Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3132312e3130302e302f32342d3234203d3e20323632343638.roa
File:                     3136382e3132312e3130302e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          ZbISNkFHz+WWg4TuC/PUu3mbCNVmNoTaS1xQa7wOtDU=
Subject key identifier:   C8:16:5D:89:46:38:14:F3:39:52:19:F4:82:55:B9:90:0B:0F:5C:5D
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       2E8E59743BADB98B0C48E1BE536B27E6B3966EF1
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3132312e3130302e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:45 +0000
ROA not before:           Tue 20 Dec 2022 15:04:45 +0000
ROA not after:            Tue 19 Dec 2023 15:09:45 +0000
asID:                     262468
IP address blocks:        168.121.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8e:59:74:3b:ad:b9:8b:0c:48:e1:be:53:6b:27:e6:b3:96:6e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:45 2022 GMT
            Not After : Dec 19 15:09:45 2023 GMT
        Subject: CN=C8165D89463814F3395219F48255B9900B0F5C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:94:6e:35:67:7a:0f:d2:42:e9:41:a4:ce:
                    a8:e3:19:4a:65:4e:f1:8a:d2:a4:9b:8b:90:cb:4f:
                    25:8d:00:4d:50:88:ee:a4:c6:7b:44:0d:9c:8e:d3:
                    f1:84:78:71:30:f5:64:f5:20:ae:7b:34:d9:b8:53:
                    2a:d7:44:9c:ff:0b:3f:a4:45:8c:1d:98:ba:b3:76:
                    68:4c:73:28:94:d4:7d:ef:94:bd:fd:ab:4c:0d:eb:
                    e9:de:cd:99:c0:99:82:3d:2d:ee:6f:0c:5e:b9:19:
                    71:70:ce:08:4c:e4:75:a7:2a:20:d1:16:58:52:74:
                    e0:86:d1:b2:af:1c:8a:ee:b7:1e:b3:99:65:16:40:
                    84:4a:39:5e:ce:79:24:bc:86:a1:2d:d3:b0:8e:7e:
                    c9:99:e3:69:52:a3:25:72:57:05:c0:bd:7a:0c:68:
                    22:e6:64:67:62:39:20:ba:72:36:8c:d3:95:c6:81:
                    f2:e5:7e:9b:c9:f4:76:cb:4d:cd:8f:53:aa:33:09:
                    9d:e0:44:dc:64:a1:5a:61:87:11:e3:30:9a:a1:63:
                    db:9d:56:ef:a6:55:c6:d4:14:0f:e3:d7:62:99:f1:
                    a8:81:e4:2e:7a:3a:66:5d:61:00:82:58:98:93:e7:
                    c4:72:6b:b4:30:4d:df:cc:84:ee:55:a0:19:9b:09:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:16:5D:89:46:38:14:F3:39:52:19:F4:82:55:B9:90:0B:0F:5C:5D
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3132312e3130302e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:6a:27:92:6c:48:58:21:96:27:80:7b:8b:f0:82:af:2b:6b:
         86:9c:54:f8:0c:5b:73:08:bf:10:a2:c3:9d:e9:fa:9a:d6:05:
         c3:68:27:b9:38:86:e3:e7:ba:4e:75:5c:28:5b:f4:8f:a8:7f:
         e8:d3:29:e3:e7:bd:f0:f3:8a:8b:29:10:4a:e9:54:cc:89:3b:
         76:81:ac:ce:d5:49:0d:96:d4:e7:12:fc:2e:76:b2:2f:79:d4:
         d0:49:77:5d:dd:4a:bb:99:f1:c7:55:cc:d9:c5:d9:cd:35:3f:
         ae:08:63:8b:9f:f5:85:2b:58:b7:1b:24:b8:f9:bc:1f:0d:76:
         c6:e2:40:f2:da:4e:96:db:ab:b0:5f:f8:42:65:85:a9:42:32:
         67:34:32:9d:4d:f1:15:09:3c:e4:9a:23:3b:b1:5b:9a:29:a3:
         3b:19:46:35:6d:1f:46:2b:eb:87:8a:50:57:b7:d4:c7:32:13:
         f6:be:b1:ab:e7:2f:7f:82:20:ec:e3:13:2d:2a:9d:ca:17:7a:
         1c:d7:89:49:0e:1b:2a:fd:84:1a:6a:1a:ea:29:86:2f:b3:b8:
         4f:d9:eb:c1:d8:7e:96:e3:43:60:3f:ea:05:09:a6:d7:bc:38:
         dc:f6:4d:3e:92:a0:5f:3b:8e:89:84:51:74:60:d4:12:99:0d:
         c1:c3:16:68
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULo5ZdDutuYsMSOG+U2sn5rOWbvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMUNEQzQwNUI1Mjg1NTRCMjRENjdFRkIxN0E3RDIw
REE2ODMzMzAeFw0yMjEyMjAxNTA0NDVaFw0yMzEyMTkxNTA5NDVaMDMxMTAvBgNV
BAMTKEM4MTY1RDg5NDYzODE0RjMzOTUyMTlGNDgyNTVCOTkwMEIwRjVDNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAZRuNWd6D9JC6UGkzqjjGUpl
TvGK0qSbi5DLTyWNAE1QiO6kxntEDZyO0/GEeHEw9WT1IK57NNm4UyrXRJz/Cz+k
RYwdmLqzdmhMcyiU1H3vlL39q0wN6+nezZnAmYI9Le5vDF65GXFwzghM5HWnKiDR
FlhSdOCG0bKvHIrutx6zmWUWQIRKOV7OeSS8hqEt07COfsmZ42lSoyVyVwXAvXoM
aCLmZGdiOSC6cjaM05XGgfLlfpvJ9HbLTc2PU6ozCZ3gRNxkoVphhxHjMJqhY9ud
Vu+mVcbUFA/j12KZ8aiB5C56OmZdYQCCWJiT58Rya7QwTd/MhO5VoBmbCdOzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyBZdiUY4FPM5Uhn0glW5kAsPXF0wHwYDVR0j
BBgwFoAUHtHNxAW1KFVLJNZ++xen0g2mgzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC8xRUQxQ0RDNDA1QjUyODU1NEIyNEQ2N0VGQjE3QTdEMjBEQTY4MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRDFDREM0MDVCNTI4NTU0
QjI0RDY3RUZCMTdBN0QyMERBNjgzMzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4cnRIdHBTZ2NZY0pjZWNXTTZDODRaZmtId04xNHNGdnNVN2IzUWkzRmlXLzAv
MzEzNjM4MmUzMTMyMzEyZTMxMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKh5ZDANBgkqhkiG9w0BAQsFAAOCAQEAYGon
kmxIWCGWJ4B7i/CCrytrhpxU+Axbcwi/EKLDnen6mtYFw2gnuTiG4+e6TnVcKFv0
j6h/6NMp4+e98POKiykQSulUzIk7doGsztVJDZbU5xL8LnayL3nU0El3Xd1Ku5nx
x1XM2cXZzTU/rghji5/1hStYtxskuPm8Hw12xuJA8tpOltursF/4QmWFqUIyZzQy
nU3xFQk85JojO7FbmimjOxlGNW0fRivrh4pQV7fUxzIT9r6xq+cvf4Ig7OMTLSqd
yhd6HNeJSQ4bKv2EGmoa6imGL7O4T9nrwdh+luNDYD/qBQmm17w43PZNPpKgXzuO
iYRRdGDUEpkNwcMWaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org