Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133362e302f32332d3233203d3e20323633333935.roa
File:                     3136382e3139342e3133362e302f32332d3233203d3e20323633333935.roa (raw, json)
Hash identifier:          mYfDkllX14uo8kpqUqIL8NU7K++3BwErGellM1nhacI=
Subject key identifier:   CB:56:AF:7E:B0:EF:4B:42:8C:0F:C7:27:CC:17:2C:DC:85:BC:C0:7F
Certificate issuer:       /CN=67666492B102F21109D368673B2B20745692E1A8
Certificate serial:       04BBE665E50844332B0CF0C48D6876ED3E955E9A
Authority key identifier: 67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133362e302f32332d3233203d3e20323633333935.roa
Signing time:             Sun 25 Dec 2022 17:22:19 +0000
ROA not before:           Sun 25 Dec 2022 17:17:19 +0000
ROA not after:            Sun 24 Dec 2023 17:22:19 +0000
asID:                     263395
IP address blocks:        168.194.136.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bb:e6:65:e5:08:44:33:2b:0c:f0:c4:8d:68:76:ed:3e:95:5e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67666492B102F21109D368673B2B20745692E1A8
        Validity
            Not Before: Dec 25 17:17:19 2022 GMT
            Not After : Dec 24 17:22:19 2023 GMT
        Subject: CN=CB56AF7EB0EF4B428C0FC727CC172CDC85BCC07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:83:f8:2c:27:82:8c:95:cc:66:81:f5:09:90:
                    03:ec:c2:e1:e0:da:f8:32:03:73:c5:73:7c:3d:60:
                    61:56:0b:ad:ed:5d:11:59:62:20:8b:8e:ed:7e:2a:
                    07:f3:c4:e7:01:e1:05:b1:16:d3:60:de:33:74:d5:
                    d8:fb:53:b4:f7:a8:dd:1d:91:6b:ab:94:70:30:80:
                    69:08:e4:67:dd:88:2c:3f:ed:72:4c:a5:aa:47:41:
                    32:5b:62:bd:d9:66:c4:24:2f:cb:40:11:e1:93:a4:
                    10:ba:d3:8c:7e:ac:d3:92:2b:05:ad:ba:29:40:71:
                    67:e9:57:5c:49:a8:01:9b:5d:41:d5:c3:24:68:f1:
                    c3:9e:69:0a:3e:e4:6a:b2:4d:a0:50:01:b2:07:a9:
                    b0:8d:ca:a3:25:5a:23:2c:d5:64:1b:b9:5f:d1:5c:
                    9d:2a:d7:e3:91:f4:dc:a2:d7:16:65:aa:d3:b7:25:
                    81:13:c3:b2:f3:ff:f6:ef:5e:41:79:66:d4:64:30:
                    e0:8d:4b:44:51:24:5a:57:55:68:62:be:57:0d:a1:
                    57:4d:25:cb:69:be:00:f3:23:6d:a2:70:ea:c2:6b:
                    4d:da:0f:11:dd:68:a2:d3:5e:e8:07:42:56:81:d5:
                    ce:93:78:0b:b6:e6:98:a0:1d:9e:e2:21:33:c8:09:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:56:AF:7E:B0:EF:4B:42:8C:0F:C7:27:CC:17:2C:DC:85:BC:C0:7F
            X509v3 Authority Key Identifier:
                keyid:67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/67666492B102F21109D368673B2B20745692E1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133362e302f32332d3233203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:05:53:e6:65:4a:6c:ee:c9:47:30:a9:a4:28:66:d3:2a:be:
         92:9f:61:51:a8:a4:39:34:eb:6d:23:dd:4b:12:1c:18:4e:68:
         74:a8:09:f0:f1:68:38:f9:5a:0e:e1:ee:fd:74:2b:e1:46:d7:
         ed:13:98:af:7d:22:f2:e4:7b:70:15:44:92:72:8b:57:d2:3c:
         e1:46:c6:f5:16:96:36:1f:f9:5c:09:c9:6d:2d:fb:df:fd:45:
         af:3d:c8:70:3e:b3:4c:96:7a:f6:57:6f:12:3e:ba:ef:c5:21:
         f7:94:6e:e8:0f:c9:f0:c9:e8:5a:b2:5e:f5:30:a3:6b:b9:4b:
         55:16:58:53:77:3b:8b:a3:a9:d5:9f:ac:e2:43:15:d8:c9:70:
         aa:bb:75:63:8c:d7:ae:a6:1b:27:b8:fe:8b:52:89:1c:9e:7a:
         95:24:b8:66:f1:d4:47:92:4a:6b:7c:aa:35:7d:11:84:32:b0:
         ea:54:1e:fe:e9:76:33:3e:39:22:28:97:af:02:bd:6a:8d:23:
         91:f5:19:c3:00:1e:1c:3e:9a:6d:67:5f:3f:27:64:f5:e5:ea:
         6f:43:5c:42:e2:b6:09:03:c8:1c:30:86:c6:72:73:e7:24:4e:
         af:ec:a7:a6:04:57:ed:d3:0e:7a:7e:08:3c:fa:16:be:db:d0:
         d7:d2:e2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org