Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133362e302f32342d3234203d3e20323633333935.roa
File:                     3136382e3139342e3133362e302f32342d3234203d3e20323633333935.roa (raw, json)
Hash identifier:          NtLpejHlz5eH7iTit+PJyY61DD3M3LnQgCEBI+wlkFo=
Subject key identifier:   7C:D9:FA:DF:04:42:D6:79:72:AB:46:A4:9B:4D:04:AB:FB:7F:21:9E
Certificate issuer:       /CN=67666492B102F21109D368673B2B20745692E1A8
Certificate serial:       77BFC5F1988F837FCE1BDB9A2302004C62941501
Authority key identifier: 67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133362e302f32342d3234203d3e20323633333935.roa
Signing time:             Sun 25 Dec 2022 17:22:16 +0000
ROA not before:           Sun 25 Dec 2022 17:17:16 +0000
ROA not after:            Sun 24 Dec 2023 17:22:16 +0000
asID:                     263395
IP address blocks:        168.194.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bf:c5:f1:98:8f:83:7f:ce:1b:db:9a:23:02:00:4c:62:94:15:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67666492B102F21109D368673B2B20745692E1A8
        Validity
            Not Before: Dec 25 17:17:16 2022 GMT
            Not After : Dec 24 17:22:16 2023 GMT
        Subject: CN=7CD9FADF0442D67972AB46A49B4D04ABFB7F219E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1f:85:0d:14:32:29:4c:57:ea:92:9e:bd:a9:
                    5b:c7:b5:10:ac:3b:e4:6b:b8:89:3f:61:f0:18:30:
                    f5:cc:8f:09:a5:bb:05:0f:90:dd:ba:4d:f4:06:ff:
                    7c:c5:00:13:42:ef:79:c1:0a:09:1a:09:dc:b6:7a:
                    8b:f8:b3:3e:fd:81:64:9d:d6:c5:c9:f1:98:0f:f4:
                    56:1c:bd:a9:70:76:34:48:be:24:c8:c0:f7:0e:fb:
                    cb:96:a6:62:9a:fe:1c:65:49:59:c1:23:de:07:e0:
                    34:0e:48:65:65:19:cb:45:e1:dd:00:94:a2:06:50:
                    e2:d9:20:32:08:06:3b:14:5e:1c:87:e5:82:db:e4:
                    26:b9:a5:20:fc:d1:d9:24:71:58:3a:d2:79:5e:15:
                    e7:20:4f:a1:99:01:6a:09:33:b2:e4:47:73:05:e2:
                    13:d5:72:d1:c8:d3:46:8d:e0:b0:b9:18:65:0e:d7:
                    18:c8:ef:bf:18:8c:7d:0c:ca:c1:aa:89:84:01:c9:
                    8c:36:e0:8b:54:0b:2a:63:18:99:39:f5:72:b9:0c:
                    8a:92:42:4c:21:11:46:77:22:c0:69:e4:f4:14:df:
                    d8:f4:d3:6b:eb:6f:8e:9a:8b:ac:8d:9e:a0:74:a3:
                    b6:d0:37:b5:16:cc:96:5b:70:cf:fc:1b:99:dc:03:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D9:FA:DF:04:42:D6:79:72:AB:46:A4:9B:4D:04:AB:FB:7F:21:9E
            X509v3 Authority Key Identifier:
                keyid:67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/67666492B102F21109D368673B2B20745692E1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3136382e3139342e3133362e302f32342d3234203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:87:f0:71:8f:ac:21:f7:c9:b6:da:e9:2e:c1:83:b5:7a:fb:
         89:0f:1f:ec:c8:f8:14:8d:29:d5:80:4a:a9:53:6a:e9:4b:e1:
         4e:ab:2a:15:e2:2c:10:a7:79:18:31:7a:df:da:7d:c5:a4:ab:
         ad:49:4a:50:61:3d:2e:6f:7c:df:6b:9c:d2:f0:07:27:af:32:
         97:f1:bc:ef:e7:b2:17:ba:ab:aa:2c:5a:4c:cd:dc:5e:c0:7d:
         3a:a0:25:f4:56:0e:b8:1a:c4:aa:eb:06:8b:48:9c:00:07:f7:
         26:53:bb:3a:c5:d9:b1:b6:82:d6:69:f2:84:e2:89:ba:86:40:
         65:82:2b:f1:25:4d:84:5d:fc:95:2b:bd:b6:03:50:f8:24:71:
         de:4f:c6:17:37:01:01:9e:69:1b:4e:0c:a4:6a:8f:e5:70:59:
         a0:7b:67:4d:5d:e1:43:c7:fe:dd:95:a3:c4:13:3c:a0:8e:64:
         6a:0d:29:9b:28:98:ee:63:f9:56:8c:24:25:49:81:54:bf:54:
         2c:bc:6c:3c:3a:b6:bd:f5:f1:c8:73:eb:11:2f:fa:b0:15:e2:
         41:fd:86:ad:b7:fa:60:0c:d8:db:72:35:92:47:9a:ca:0a:ef:
         23:56:0d:82:d3:05:32:d8:38:3a:38:f4:5e:49:34:78:2b:9b:
         55:5b:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org