Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/3136382e3139342e3232352e302f32342d3234203d3e20323635343031.roa
File:                     3136382e3139342e3232352e302f32342d3234203d3e20323635343031.roa (raw, json)
Hash identifier:          S/5cHf0G3lkyyEuxdo9gZEkJzRXyOHhmk5XjA2KYAr0=
Subject key identifier:   9E:9C:C0:68:AC:96:81:7C:5F:0B:BC:D2:9F:75:83:17:37:E4:08:6A
Certificate issuer:       /CN=E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA
Certificate serial:       6E6952DE191D266FB268F8246E475216375E4A55
Authority key identifier: E1:9F:1C:7A:45:82:94:75:AD:4F:BB:BF:25:4E:F7:B9:CE:6E:B6:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/3136382e3139342e3232352e302f32342d3234203d3e20323635343031.roa
Signing time:             Mon 21 Nov 2022 16:29:48 +0000
ROA not before:           Mon 21 Nov 2022 16:24:48 +0000
ROA not after:            Mon 20 Nov 2023 16:29:48 +0000
asID:                     265401
IP address blocks:        168.194.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:69:52:de:19:1d:26:6f:b2:68:f8:24:6e:47:52:16:37:5e:4a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA
        Validity
            Not Before: Nov 21 16:24:48 2022 GMT
            Not After : Nov 20 16:29:48 2023 GMT
        Subject: CN=9E9CC068AC96817C5F0BBCD29F75831737E4086A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:fd:2e:4e:b9:23:66:f7:4d:90:f6:8e:7f:
                    08:18:1e:7b:8e:c4:8f:b0:9f:3f:02:51:99:24:46:
                    25:c0:65:da:86:93:e2:2d:0b:66:46:54:ce:26:65:
                    b9:82:e0:7a:81:46:92:21:b9:b2:4c:e8:44:e1:3b:
                    36:7e:ae:5c:4a:2e:45:ae:8d:24:29:2b:5b:d0:f9:
                    8e:7b:6d:89:7d:22:6a:6b:97:20:97:26:d7:0d:74:
                    59:22:9f:c2:c6:95:90:f4:91:69:3f:0b:25:75:2a:
                    c0:34:7e:bf:e3:08:e9:99:fe:07:c8:06:7c:b4:91:
                    cf:98:ff:98:da:e5:fb:ec:0c:fa:75:7a:f3:87:d7:
                    62:bf:e0:9d:dd:8c:41:9f:06:f8:33:6a:d7:a1:4c:
                    2e:e5:f3:ff:f2:66:23:8c:b0:ab:63:e4:c6:bd:7b:
                    d3:88:f8:7a:4a:29:be:45:92:0f:de:20:1d:98:22:
                    a2:ac:2f:8e:8f:03:06:9a:b3:a1:49:a0:0d:d7:ae:
                    37:b5:d5:79:68:d9:64:67:37:22:f8:e5:42:6e:82:
                    c8:0c:47:8c:37:d5:a0:7e:0e:cb:90:76:f8:c5:57:
                    37:ce:22:71:68:c9:26:e6:e0:28:05:03:3a:5d:bb:
                    8e:c2:ee:78:a8:1e:2b:3f:18:f0:41:8a:23:b7:02:
                    be:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9C:C0:68:AC:96:81:7C:5F:0B:BC:D2:9F:75:83:17:37:E4:08:6A
            X509v3 Authority Key Identifier:
                keyid:E1:9F:1C:7A:45:82:94:75:AD:4F:BB:BF:25:4E:F7:B9:CE:6E:B6:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/3136382e3139342e3232352e302f32342d3234203d3e20323635343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:61:17:bb:e8:a0:aa:d3:b7:aa:b6:c4:ae:6f:16:52:43:d7:
         7f:1d:dd:e3:29:4b:7e:b8:07:91:76:ca:cd:0e:1a:40:79:7a:
         50:ee:4c:e5:18:f1:0c:48:d4:d7:a8:77:6d:63:5c:64:2f:ed:
         0d:6c:b3:30:90:27:dd:b3:44:54:67:63:c3:6a:7a:1a:0d:60:
         be:5c:34:30:e4:c1:80:33:59:eb:1a:87:57:dd:b6:9c:dc:03:
         05:4d:bf:d0:39:f9:3f:25:2d:ab:10:5b:a2:c6:10:01:0d:0e:
         09:0a:6a:1b:c4:dd:fb:fe:ed:2d:49:4c:e6:17:e0:c0:94:4b:
         fe:03:33:f2:e9:36:0c:b4:e8:5d:71:2d:67:d3:a4:a0:aa:97:
         11:a9:30:bd:e8:7b:33:c0:42:fc:1b:5e:92:60:e9:91:a8:f7:
         06:36:9a:05:b3:e6:21:48:42:b4:7e:df:88:62:1b:da:58:b9:
         b7:bf:39:9a:01:c5:f4:37:d3:d8:1e:61:1c:76:dc:50:8a:d3:
         ab:7b:41:e4:b0:96:e6:40:df:be:39:70:1c:60:2c:6a:fc:91:
         8c:7a:ba:5c:42:30:ff:a7:3e:bf:7a:f8:cb:da:41:1d:9f:38:
         a6:72:be:18:1e:fd:37:9d:c6:29:46:d5:81:22:f7:c3:cc:87:
         7d:dc:d7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org