Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3132312e3130312e302f32342d3234203d3e20323632343638.roa
File:                     3136382e3132312e3130312e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          hnfJcEmtw7RqNXR93D8VLfmpJGGyV+qfFT1LVds/BJY=
Subject key identifier:   83:82:81:82:1D:6B:72:AD:FA:51:32:4A:C1:83:60:50:A1:64:D6:67
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       3DADAE77182D3F933E5C53B67B9F5C279EBDAED6
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3132312e3130312e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:43 +0000
ROA not before:           Tue 20 Dec 2022 15:04:43 +0000
ROA not after:            Tue 19 Dec 2023 15:09:43 +0000
asID:                     262468
IP address blocks:        168.121.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ad:ae:77:18:2d:3f:93:3e:5c:53:b6:7b:9f:5c:27:9e:bd:ae:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:43 2022 GMT
            Not After : Dec 19 15:09:43 2023 GMT
        Subject: CN=838281821D6B72ADFA51324AC1836050A164D667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:6e:09:ca:ec:2c:3e:0a:18:3a:92:74:3f:
                    1d:8b:22:55:34:bc:17:46:75:80:2b:69:24:a5:3e:
                    ad:33:09:da:fa:45:22:28:d7:09:11:cd:23:2b:4b:
                    02:32:18:f3:18:17:7a:0e:5f:8d:bd:5d:47:b4:5a:
                    4a:16:b9:68:62:8f:02:6a:24:19:ce:4f:77:30:a4:
                    42:55:0d:ff:82:24:5a:1f:d5:d9:25:32:4b:33:0c:
                    c3:f2:3e:99:91:56:46:ac:43:27:2c:68:67:6d:d9:
                    16:66:1a:1a:bc:b8:60:c9:0c:58:17:eb:84:06:a7:
                    9a:99:0b:59:51:40:6f:d9:b3:ca:35:bc:f4:30:9e:
                    31:fa:bc:48:ea:dc:d3:87:3d:6b:d5:d8:aa:eb:3e:
                    06:22:1b:ed:08:ab:45:63:b6:1e:4a:70:73:19:50:
                    6f:f8:6e:6a:8d:1a:10:6c:d0:79:a0:3f:8e:02:92:
                    67:7c:5b:34:c6:d7:59:ae:0d:f8:79:bf:16:84:02:
                    f9:bf:62:0f:b4:10:e5:88:2d:64:fd:2f:e4:d8:5f:
                    9e:57:30:86:70:31:6d:53:9b:94:0b:c2:94:a8:3a:
                    c8:02:47:5c:6c:f0:3d:0a:55:9c:3b:71:86:e2:ed:
                    52:66:e6:d4:b0:aa:d2:f1:5f:7f:45:df:e3:78:23:
                    61:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:82:81:82:1D:6B:72:AD:FA:51:32:4A:C1:83:60:50:A1:64:D6:67
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3132312e3130312e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:b8:84:40:36:a7:3d:27:04:9b:10:5f:a5:d0:c2:91:4a:df:
         fc:1f:65:a4:d5:e1:17:65:d8:34:a0:fd:ba:51:e7:b5:2a:fc:
         64:67:19:f3:6b:18:47:1a:58:d2:de:cd:f8:dd:c0:be:03:ec:
         58:d2:b5:73:ec:d4:b6:23:86:91:5f:a0:4b:ec:b2:bd:05:fd:
         69:a7:5f:12:66:4e:21:2c:06:14:e4:53:39:0a:71:d2:3d:17:
         43:9b:14:bc:0a:99:f5:34:b9:de:94:5d:1e:7b:2b:29:44:77:
         ee:73:53:10:4a:40:41:38:fc:5b:1e:b5:9e:6a:49:c9:9d:9e:
         9b:18:61:5a:2c:c0:10:0b:42:d2:00:c6:dc:42:ad:d8:f3:bf:
         71:8d:24:26:2b:c2:7c:f2:8c:79:57:89:88:55:57:73:bb:cf:
         0c:22:21:bd:4e:00:cf:f0:56:aa:ad:c6:f6:4c:84:25:f7:39:
         3e:77:e4:14:a0:e4:51:e0:1e:1d:bc:50:b9:ed:44:cd:30:66:
         1c:24:b9:91:7f:d1:2a:18:1a:35:b6:8d:d6:a2:0e:42:c2:64:
         5a:96:1a:02:19:54:b6:ab:61:be:df:d4:2c:ec:bf:6c:20:17:
         cc:b7:8d:9f:77:51:b7:7d:82:fa:44:33:31:17:82:1f:16:9c:
         8e:99:b2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org