Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3139362e35332e302f32342d3234203d3e20323632343638.roa
File:                     3136382e3139362e35332e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          x0tDhvEcxlQhp9RmKW/lID43Oi9HO3yz6+rgt6LCtX4=
Subject key identifier:   24:92:3C:F0:A5:B9:CC:BF:0B:3C:3C:0F:CA:8A:C0:CE:5F:36:AF:13
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       575AE7EC458CA1F8F7BB848104299E5CE061CA5E
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3139362e35332e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:52 +0000
ROA not before:           Tue 20 Dec 2022 15:04:52 +0000
ROA not after:            Tue 19 Dec 2023 15:09:52 +0000
asID:                     262468
IP address blocks:        168.196.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5a:e7:ec:45:8c:a1:f8:f7:bb:84:81:04:29:9e:5c:e0:61:ca:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:52 2022 GMT
            Not After : Dec 19 15:09:52 2023 GMT
        Subject: CN=24923CF0A5B9CCBF0B3C3C0FCA8AC0CE5F36AF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:de:29:6c:0e:3e:b3:ae:29:53:97:aa:6c:49:
                    c7:01:9e:53:98:60:0c:a8:3f:79:bd:c8:19:4e:f4:
                    4e:c3:dd:19:6f:42:2a:3f:fd:09:c7:f2:ed:b9:a6:
                    c2:34:4a:d2:75:18:d9:4a:3e:b0:2e:64:86:1c:a2:
                    89:04:43:9c:a6:d1:bd:ee:97:cb:98:30:37:24:a1:
                    d3:14:59:71:43:13:a0:11:8f:cc:86:fb:78:4d:7f:
                    f2:0d:f6:8a:7a:28:1a:8a:8f:84:50:ee:d1:5d:8c:
                    53:1e:16:8a:96:95:e8:e2:b9:c0:dc:aa:c2:4e:bb:
                    77:e5:b0:86:45:7b:60:ad:ad:9f:4b:5f:71:36:7a:
                    a0:05:87:73:75:56:d9:ab:fc:8d:a6:bb:dc:39:71:
                    93:2e:f9:53:3d:da:6d:c2:7d:cf:10:c2:9b:61:5d:
                    a3:de:b8:b2:a3:55:76:6e:cb:d8:06:7e:9f:df:87:
                    ff:59:bf:3f:91:60:50:d3:39:f9:4f:24:4c:2a:d9:
                    50:0e:9d:1e:69:91:07:66:85:eb:5b:d9:b6:99:a1:
                    4c:1c:b2:6c:c8:7a:eb:3c:f8:18:df:50:9d:ce:ed:
                    28:0e:6b:60:65:da:f6:5b:d7:8b:8c:07:a4:8d:12:
                    81:18:8a:f9:79:ff:82:ca:14:91:42:3e:cd:8a:75:
                    fe:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:92:3C:F0:A5:B9:CC:BF:0B:3C:3C:0F:CA:8A:C0:CE:5F:36:AF:13
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3136382e3139362e35332e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ad:39:88:3c:b9:fe:f1:d1:cb:f0:c2:4f:fa:ed:49:74:20:
         f4:0f:c6:d8:0b:0b:1d:58:8e:79:1b:0f:f9:83:c8:15:a1:90:
         c9:fd:26:c0:04:6a:36:89:1a:e0:c6:9d:7c:a1:2a:5a:a5:b7:
         aa:4f:52:40:16:73:d1:25:39:ee:c1:1d:31:a3:46:66:04:0c:
         cf:d8:6b:93:46:ce:68:4e:85:39:44:32:11:b1:fe:12:39:d6:
         8d:f0:82:91:14:bf:1e:8d:6e:7c:26:69:cf:3a:07:f5:05:47:
         19:5a:5f:b6:4c:3d:05:71:64:5d:1c:08:df:5b:cf:72:e1:ef:
         a2:9b:42:bd:79:73:bf:40:57:b3:37:53:6a:80:cc:9f:de:40:
         93:80:b0:57:15:74:96:18:eb:aa:31:e6:04:3e:67:36:b1:2f:
         2c:ce:67:e0:62:d2:dc:92:5c:a1:b6:a6:de:1d:e5:b6:09:99:
         7b:62:88:46:9e:13:05:36:e3:12:71:21:5b:31:9c:6a:e7:48:
         9f:10:4c:91:be:4f:de:67:95:5b:d2:4a:43:6b:7a:62:2c:29:
         66:c4:30:92:f1:ca:a5:bf:4b:13:f5:c4:80:31:8d:a8:2a:c0:
         9a:21:e0:4f:3e:34:0e:7c:c1:fd:fe:0a:3c:a9:29:96:34:dd:
         4e:36:cd:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV1rn7EWMofj3u4SBBCmeXOBhyl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMUNEQzQwNUI1Mjg1NTRCMjRENjdFRkIxN0E3RDIw
REE2ODMzMzAeFw0yMjEyMjAxNTA0NTJaFw0yMzEyMTkxNTA5NTJaMDMxMTAvBgNV
BAMTKDI0OTIzQ0YwQTVCOUNDQkYwQjNDM0MwRkNBOEFDMENFNUYzNkFGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3ilsDj6zrilTl6psSccBnlOY
YAyoP3m9yBlO9E7D3RlvQio//QnH8u25psI0StJ1GNlKPrAuZIYcookEQ5ym0b3u
l8uYMDckodMUWXFDE6ARj8yG+3hNf/IN9op6KBqKj4RQ7tFdjFMeFoqWlejiucDc
qsJOu3flsIZFe2CtrZ9LX3E2eqAFh3N1Vtmr/I2mu9w5cZMu+VM92m3Cfc8Qwpth
XaPeuLKjVXZuy9gGfp/fh/9Zvz+RYFDTOflPJEwq2VAOnR5pkQdmhetb2baZoUwc
smzIeus8+BjfUJ3O7SgOa2Bl2vZb14uMB6SNEoEYivl5/4LKFJFCPs2Kdf6vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJJI88KW5zL8LPDwPyorAzl82rxMwHwYDVR0j
BBgwFoAUHtHNxAW1KFVLJNZ++xen0g2mgzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC8xRUQxQ0RDNDA1QjUyODU1NEIyNEQ2N0VGQjE3QTdEMjBEQTY4MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRDFDREM0MDVCNTI4NTU0
QjI0RDY3RUZCMTdBN0QyMERBNjgzMzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4cnRIdHBTZ2NZY0pjZWNXTTZDODRaZmtId04xNHNGdnNVN2IzUWkzRmlXLzAv
MzEzNjM4MmUzMTM5MzYyZTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoxDUwDQYJKoZIhvcNAQELBQADggEBAB+tOYg8
uf7x0cvwwk/67Ul0IPQPxtgLCx1YjnkbD/mDyBWhkMn9JsAEajaJGuDGnXyhKlql
t6pPUkAWc9ElOe7BHTGjRmYEDM/Ya5NGzmhOhTlEMhGx/hI51o3wgpEUvx6Nbnwm
ac86B/UFRxlaX7ZMPQVxZF0cCN9bz3Lh76KbQr15c79AV7M3U2qAzJ/eQJOAsFcV
dJYY66ox5gQ+ZzaxLyzOZ+Bi0tySXKG2pt4d5bYJmXtiiEaeEwU24xJxIVsxnGrn
SJ8QTJG+T95nlVvSSkNremIsKWbEMJLxyqW/SxP1xIAxjagqwJoh4E8+NA58wf3+
CjypKZY03U42zRg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org