Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134302e302f32322d3232203d3e20323635333337.roa
File:                     3136382e3138312e3134302e302f32322d3232203d3e20323635333337.roa (raw, json)
Hash identifier:          9RSIkLSeco+K0DIBIRMCMtLH0V+vLxlfenIOBMuWez8=
Subject key identifier:   2F:08:B5:A6:93:E2:9A:CF:65:A0:A4:32:5E:5A:B9:10:1E:9B:5B:35
Certificate issuer:       /CN=2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8
Certificate serial:       1D7AB8CF8BCFA50D06B58B3332033C1318CD9ABD
Authority key identifier: 2B:42:6F:B5:76:C4:4D:9F:52:DC:A8:6B:26:EE:5A:1C:B7:EB:D1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134302e302f32322d3232203d3e20323635333337.roa
Signing time:             Tue 05 Sep 2023 14:06:33 +0000
ROA not before:           Tue 05 Sep 2023 14:01:33 +0000
ROA not after:            Tue 03 Sep 2024 14:06:33 +0000
asID:                     265337
IP address blocks:        168.181.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7a:b8:cf:8b:cf:a5:0d:06:b5:8b:33:32:03:3c:13:18:cd:9a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8
        Validity
            Not Before: Sep  5 14:01:33 2023 GMT
            Not After : Sep  3 14:06:33 2024 GMT
        Subject: CN=2F08B5A693E29ACF65A0A4325E5AB9101E9B5B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:18:59:37:5c:cc:ad:ec:c3:ba:0d:9e:6c:
                    0d:5a:e0:68:e8:20:11:ed:0e:41:ef:94:17:81:3e:
                    24:9d:fc:8b:a8:90:4c:31:05:ba:a4:f4:9a:ea:e8:
                    86:93:4d:a8:b3:1c:23:a5:d8:b5:01:3f:7a:b1:43:
                    7a:ea:14:37:83:e7:b4:a2:90:c9:d6:c1:86:ec:06:
                    dd:43:c1:94:5d:c5:54:07:a8:d8:ec:86:41:76:3a:
                    55:b1:7b:78:6b:df:da:1a:6c:0c:ac:c0:e0:aa:51:
                    00:db:e3:47:16:0a:29:05:2e:ec:c5:4f:cf:b7:46:
                    c3:a2:f6:10:3c:64:96:c9:ab:c5:27:ec:5e:dd:8d:
                    08:af:62:8e:27:86:28:29:b3:86:ef:91:e7:89:78:
                    8c:da:86:41:b0:2b:f2:81:cd:0c:53:5e:53:5d:fe:
                    21:48:42:2c:73:7d:e6:46:a6:e9:70:25:fe:8d:d0:
                    7e:f9:b1:15:9a:85:e3:3b:ea:87:9c:ce:ff:21:d1:
                    e1:5e:b4:db:8c:93:db:06:4d:a3:88:3c:91:03:2b:
                    55:d0:d2:d4:da:29:6b:ea:c8:b2:b5:0b:f1:42:d9:
                    da:01:b3:2e:88:eb:22:44:6d:4e:1b:ca:5e:58:3e:
                    d7:70:8b:86:2b:b8:4f:bb:ae:d6:dc:30:e8:f2:20:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:08:B5:A6:93:E2:9A:CF:65:A0:A4:32:5E:5A:B9:10:1E:9B:5B:35
            X509v3 Authority Key Identifier:
                keyid:2B:42:6F:B5:76:C4:4D:9F:52:DC:A8:6B:26:EE:5A:1C:B7:EB:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134302e302f32322d3232203d3e20323635333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:51:05:6f:a3:62:ea:7e:72:d2:7a:4c:e3:51:d9:45:a9:c3:
         f6:c9:fc:e0:b4:4c:83:98:d9:88:97:ac:cb:0b:ae:54:fd:ad:
         1b:4f:df:2a:15:8e:0d:16:6c:43:a4:ea:6a:76:5b:28:93:7d:
         41:e9:21:d3:c0:a9:cd:82:f8:c5:24:bb:55:32:6d:0f:0e:a6:
         1a:2d:16:0e:5b:35:6e:47:b5:07:6a:aa:f5:19:17:2c:c7:39:
         d3:fc:72:c7:d0:fe:b7:0a:6c:29:38:10:0a:84:6e:ff:7a:90:
         b0:5c:91:e9:e9:e4:11:8d:eb:31:fb:12:bb:d3:d6:2c:b2:a9:
         07:78:63:08:bc:69:46:fb:f1:19:ad:7e:bd:ec:85:8b:7c:65:
         9e:cd:f7:03:52:a8:bc:9c:7b:b8:4e:f1:b2:2c:e6:0e:4c:87:
         3a:7d:4d:cc:e1:44:d9:27:29:63:bb:1d:a6:ab:12:ec:23:02:
         46:16:ef:d0:df:a3:c9:08:03:56:32:66:c1:f6:d9:47:31:0f:
         65:79:50:ca:4a:dd:8a:64:8b:50:79:32:9c:f2:ec:f8:0c:e9:
         a1:2e:58:01:3c:7e:ff:fb:d3:0e:d2:02:cf:21:fd:7f:61:59:
         3f:0e:b4:23:93:63:72:96:05:a7:ad:ee:4f:d0:f6:8e:4d:24:
         92:89:89:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:24 2024 by rpki-client on console-fra.rpki-client.org