1e:86:2f:
         94:a8:0f:f9:11:22:6c:c0:d5:04:1d:a0:3a:7e:f9:b0:5a:27:
         8d:f6:c1:76:4d:b2:fe:77:72:08:76:d2:0a:73:aa:aa:0b:7b:
         99:6c:d7:24:92:3c:c7:f0:1a:2a:41:09:f9:11:a4:c1:7d:13:
         b5:1d:e5:f0:25:18:ed:15:06:91:da:6e:4b:ad:0f:e8:10:39:
         8a:12:ec:e3:ff:0c:e8:ab:6c:87:b2:22:77:43:e7:05:81:4c:
         d1:9c:18:9d:63:cb:92:82:b7:85:f4:1b:7b:bc:78:e9:16:47:
         31:34:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org