Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3139362e35322e302f32342d3234203d3e20323632343638.roa
File:                     3136382e3139362e35322e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          IpLlLu6DeVMKLmFgXWYlehhe1ApyUGT9wf9enpR3Q9g=
Subject key identifier:   08:D5:19:CD:4F:B9:D8:53:29:AC:3A:1B:B4:27:61:F9:05:9A:84:6D
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       2D6A44EBBDD85F787E28CEAD19B4FE5DD4A216D2
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3139362e35322e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:57 +0000
ROA not before:           Tue 20 Dec 2022 15:04:57 +0000
ROA not after:            Tue 19 Dec 2023 15:09:57 +0000
asID:                     262468
IP address blocks:        168.196.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6a:44:eb:bd:d8:5f:78:7e:28:ce:ad:19:b4:fe:5d:d4:a2:16:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:57 2022 GMT
            Not After : Dec 19 15:09:57 2023 GMT
        Subject: CN=08D519CD4FB9D85329AC3A1BB42761F9059A846D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:9b:f5:a1:29:cb:51:1a:b4:b9:0e:4f:7b:
                    13:1e:20:39:68:06:18:09:00:db:73:96:c8:87:b5:
                    6c:47:65:5b:ea:4f:57:93:b7:e7:b7:42:a3:e9:a8:
                    5b:f7:ad:c1:8e:b0:ab:67:5e:86:59:39:41:12:3d:
                    26:09:a0:a5:3c:06:18:49:71:c4:54:78:77:d4:00:
                    e4:23:a1:4b:e1:5d:70:d4:4c:52:e6:1a:54:3c:c8:
                    bf:39:fc:ac:a9:89:d0:8d:33:55:00:9a:d2:5c:f3:
                    16:f5:88:fb:e0:3e:32:10:47:c7:7a:de:94:e4:36:
                    f2:15:e3:e7:0f:4a:0d:b1:10:ba:52:76:7c:b0:6e:
                    55:9c:e0:73:b8:56:64:71:0f:66:40:31:37:fa:d3:
                    ac:b9:3d:e6:9a:ed:eb:3f:17:90:fb:8d:49:b0:39:
                    c3:ae:f2:d6:8e:ea:a1:62:59:3a:c5:3c:b5:ac:cd:
                    ae:1d:cf:a1:8d:4c:4d:fe:c9:a9:69:2c:29:c2:32:
                    7a:49:03:f8:46:d4:09:a4:14:14:3f:4a:ed:b7:d1:
                    89:c9:2d:7c:dd:3e:7b:45:2b:32:c4:d9:c3:f4:d9:
                    ba:c4:55:89:2f:06:7c:0a:bc:1c:4e:29:71:2f:07:
                    42:88:6c:1b:93:40:d8:4b:bc:77:80:0a:f8:7a:e8:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D5:19:CD:4F:B9:D8:53:29:AC:3A:1B:B4:27:61:F9:05:9A:84:6D
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3139362e35322e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ed:33:b8:59:35:87:33:54:13:ac:bc:93:fc:90:03:27:7d:
         5f:98:79:ba:1b:4a:98:81:6e:0d:f0:56:16:2c:b5:72:16:d4:
         62:ee:cd:0e:47:0b:67:e2:91:12:21:7c:6c:3f:3a:3c:1c:7a:
         d1:79:81:1f:15:1c:00:72:8a:e1:0e:68:3e:3c:2c:8c:f4:c3:
         c9:65:1b:96:e5:59:fe:b2:51:fb:e0:33:bf:94:d6:72:63:43:
         4f:36:76:29:9a:43:e9:01:fa:35:1b:c3:ca:1c:05:fe:85:b2:
         00:fe:94:e6:4c:8b:92:28:33:f2:6d:58:bc:3b:6e:95:4e:1c:
         04:aa:be:b9:77:c1:68:ad:59:a3:15:a3:89:17:30:ba:95:b4:
         86:7e:36:15:d7:c7:cb:ca:53:31:55:91:aa:49:37:e0:64:29:
         bf:0e:dc:9b:4e:f0:79:00:07:73:7b:44:b9:66:c3:3d:ad:09:
         ce:9d:29:52:bc:34:d1:ca:76:72:d2:1b:29:6f:f4:b5:27:57:
         4e:31:87:b3:a1:bb:9a:9a:7d:09:c3:d0:f6:15:95:31:ef:a3:
         39:de:8d:6c:9f:0a:91:01:6f:96:c1:89:51:79:1a:bb:e0:24:
         5d:b5:8b:b1:d2:b9:b4:bd:8c:84:cb:8e:6f:ec:46:86:06:e3:
         11:cf:e1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org