Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3132312e3130332e302f32342d3234203d3e20323632343638.roa
File:                     3136382e3132312e3130332e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          xHaNgSFwW7vHuT/fk012EsgwnN5CwcFkbqkutRda9EY=
Subject key identifier:   80:42:97:1A:AF:63:3F:B8:35:7B:12:AF:F9:89:AF:AA:84:19:84:6E
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       21AE4B157218877E84CF700E2AA9F461EC188450
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3132312e3130332e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:59 +0000
ROA not before:           Tue 20 Dec 2022 15:04:59 +0000
ROA not after:            Tue 19 Dec 2023 15:09:59 +0000
asID:                     262468
IP address blocks:        168.121.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ae:4b:15:72:18:87:7e:84:cf:70:0e:2a:a9:f4:61:ec:18:84:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:59 2022 GMT
            Not After : Dec 19 15:09:59 2023 GMT
        Subject: CN=8042971AAF633FB8357B12AFF989AFAA8419846E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:22:39:8d:3c:05:d0:16:b3:da:35:d8:ba:
                    f2:4b:01:df:a3:1d:c9:a0:06:7d:6d:4e:20:be:db:
                    11:45:97:93:2f:8d:3b:5d:ef:cc:96:2b:da:ff:ba:
                    8d:ee:a9:81:ce:29:fc:bf:0f:bb:46:38:d0:42:1d:
                    b4:ff:2c:74:f8:76:e5:9c:3f:9b:35:7b:f1:0e:55:
                    08:84:9a:92:c8:cf:8d:df:0c:cb:a6:f9:8e:53:74:
                    15:5a:81:b1:79:04:9e:cb:12:c0:b3:2a:b5:79:24:
                    29:4e:80:8a:82:7a:0a:e1:31:ce:08:78:e5:ed:9b:
                    e1:b7:b2:94:6b:7e:63:5a:7e:12:dd:c3:6a:ed:8d:
                    fe:19:8c:52:85:ae:92:61:90:21:2b:ba:cc:04:2b:
                    f2:70:94:3f:c0:da:80:c3:c6:37:8b:69:04:3d:62:
                    d6:de:be:93:53:cb:46:d2:8f:d9:57:72:35:42:30:
                    9e:00:ab:72:4e:a6:83:6a:75:6c:e4:ea:b4:20:f2:
                    b0:93:8c:9d:55:a7:57:eb:a1:23:25:41:06:81:93:
                    9e:e8:c4:c1:7c:0c:d1:80:31:1a:91:5f:e9:48:81:
                    c2:0d:c8:89:83:ea:e5:74:ab:8d:a0:29:e9:b1:b7:
                    51:94:9f:26:b4:fb:ae:36:7f:18:f7:fc:7b:db:f8:
                    43:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:42:97:1A:AF:63:3F:B8:35:7B:12:AF:F9:89:AF:AA:84:19:84:6E
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3132312e3130332e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:36:d7:4f:70:25:21:04:88:7c:2c:1d:dc:c8:38:9d:a6:de:
         87:c3:30:b4:7f:ea:0c:ce:d9:b2:8e:54:4a:40:09:8c:74:d2:
         d7:49:f2:ab:6f:ad:05:a8:ac:fb:1e:06:ce:5f:e8:39:64:fb:
         47:7f:40:87:36:c5:f4:5b:83:c0:97:ce:96:01:6a:21:97:64:
         99:91:5a:c5:43:a1:ab:88:c8:60:f7:92:35:24:dd:0f:ce:0a:
         56:4f:0d:5c:a9:ad:63:10:6a:1a:4c:d8:1b:73:97:0d:59:9b:
         42:2b:83:f6:d3:67:fa:bd:52:40:b2:45:80:11:dd:24:b3:58:
         aa:8e:3b:d7:62:fd:91:fa:e1:4e:10:17:fd:c7:8e:20:6d:01:
         0c:3b:25:df:7e:a1:c0:7f:2c:90:76:d8:67:03:43:f9:f1:74:
         46:fe:0a:a1:af:1b:ca:f5:2f:f0:d8:7a:6e:32:8d:c5:7d:92:
         42:28:3b:12:6e:3b:12:c8:cc:d4:27:41:85:f3:5c:82:b1:48:
         e8:ce:c6:77:10:ca:1b:13:7c:79:b0:69:f4:8c:bf:e0:c9:ae:
         f4:7c:53:2a:69:12:ad:82:a5:63:b8:18:e2:e0:bc:4a:69:ea:
         c6:73:3a:66:19:79:ea:87:ea:27:80:6b:7e:49:98:09:a6:62:
         e0:3b:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org