Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/3136382e3233322e3230322e302f32332d3233203d3e20323634393534.roa
File:                     3136382e3233322e3230322e302f32332d3233203d3e20323634393534.roa (raw, json)
Hash identifier:          c2kdiUEtRPI69ou9og0QnyIIIX/a7qOMd8nkNyeprZE=
Subject key identifier:   06:B5:21:B6:02:2D:95:07:23:5A:61:43:7F:8D:0A:39:A2:94:DB:30
Certificate issuer:       /CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
Certificate serial:       6C5797C0B25644FA5A31B3F296BB0EB24CE99647
Authority key identifier: 9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/3136382e3233322e3230322e302f32332d3233203d3e20323634393534.roa
Signing time:             Tue 26 Sep 2023 20:01:49 +0000
ROA not before:           Tue 26 Sep 2023 19:56:49 +0000
ROA not after:            Tue 24 Sep 2024 20:01:49 +0000
asID:                     264954
IP address blocks:        168.232.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:57:97:c0:b2:56:44:fa:5a:31:b3:f2:96:bb:0e:b2:4c:e9:96:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
        Validity
            Not Before: Sep 26 19:56:49 2023 GMT
            Not After : Sep 24 20:01:49 2024 GMT
        Subject: CN=06B521B6022D9507235A61437F8D0A39A294DB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e9:a3:d5:e4:cb:4e:53:fd:99:48:37:0e:1e:
                    1b:39:88:f9:4e:da:5e:d8:59:cf:de:42:01:3e:22:
                    6a:69:25:95:66:79:72:7e:71:a9:13:5c:90:db:66:
                    f7:2f:5d:ba:cc:f1:21:6f:9a:63:b1:09:a6:5d:fc:
                    08:63:dd:4d:fd:e5:b4:b0:43:66:b0:57:59:ca:09:
                    e3:f9:41:51:cd:06:c8:16:ba:dd:9a:c5:ec:be:ce:
                    72:82:19:06:47:e8:3e:41:c7:32:18:bf:ef:13:92:
                    c0:01:d9:3a:f7:ea:16:ea:7e:8b:07:9a:3a:32:e8:
                    44:f4:bc:64:78:b7:1b:51:e3:ec:82:4b:ae:2d:11:
                    d6:16:ad:d7:da:ce:e4:5a:de:6a:51:12:26:b2:62:
                    e2:00:78:1e:60:5d:9d:e5:78:65:25:10:76:ca:cd:
                    d6:87:d4:56:26:be:e9:4f:01:97:91:e0:91:1f:41:
                    1e:de:97:99:cf:8e:63:cb:ed:76:c7:59:d7:57:e5:
                    4d:4e:98:b2:a5:8d:cb:7e:86:e7:f4:64:3d:e0:91:
                    b7:a4:78:1b:86:9f:1e:d4:87:b3:ec:76:17:ea:19:
                    6d:e4:48:c4:94:7d:37:03:6a:e3:68:d1:0b:72:4f:
                    34:18:8f:2a:bc:69:e3:34:43:ff:bc:8b:e0:c9:d4:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B5:21:B6:02:2D:95:07:23:5A:61:43:7F:8D:0A:39:A2:94:DB:30
            X509v3 Authority Key Identifier:
                keyid:9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/3136382e3233322e3230322e302f32332d3233203d3e20323634393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:31:01:dd:59:54:49:bb:de:5f:e0:1b:de:bb:d0:e2:cf:87:
         9f:e7:91:1a:c6:38:37:8a:38:5b:03:34:b5:5a:1a:8b:57:0a:
         c6:71:50:0b:77:36:50:fa:68:1e:f5:70:c3:a8:49:7d:59:e5:
         2d:ac:f7:7e:d0:94:c6:18:b5:e2:bb:77:4f:18:d1:b1:e5:d9:
         11:8f:90:af:53:04:e8:88:b3:8c:14:d5:b3:ff:26:92:b6:dd:
         fd:ac:85:db:01:f3:e7:59:6b:64:61:e7:dd:e3:1c:aa:8e:dc:
         d7:7a:c9:22:ed:31:ab:37:92:7e:8e:63:fd:1f:04:ca:84:f2:
         60:4d:0c:de:4e:06:2b:f4:01:d1:4b:6f:16:ef:ea:d1:76:a4:
         6a:6a:f9:ab:9a:cf:ef:8d:97:d1:32:1d:90:f8:e1:d1:74:8a:
         a5:0a:ef:05:f3:0d:41:c7:50:26:b7:13:a7:eb:3c:5d:4f:25:
         4e:39:0f:88:e7:ac:ad:04:28:b3:c5:60:18:41:c7:4b:d5:6e:
         89:94:39:56:f8:10:3f:f1:1a:d2:81:ea:4d:90:3e:95:d4:93:
         fa:8f:9f:9a:6b:b5:f6:35:1b:da:b9:20:e2:22:18:0f:fe:13:
         8a:55:7c:b5:c9:87:70:32:59:bd:de:90:7f:81:49:d7:e5:e4:
         cb:32:02:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org