Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133302e302f32332d3233203d3e20323633303639.roa
File:                     3136382e302e3133302e302f32332d3233203d3e20323633303639.roa (raw, json)
Hash identifier:          pmDN3fD21DQ2wnnBO08Yv8AZvhiYXDJQVG3ipwjPZkw=
Subject key identifier:   AC:F0:02:C2:43:D8:0D:D2:81:74:4A:E3:A8:A2:5F:45:3D:EC:4D:13
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       20FEA7DEE6CADD6F4CA940FB8942B6BC0901488B
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133302e302f32332d3233203d3e20323633303639.roa
Signing time:             Fri 11 Aug 2023 15:12:53 +0000
ROA not before:           Fri 11 Aug 2023 15:07:53 +0000
ROA not after:            Fri 09 Aug 2024 15:12:53 +0000
asID:                     263069
IP address blocks:        168.0.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fe:a7:de:e6:ca:dd:6f:4c:a9:40:fb:89:42:b6:bc:09:01:48:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Aug 11 15:07:53 2023 GMT
            Not After : Aug  9 15:12:53 2024 GMT
        Subject: CN=ACF002C243D80DD281744AE3A8A25F453DEC4D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f8:19:32:0d:56:e9:23:44:4f:a0:30:39:b1:
                    07:2c:03:0f:09:dc:e0:a2:18:61:14:48:6a:5e:06:
                    d9:ca:64:8d:d5:30:05:d9:17:cb:30:3f:94:f7:94:
                    30:53:5d:89:c8:0f:5f:d4:03:56:b1:9a:7d:ef:a2:
                    62:fa:2e:04:6d:53:07:b5:84:97:19:04:8a:d5:ed:
                    30:16:ee:6d:2b:47:0d:e6:41:03:3f:95:4e:76:41:
                    79:d6:b2:5c:a5:0d:b9:dd:64:07:04:c4:80:33:1d:
                    a6:b3:2e:3b:11:46:45:bf:72:b7:ba:56:62:6f:8f:
                    4a:6e:8a:77:ab:ae:36:54:20:d7:5a:00:4a:b8:5a:
                    76:38:d5:51:9b:e6:8f:06:b0:07:69:58:9c:b9:7f:
                    81:6d:e7:97:05:b6:0f:d5:a8:18:51:0b:70:95:51:
                    9d:b5:7b:26:19:da:5a:06:8b:0d:b3:1a:21:40:4a:
                    d8:5f:4c:c3:1c:a8:3e:a3:10:5f:4e:99:ad:44:70:
                    47:55:97:66:1d:2c:41:e3:fe:73:cb:2a:52:92:f7:
                    11:f0:c8:74:aa:3c:83:66:89:64:55:86:b7:89:1e:
                    a5:dd:3a:65:86:c2:1e:16:a4:e8:aa:93:c1:dd:3d:
                    19:27:49:80:69:58:aa:8f:1c:8c:65:e8:5b:e1:c7:
                    35:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F0:02:C2:43:D8:0D:D2:81:74:4A:E3:A8:A2:5F:45:3D:EC:4D:13
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133302e302f32332d3233203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:89:e7:a1:6d:86:2b:ad:8e:fe:e8:5e:f5:d9:71:ca:2f:3a:
         c7:96:5e:96:49:d0:c7:26:9b:05:4d:e7:34:1a:09:fc:90:bd:
         cb:65:ff:b2:b3:b1:cb:03:3e:97:43:54:5e:57:12:ae:5d:49:
         66:c1:e4:74:88:98:2e:1e:98:06:23:fe:32:45:74:f9:5a:d5:
         42:f1:c0:e3:c6:38:3f:47:64:57:d9:d5:ab:5f:9f:59:d8:51:
         ab:f4:16:6e:dc:d8:67:36:99:12:e1:a1:d9:61:c9:0a:99:6f:
         6f:2e:f3:1e:0f:0a:ae:60:2d:be:7c:ea:91:fc:08:f5:93:68:
         a1:bd:a8:2d:f3:2f:46:5c:b5:9a:3b:85:ef:29:80:5b:53:0a:
         86:c1:89:2c:07:36:41:13:15:96:ec:53:5e:59:49:36:5c:0f:
         47:a0:66:3b:b3:a0:2e:26:f0:4e:c0:63:78:25:14:ff:21:3b:
         6a:b9:a9:68:24:d5:79:14:92:f4:bf:35:09:24:f7:7c:0b:8b:
         81:2d:b7:e1:e6:ec:aa:d0:8d:10:00:e1:c6:bc:ad:09:98:20:
         b4:ff:56:33:3b:03:7c:21:24:17:de:a3:ac:e4:60:12:02:2c:
         cd:c1:2a:5f:8d:e1:be:8d:fb:ef:38:52:ae:b9:1e:70:19:11:
         9c:31:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org