Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3136382e3139342e3234342e302f32322d3234203d3e203532363034.roa
File:                     3136382e3139342e3234342e302f32322d3234203d3e203532363034.roa (raw, json)
Hash identifier:          HtJ+N1aiWT0Cx6G0jdtrkhh6S3CS2SeJqfCA65Su9yA=
Subject key identifier:   37:BA:EE:90:75:9C:BF:53:C0:26:49:89:D2:58:19:7A:A7:71:B2:40
Certificate issuer:       /CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
Certificate serial:       01D062F8B3759513024A13D5D55B3D3B9749241E
Authority key identifier: 68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3136382e3139342e3234342e302f32322d3234203d3e203532363034.roa
Signing time:             Wed 22 Nov 2023 23:00:00 +0000
ROA not before:           Wed 22 Nov 2023 22:55:00 +0000
ROA not after:            Wed 20 Nov 2024 23:00:00 +0000
asID:                     52604
IP address blocks:        168.194.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d0:62:f8:b3:75:95:13:02:4a:13:d5:d5:5b:3d:3b:97:49:24:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
        Validity
            Not Before: Nov 22 22:55:00 2023 GMT
            Not After : Nov 20 23:00:00 2024 GMT
        Subject: CN=37BAEE90759CBF53C0264989D258197AA771B240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:e5:79:21:d7:e4:34:52:b9:61:2d:e0:ca:
                    71:75:7b:15:67:26:48:a5:73:c2:0a:21:15:c3:2f:
                    ff:88:54:fc:f6:04:8a:30:39:20:97:90:c0:0e:98:
                    77:ea:1b:68:a1:b3:6b:09:ba:38:f9:f2:2a:74:71:
                    e9:76:7c:a1:93:40:f2:ab:4f:f8:a6:8f:af:df:d9:
                    2f:5f:1f:ea:0a:8d:d8:14:e3:c4:b8:ac:7b:bb:6d:
                    34:7b:5a:78:d9:a5:fc:08:5b:2a:f9:37:7e:05:4d:
                    ca:f8:06:ec:5a:7f:d3:44:fd:b3:f5:4d:73:64:37:
                    1f:5b:eb:be:fe:c7:69:2b:47:ae:85:7a:7b:36:5d:
                    5c:63:a0:7c:07:21:4f:b3:08:3d:ac:ba:4c:9f:36:
                    ab:01:47:e8:9b:8a:7f:d2:09:8b:98:43:b0:f5:db:
                    36:8f:f9:e2:b4:4a:59:cb:17:0c:6f:5a:cf:cb:b4:
                    86:42:20:dc:e3:ca:39:85:f6:7c:be:01:1b:5b:68:
                    05:3a:ab:64:32:37:14:63:e6:ef:a8:ee:95:2a:b5:
                    b7:44:42:a3:21:83:fa:a9:91:6a:69:9e:92:85:05:
                    25:a5:8c:4a:c6:8c:4b:9d:94:d2:36:87:4a:c2:ab:
                    53:17:b8:97:5e:43:8e:4e:82:71:8b:5a:5b:28:05:
                    c2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BA:EE:90:75:9C:BF:53:C0:26:49:89:D2:58:19:7A:A7:71:B2:40
            X509v3 Authority Key Identifier:
                keyid:68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3136382e3139342e3234342e302f32322d3234203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:41:d1:63:6c:c5:39:8c:84:93:73:21:d8:19:e1:68:2a:1f:
         f9:3c:ee:61:a6:6d:d9:26:87:fc:1f:f2:35:c5:a7:4a:73:24:
         3d:ca:91:39:c9:65:72:01:53:ca:ba:d5:a6:f7:2c:92:e2:f8:
         c3:91:ff:95:52:6f:d4:62:ec:3f:d8:fb:87:0d:b6:fa:26:bc:
         7e:ad:f6:48:1c:5d:f5:5d:b9:95:67:d9:30:b9:49:50:e1:5c:
         81:ad:3a:45:30:1b:0c:d8:37:e6:f9:34:13:94:72:b7:9b:77:
         0a:44:6d:a4:c7:0b:73:09:9e:b6:73:e5:cc:fe:5e:98:af:84:
         59:de:3a:4e:5b:bc:67:7c:25:e0:43:8e:91:52:63:76:f2:e3:
         c0:7f:3e:e8:52:8e:e0:0e:df:cc:97:8b:67:85:d8:20:1a:c7:
         7e:b4:75:29:d7:17:7b:7a:a0:47:87:08:08:89:2d:fd:8e:f9:
         20:a0:c7:2c:36:80:a1:9e:55:38:6c:23:91:09:40:0c:c0:7e:
         d4:ff:25:73:b9:cb:61:5a:8a:1d:03:91:8b:07:59:3c:5f:2e:
         9d:11:54:f5:65:f3:07:db:3d:93:50:f1:01:81:b1:0c:36:a2:
         fc:50:3d:70:01:ad:84:bd:bc:1f:9f:3c:02:0a:d2:fa:e1:92:
         54:cf:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org