Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3136382e3139372e3233362e302f32322d3234203d3e20323633393832.roa
File:                     3136382e3139372e3233362e302f32322d3234203d3e20323633393832.roa (raw, json)
Hash identifier:          RlTnJxo0nsqKQf3tKtxG9atFzf3EWUZKuuhCd0VfTjA=
Subject key identifier:   AD:6D:22:B3:35:A4:87:30:A8:A4:43:09:EF:77:E4:39:33:B7:2C:97
Certificate issuer:       /CN=010DADE301A8E5F8BF09DE2295BF9D0645BF819A
Certificate serial:       5C0447C7568E8957E6AF82B6A74060816D9B3C80
Authority key identifier: 01:0D:AD:E3:01:A8:E5:F8:BF:09:DE:22:95:BF:9D:06:45:BF:81:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/010DADE301A8E5F8BF09DE2295BF9D0645BF819A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3136382e3139372e3233362e302f32322d3234203d3e20323633393832.roa
Signing time:             Mon 26 Jun 2023 14:00:00 +0000
ROA not before:           Mon 26 Jun 2023 13:55:00 +0000
ROA not after:            Mon 24 Jun 2024 14:00:00 +0000
asID:                     263982
IP address blocks:        168.197.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:04:47:c7:56:8e:89:57:e6:af:82:b6:a7:40:60:81:6d:9b:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=010DADE301A8E5F8BF09DE2295BF9D0645BF819A
        Validity
            Not Before: Jun 26 13:55:00 2023 GMT
            Not After : Jun 24 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:9f:cb:5f:c3:e1:cd:6b:71:57:36:90:51:
                    67:9a:5d:64:ce:99:b8:df:56:38:79:73:bf:f0:16:
                    91:6a:fd:45:3e:58:e8:7d:1f:61:3f:a5:58:e0:87:
                    11:92:da:d5:83:08:fd:de:57:f2:b6:1f:28:af:28:
                    0f:f3:67:1b:f0:32:fa:a3:de:82:45:a7:2b:61:a1:
                    b9:4d:4f:1f:15:4f:f3:eb:c0:5f:ed:77:1c:e1:7c:
                    0f:ab:7c:c3:69:23:2b:a4:95:aa:9f:c4:37:bd:d2:
                    78:39:5d:12:fd:fc:a2:03:73:b4:f0:04:6c:f1:df:
                    36:43:45:f6:7b:d2:f8:56:24:e7:a0:f7:95:32:94:
                    64:d8:54:23:32:27:66:07:c8:bb:95:4e:c8:3f:37:
                    66:a5:30:e0:19:de:ca:21:b0:24:31:26:f1:4a:92:
                    8f:d6:8a:59:13:a1:a6:00:4e:f5:53:ce:eb:67:37:
                    b4:2d:15:42:31:e3:15:ea:e0:8e:3f:8a:e7:70:26:
                    ab:c3:05:33:83:e7:fd:db:dd:ec:3c:9e:d7:f4:29:
                    cb:e3:73:d7:33:87:4d:bc:93:5f:da:c3:07:6f:96:
                    53:6c:91:c8:6e:f5:1a:c7:04:be:37:0a:05:8e:d2:
                    c9:a3:8f:c0:b2:16:73:17:c7:aa:53:c3:99:da:be:
                    cb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6D:22:B3:35:A4:87:30:A8:A4:43:09:EF:77:E4:39:33:B7:2C:97
            X509v3 Authority Key Identifier:
                keyid:01:0D:AD:E3:01:A8:E5:F8:BF:09:DE:22:95:BF:9D:06:45:BF:81:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/010DADE301A8E5F8BF09DE2295BF9D0645BF819A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/010DADE301A8E5F8BF09DE2295BF9D0645BF819A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3136382e3139372e3233362e302f32322d3234203d3e20323633393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:27:65:09:08:37:ae:1f:59:32:23:dc:6f:f1:cb:ca:a6:d5:
         db:1d:6e:c3:49:f3:ca:ce:7c:cd:e3:1a:70:c0:60:b0:e2:4f:
         70:2f:d4:5c:84:30:fa:12:6f:e5:eb:2c:90:33:c4:cf:22:42:
         20:91:56:6b:08:75:7e:5d:c2:91:09:9d:4c:f0:f3:a3:a8:79:
         56:26:e4:da:eb:c7:a9:af:5b:fc:0f:ba:a1:e7:58:39:86:2e:
         81:9b:ff:87:7c:cc:c4:50:20:7e:37:a1:05:1a:e8:87:88:68:
         43:43:99:97:2d:76:96:74:ee:d8:f9:af:47:7c:49:70:f9:6a:
         8e:4c:82:58:5e:04:8b:9d:f8:42:a9:df:58:94:b2:ca:63:d3:
         59:ef:e3:40:d5:e1:4d:ed:c3:31:d1:66:02:cd:a5:75:21:51:
         c0:58:93:91:24:21:26:e3:c1:b2:4e:c7:90:21:8e:f9:f9:c8:
         bb:d9:fe:92:56:7b:3a:3a:08:80:1c:3c:ae:6e:73:79:23:ec:
         52:12:87:37:06:0e:f0:a1:63:4f:e4:f3:69:cf:5d:a2:20:a8:
         33:dd:26:90:1d:b7:ad:f2:61:19:77:92:f7:fc:48:9d:a2:0e:
         03:79:0b:3c:b2:a1:76:6b:7b:1a:c4:63:35:b8:f0:d2:42:04:
         d8:86:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org