Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3136382e3138312e3139322e302f32322d3234203d3e203631373438.roa
File:                     3136382e3138312e3139322e302f32322d3234203d3e203631373438.roa (raw, json)
Hash identifier:          Hxa56a131DXdNn1wYdK0z4YfVDNXn3PZMR9wVUIeUeI=
Subject key identifier:   52:E1:62:7B:85:60:14:35:97:05:D2:36:52:5A:3B:D1:73:81:57:BE
Certificate issuer:       /CN=E19F7769603EE2CCAE5ED590F2CEB2D8B6455274
Certificate serial:       1888D5A70F52072BA711103E6C6453AAE6DE59B8
Authority key identifier: E1:9F:77:69:60:3E:E2:CC:AE:5E:D5:90:F2:CE:B2:D8:B6:45:52:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3136382e3138312e3139322e302f32322d3234203d3e203631373438.roa
Signing time:             Tue 20 Jun 2023 18:32:00 +0000
ROA not before:           Tue 20 Jun 2023 18:27:00 +0000
ROA not after:            Tue 18 Jun 2024 18:32:00 +0000
asID:                     61748
IP address blocks:        168.181.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:88:d5:a7:0f:52:07:2b:a7:11:10:3e:6c:64:53:aa:e6:de:59:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19F7769603EE2CCAE5ED590F2CEB2D8B6455274
        Validity
            Not Before: Jun 20 18:27:00 2023 GMT
            Not After : Jun 18 18:32:00 2024 GMT
        Subject: CN=3082010A02820101009A5DB7837CB2F24228E32F5DB5DF57FD86C2EA412CAA828D01163FA21D64833E872F7C29C837A4EF5B0588058C5980313DE03D203365F635BA2E7052120045B6D75F6A575134F833D729239A17C2C34F87C4BC5B5B047731A91A22CBB343D180FAACD6F886453AC469E0466538B4FBC602FB400941964BA997D5C28DF97E0FDD0DFD59E5BFF373B520A6ED96F5E0C323015D4A44FC6ADAC884713A6829104935B6C2418826B6543E070860E6EF29B5A38F5921B2801140B9F1C0A8A0362E70F472436C3B64127D8153A9A80E09DA02375C96D20FDF27393D0B73A8CD21648C9C50A0ED6AAB71E83613322156F8EEB9C6826E5C1BC758CDBDA466F141512F624B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5d:b7:83:7c:b2:f2:42:28:e3:2f:5d:b5:df:
                    57:fd:86:c2:ea:41:2c:aa:82:8d:01:16:3f:a2:1d:
                    64:83:3e:87:2f:7c:29:c8:37:a4:ef:5b:05:88:05:
                    8c:59:80:31:3d:e0:3d:20:33:65:f6:35:ba:2e:70:
                    52:12:00:45:b6:d7:5f:6a:57:51:34:f8:33:d7:29:
                    23:9a:17:c2:c3:4f:87:c4:bc:5b:5b:04:77:31:a9:
                    1a:22:cb:b3:43:d1:80:fa:ac:d6:f8:86:45:3a:c4:
                    69:e0:46:65:38:b4:fb:c6:02:fb:40:09:41:96:4b:
                    a9:97:d5:c2:8d:f9:7e:0f:dd:0d:fd:59:e5:bf:f3:
                    73:b5:20:a6:ed:96:f5:e0:c3:23:01:5d:4a:44:fc:
                    6a:da:c8:84:71:3a:68:29:10:49:35:b6:c2:41:88:
                    26:b6:54:3e:07:08:60:e6:ef:29:b5:a3:8f:59:21:
                    b2:80:11:40:b9:f1:c0:a8:a0:36:2e:70:f4:72:43:
                    6c:3b:64:12:7d:81:53:a9:a8:0e:09:da:02:37:5c:
                    96:d2:0f:df:27:39:3d:0b:73:a8:cd:21:64:8c:9c:
                    50:a0:ed:6a:ab:71:e8:36:13:32:21:56:f8:ee:b9:
                    c6:82:6e:5c:1b:c7:58:cd:bd:a4:66:f1:41:51:2f:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E1:62:7B:85:60:14:35:97:05:D2:36:52:5A:3B:D1:73:81:57:BE
            X509v3 Authority Key Identifier:
                keyid:E1:9F:77:69:60:3E:E2:CC:AE:5E:D5:90:F2:CE:B2:D8:B6:45:52:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3136382e3138312e3139322e302f32322d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:ff:b2:f3:3a:f0:48:5b:b1:a0:e9:8c:dc:08:ff:d3:2a:d3:
         e9:e3:f5:2c:64:73:cb:7f:d2:90:e3:5f:d1:89:15:e7:41:86:
         f2:e3:57:3e:e4:7c:cf:82:74:90:16:9f:c7:48:dd:e5:a8:c3:
         34:08:ea:7b:86:ff:d3:8d:02:06:84:63:8a:91:41:0b:55:fa:
         91:dc:6f:fe:a2:f1:69:9a:7e:b9:d1:fe:f6:40:64:b6:de:80:
         22:ce:b8:18:c8:35:69:25:78:a7:a1:66:0d:93:26:0c:9d:d0:
         4a:2c:db:6f:51:f8:0c:49:2f:c9:c1:fe:4a:da:2c:e4:8c:cf:
         46:07:b5:72:5a:5e:56:2d:ae:99:ee:e0:e5:f8:7d:17:74:fb:
         a8:4d:04:99:59:28:a5:33:cb:f6:72:aa:36:1d:1c:c6:5f:b6:
         c3:b8:9a:56:49:5e:46:d6:d4:47:fe:d2:7d:ec:d5:fe:88:ba:
         b9:0e:47:1b:b7:3d:f6:f7:c3:58:01:23:f3:dd:18:f2:a6:aa:
         92:57:e1:af:75:d2:8a:b0:83:5d:fe:f8:55:c4:a3:0b:f5:86:
         33:ec:db:01:c2:a8:cd:e9:58:e4:51:ca:2f:49:62:ea:af:3f:
         5b:59:16:eb:5e:df:fc:80:84:50:2c:02:45:aa:fa:fe:89:9e:
         ee:25:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org