Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/3136382e3139342e3232342e302f32342d3234203d3e20323635343031.roa
File:                     3136382e3139342e3232342e302f32342d3234203d3e20323635343031.roa (raw, json)
Hash identifier:          qjmmP0kHaoDN/N9462VnzXqkkWTmGvv+t0EDqz0uAXI=
Subject key identifier:   CA:5E:83:8F:5D:93:E2:32:A9:04:01:D7:6E:6F:F1:E9:17:10:38:06
Certificate issuer:       /CN=E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA
Certificate serial:       1CE80B1F454C2EEE9EA9E70AFDE485090D5F1A42
Authority key identifier: E1:9F:1C:7A:45:82:94:75:AD:4F:BB:BF:25:4E:F7:B9:CE:6E:B6:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/3136382e3139342e3232342e302f32342d3234203d3e20323635343031.roa
Signing time:             Mon 21 Nov 2022 16:29:45 +0000
ROA not before:           Mon 21 Nov 2022 16:24:45 +0000
ROA not after:            Mon 20 Nov 2023 16:29:45 +0000
asID:                     265401
IP address blocks:        168.194.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e8:0b:1f:45:4c:2e:ee:9e:a9:e7:0a:fd:e4:85:09:0d:5f:1a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA
        Validity
            Not Before: Nov 21 16:24:45 2022 GMT
            Not After : Nov 20 16:29:45 2023 GMT
        Subject: CN=CA5E838F5D93E232A90401D76E6FF1E917103806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:f3:33:86:ed:5b:fb:4f:46:34:42:12:98:
                    f7:92:88:e9:0d:21:e2:67:25:5d:8a:85:46:b5:9e:
                    ae:23:85:5a:df:4f:01:90:63:3c:3f:e9:2e:ee:69:
                    e1:17:be:ce:66:02:0d:89:69:ab:21:f8:10:64:81:
                    77:e2:1a:69:10:c3:ad:6a:72:cb:49:50:4d:1c:fd:
                    d7:63:d5:63:37:87:f1:84:6f:01:1e:a9:5f:66:b4:
                    34:df:27:0c:b5:fc:51:38:21:25:f0:5a:5d:19:82:
                    63:5b:83:40:dc:4d:f2:ef:05:eb:78:b3:2c:13:59:
                    eb:a6:a9:1c:e5:af:c6:93:22:87:58:f1:1b:c3:82:
                    f7:5c:9a:5e:41:71:ed:1b:23:e7:50:55:26:f0:e2:
                    3c:98:54:36:19:1d:a1:3a:d5:ca:a9:b5:94:05:bd:
                    50:d8:41:5d:c9:3a:47:41:e6:88:9a:b1:c6:a2:50:
                    e5:e7:f9:b5:a0:ee:5c:de:1f:c1:62:e7:8c:5e:be:
                    e0:1e:dd:e3:cc:62:59:83:23:86:c7:90:1c:88:17:
                    6b:a2:fa:7a:c4:4a:2a:b3:94:ce:64:22:ab:a9:36:
                    f1:fa:13:02:e9:56:17:0f:3a:2f:ba:2c:52:b6:b7:
                    0a:79:ea:a6:9c:18:8b:ad:4a:2e:6c:a7:c5:16:19:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5E:83:8F:5D:93:E2:32:A9:04:01:D7:6E:6F:F1:E9:17:10:38:06
            X509v3 Authority Key Identifier:
                keyid:E1:9F:1C:7A:45:82:94:75:AD:4F:BB:BF:25:4E:F7:B9:CE:6E:B6:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/3136382e3139342e3232342e302f32342d3234203d3e20323635343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:69:85:c7:e3:88:4e:43:c7:d2:f1:ec:cb:6e:d5:8a:25:18:
         f0:e3:d1:49:cf:ce:cd:4c:d5:bd:91:e4:51:c7:c4:4b:e1:0a:
         65:cd:a5:86:3b:d5:76:62:2f:ef:ff:0f:95:4c:53:8a:73:58:
         d7:38:58:83:7e:63:a4:85:18:b3:d0:66:cd:7b:f1:f8:24:b6:
         63:1c:38:72:fa:16:9d:05:4a:17:5e:86:04:8b:b5:69:a0:75:
         72:ec:93:46:28:cc:4c:9b:b2:7f:3b:e6:41:e0:f9:a2:af:72:
         21:18:c4:bf:b8:5d:6f:26:ab:60:01:e6:6b:d5:dd:9c:84:cf:
         cf:fa:62:cc:ec:11:7e:60:69:b0:5f:77:cc:8f:23:16:22:72:
         94:76:7b:ab:e1:cd:44:df:54:d1:fd:30:bf:94:2d:95:8a:0b:
         47:50:13:16:af:15:f0:bc:da:ee:c9:5b:2f:5a:ce:b6:26:34:
         5e:bc:9b:e5:c8:6b:68:f8:a6:d8:fa:36:1d:23:a0:d2:5b:ab:
         81:4d:02:a1:03:4c:de:60:a0:fd:cc:5e:2c:d9:7e:7b:7f:a9:
         0f:eb:15:39:8b:30:8b:4b:c1:f3:7a:77:ef:a2:49:b7:0a:0d:
         d3:8e:dc:92:ae:95:59:3f:32:43:8c:f3:d2:c1:12:4d:cc:0c:
         db:06:04:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org