Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/1/3136382e3139352e3233322e302f32322d3234203d3e20323633303839.roa
File:                     3136382e3139352e3233322e302f32322d3234203d3e20323633303839.roa (raw, json)
Hash identifier:          PPX6QVqb81Y4sPFFfJwBGbERgGx1wVa8ekdaUJQAoU0=
Subject key identifier:   57:8D:73:9C:F0:E5:97:D4:5C:C5:D8:F5:8B:7F:B7:5B:0F:03:FF:A6
Certificate issuer:       /CN=6FE0CCD82452320BCB7B9FC0EBC80CACBF964820
Certificate serial:       050ADF054EB000CC04B503ED835EFB3FFC8684BC
Authority key identifier: 6F:E0:CC:D8:24:52:32:0B:CB:7B:9F:C0:EB:C8:0C:AC:BF:96:48:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FE0CCD82452320BCB7B9FC0EBC80CACBF964820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/1/3136382e3139352e3233322e302f32322d3234203d3e20323633303839.roa
Signing time:             Thu 04 Apr 2024 08:40:52 +0000
ROA not before:           Thu 04 Apr 2024 08:35:52 +0000
ROA not after:            Thu 03 Apr 2025 08:40:52 +0000
asID:                     263089
IP address blocks:        168.195.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0a:df:05:4e:b0:00:cc:04:b5:03:ed:83:5e:fb:3f:fc:86:84:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FE0CCD82452320BCB7B9FC0EBC80CACBF964820
        Validity
            Not Before: Apr  4 08:35:52 2024 GMT
            Not After : Apr  3 08:40:52 2025 GMT
        Subject: CN=578D739CF0E597D45CC5D8F58B7FB75B0F03FFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:c3:20:3a:32:44:14:cc:48:77:47:2c:b6:
                    fc:f7:cd:93:a1:9f:64:5a:33:2b:59:75:35:30:eb:
                    30:0c:28:08:31:d9:01:f3:0e:48:25:e2:14:b2:c3:
                    77:53:29:03:40:a9:2c:bd:38:73:63:c5:cb:19:71:
                    26:9b:62:c4:18:9b:94:a2:5c:20:1e:43:0e:ae:f9:
                    36:9a:c1:2a:cb:cf:d2:57:76:e6:51:c0:67:e5:09:
                    81:db:52:ee:bc:44:c8:48:b4:13:95:06:b6:d3:40:
                    07:45:2e:54:bb:73:1c:c2:02:6d:14:96:50:19:15:
                    5e:78:48:7c:ba:e9:e7:8e:78:38:75:40:12:79:4d:
                    35:27:cc:1d:95:15:88:29:e5:0c:59:90:6f:d6:ce:
                    d0:90:b2:6e:c2:b2:44:0a:8b:9d:01:5b:28:c2:51:
                    94:f1:de:b9:06:26:68:b0:04:9e:5c:47:a4:d0:e5:
                    49:89:b3:91:40:7a:e8:1e:75:ad:19:7a:57:f1:59:
                    2c:04:34:93:d3:27:53:fe:63:4e:8b:ce:3f:90:c9:
                    af:46:bd:92:d2:bc:1f:56:e5:4e:21:29:bb:64:37:
                    c4:df:e5:97:fb:3b:54:2c:50:b6:ae:35:b6:38:e0:
                    9e:1a:8f:a3:3f:56:bb:ee:cc:b8:eb:9a:7f:4d:59:
                    66:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8D:73:9C:F0:E5:97:D4:5C:C5:D8:F5:8B:7F:B7:5B:0F:03:FF:A6
            X509v3 Authority Key Identifier:
                keyid:6F:E0:CC:D8:24:52:32:0B:CB:7B:9F:C0:EB:C8:0C:AC:BF:96:48:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/1/6FE0CCD82452320BCB7B9FC0EBC80CACBF964820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FE0CCD82452320BCB7B9FC0EBC80CACBF964820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/1/3136382e3139352e3233322e302f32322d3234203d3e20323633303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:9b:b0:33:26:b1:78:e8:69:82:04:c9:67:d5:d7:4c:e7:30:
         e9:86:63:b6:66:ef:71:39:78:77:55:70:18:6d:4f:f1:e2:1e:
         c0:f0:13:25:5f:f1:2f:e2:16:c6:a6:d8:ec:67:ea:c9:48:f4:
         9a:af:14:b7:a3:d2:de:a4:6e:43:bb:54:32:e8:fd:5f:55:ca:
         7e:96:a9:51:e3:22:b8:f3:5c:0b:9f:29:d9:6e:e4:bb:f2:b6:
         34:89:85:75:43:dc:5e:49:46:10:8c:54:16:26:8d:e7:d0:57:
         7f:82:ad:e6:66:12:77:23:7a:08:10:4d:19:06:0a:e1:a7:77:
         92:9a:c3:7a:da:1e:81:14:fc:0c:ff:bc:03:7f:5f:1a:bb:11:
         57:27:44:ff:31:90:28:5a:ab:dd:fb:5b:9f:fd:0e:a9:14:8b:
         14:3f:27:1f:c4:7c:85:19:a8:1e:9c:53:22:f6:b2:82:16:e6:
         1f:f3:ae:c4:d9:7a:98:5d:0c:02:80:1a:f4:25:c1:e9:ea:6f:
         ab:5f:91:b1:63:69:76:ac:fe:4e:1d:5e:cf:54:7b:91:40:6f:
         01:e8:8a:9d:6b:9e:2c:d2:ff:02:5b:cb:3a:28:08:ed:04:f7:
         6a:23:20:51:ec:a6:b7:ff:7c:32:5b:13:f7:7b:91:84:5f:5f:
         cc:37:9b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org