Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134382e302f32322d3234203d3e20323632343933.roa
File:                     3136382e3132312e3134382e302f32322d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          NZeOt9RgLI04iCTe3mmU0+UR/twdRKnWHRnck99uuQU=
Subject key identifier:   4F:9E:DE:EA:A0:35:B1:34:23:F0:CC:9B:D4:DE:54:9F:DD:B6:58:71
Certificate issuer:       /CN=AB1208C7749A004A7E8E0BC8565235BB154C6988
Certificate serial:       3F22FF2A0453C5FC2B24BE3F1F21B349D8C7E897
Authority key identifier: AB:12:08:C7:74:9A:00:4A:7E:8E:0B:C8:56:52:35:BB:15:4C:69:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB1208C7749A004A7E8E0BC8565235BB154C6988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134382e302f32322d3234203d3e20323632343933.roa
Signing time:             Sun 08 Oct 2023 14:25:10 +0000
ROA not before:           Sun 08 Oct 2023 14:20:10 +0000
ROA not after:            Sun 06 Oct 2024 14:25:10 +0000
asID:                     262493
IP address blocks:        168.121.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:ff:2a:04:53:c5:fc:2b:24:be:3f:1f:21:b3:49:d8:c7:e8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB1208C7749A004A7E8E0BC8565235BB154C6988
        Validity
            Not Before: Oct  8 14:20:10 2023 GMT
            Not After : Oct  6 14:25:10 2024 GMT
        Subject: CN=4F9EDEEAA035B13423F0CC9BD4DE549FDDB65871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:15:5e:f8:76:96:74:52:c0:27:80:c9:9a:
                    7a:05:c7:60:eb:c2:b5:73:fc:a7:93:dd:a0:d9:c0:
                    a6:b0:bf:48:c9:1e:a7:f2:26:41:dc:db:5a:2b:20:
                    3b:aa:ed:cc:e9:78:ca:2a:3f:e8:34:75:66:a3:b4:
                    12:f9:2e:7b:2f:3e:56:23:c7:f8:b8:16:8a:86:19:
                    a3:f3:7f:66:26:91:11:b1:cd:ba:89:a1:b7:44:bb:
                    75:ef:b2:06:fa:94:e7:9f:6e:86:06:ae:9b:46:af:
                    92:b1:c3:af:db:42:36:48:ac:28:b1:58:20:26:0e:
                    14:43:63:31:96:fb:a1:98:33:59:bc:70:d3:40:d8:
                    86:fc:f4:2a:31:ca:4d:10:b6:fe:78:7c:e4:0a:1f:
                    06:c5:fa:65:3d:86:6a:7b:81:af:69:d6:11:3a:07:
                    f5:5f:2c:9f:eb:67:88:c0:24:32:b3:d6:2d:30:eb:
                    40:93:96:e4:7a:3f:57:be:4f:3d:5d:e8:51:5d:58:
                    cd:cc:36:44:7b:32:a9:11:4b:18:a3:7f:7c:b3:18:
                    03:c3:39:25:6d:8e:65:1c:64:dd:4b:02:d0:79:0c:
                    c2:e1:fb:a0:c2:92:d1:3c:51:0d:38:8c:4c:a1:33:
                    e1:86:2f:b9:9f:1f:75:a3:f6:19:b2:1e:39:b7:7b:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9E:DE:EA:A0:35:B1:34:23:F0:CC:9B:D4:DE:54:9F:DD:B6:58:71
            X509v3 Authority Key Identifier:
                keyid:AB:12:08:C7:74:9A:00:4A:7E:8E:0B:C8:56:52:35:BB:15:4C:69:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/AB1208C7749A004A7E8E0BC8565235BB154C6988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB1208C7749A004A7E8E0BC8565235BB154C6988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134382e302f32322d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:57:06:ef:16:39:cd:5c:ef:4a:2d:91:2e:6a:40:a8:c0:
         99:dd:da:42:4a:a1:42:d6:7e:b7:78:26:3a:ee:ae:3d:96:83:
         9e:4d:99:2c:f1:11:e2:4a:c4:c9:8f:f4:54:20:9b:6f:2b:ff:
         bf:19:3e:65:75:44:58:aa:8a:72:e8:b3:b9:c6:61:3f:7e:6d:
         60:17:b3:19:e1:81:6d:8c:06:14:65:4d:d3:e2:c3:80:7f:50:
         17:31:b9:fb:bb:84:df:19:e1:4d:44:9d:d5:3d:17:bb:5d:64:
         25:fe:8d:07:fa:7d:64:6f:79:f2:4b:f1:e7:99:b6:08:ca:21:
         92:13:10:c8:9d:ec:e3:96:4b:b6:db:7b:08:78:30:1f:98:b9:
         1d:9b:d0:09:4b:b5:06:6c:39:4d:69:7e:06:4a:f4:66:41:3e:
         fe:83:0b:78:30:3a:5d:f6:b9:70:d9:a9:09:ea:17:95:0b:79:
         39:68:4e:c8:33:93:8f:8e:ce:5d:3c:bd:e3:bc:42:6b:7e:a1:
         4f:49:f3:ba:83:e4:52:b8:ff:ef:6c:31:aa:86:8c:ed:33:7e:
         36:5f:4e:dd:ae:5b:bf:d8:49:57:af:38:81:df:93:fd:b2:e7:
         64:72:4e:ee:b5:40:18:95:eb:18:52:48:fd:dd:8a:64:95:b4:
         63:2e:94:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org