Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/3136382e3132312e3138382e302f32322d3332203d3e20323632373737.roa
File:                     3136382e3132312e3138382e302f32322d3332203d3e20323632373737.roa (raw, json)
Hash identifier:          2Htst6BfjsfwY8aQYUY42hkJQFguLJs6CmVTfzR0lCE=
Subject key identifier:   F7:6A:1F:40:A7:83:B0:B4:96:CF:AC:CC:D5:09:EA:5D:A0:3C:53:06
Certificate issuer:       /CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
Certificate serial:       5CD3F96AF96A44B2A2D272BFC6FE7C0F27D15DE5
Authority key identifier: 03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/3136382e3132312e3138382e302f32322d3332203d3e20323632373737.roa
Signing time:             Mon 22 May 2023 16:34:35 +0000
ROA not before:           Mon 22 May 2023 16:29:35 +0000
ROA not after:            Mon 20 May 2024 16:34:35 +0000
asID:                     262777
IP address blocks:        168.121.188.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d3:f9:6a:f9:6a:44:b2:a2:d2:72:bf:c6:fe:7c:0f:27:d1:5d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
        Validity
            Not Before: May 22 16:29:35 2023 GMT
            Not After : May 20 16:34:35 2024 GMT
        Subject: CN=F76A1F40A783B0B496CFACCCD509EA5DA03C5306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:78:27:b3:ee:b7:1d:8f:7b:54:22:81:b9:
                    2f:e3:20:b4:69:97:ad:05:82:eb:d4:18:55:68:0d:
                    fe:cb:78:fb:b1:c7:29:a5:b9:37:d9:07:4b:07:2f:
                    8b:a4:1a:a2:69:30:84:49:06:b8:bc:19:1c:8c:bb:
                    b1:9f:4f:96:f8:21:f8:94:72:68:79:fe:b9:d8:af:
                    fe:c2:ec:4d:75:67:eb:86:4d:11:51:8d:9d:10:cf:
                    cc:aa:23:14:b4:fc:c3:e9:3c:cc:69:25:fc:f5:89:
                    b5:5c:45:cd:12:23:fc:6e:af:be:36:a2:ba:e8:0a:
                    25:0b:2a:73:e0:d7:b5:83:f8:3b:89:c9:1b:59:61:
                    4a:d9:08:12:49:b0:69:75:3f:aa:9d:f7:dc:40:91:
                    2b:63:14:76:58:7c:65:ce:7e:ce:a6:b6:8c:91:40:
                    1f:98:d6:ce:4e:94:58:84:9d:1b:16:18:63:ba:c7:
                    3f:c8:8e:6c:af:51:7c:7c:2f:27:86:68:56:a3:79:
                    dc:96:65:5c:e8:75:4e:1b:64:c5:2a:c5:99:ec:9a:
                    f0:4a:ee:3d:02:55:17:66:75:b3:80:59:1b:57:79:
                    a6:c8:61:50:6c:eb:3f:6f:a5:9a:11:e6:df:39:e9:
                    d1:e2:e8:c9:c2:a1:05:4b:9b:ad:15:ed:97:2d:4e:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6A:1F:40:A7:83:B0:B4:96:CF:AC:CC:D5:09:EA:5D:A0:3C:53:06
            X509v3 Authority Key Identifier:
                keyid:03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/03EC8988694A8AF5CA30CF11A817D548CF1FA024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/3136382e3132312e3138382e302f32322d3332203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:7f:cb:14:f8:2b:f3:8f:4e:b8:c6:19:85:9a:f0:fb:ec:76:
         ee:04:d8:c0:72:7d:6b:6b:4c:31:f5:73:70:8e:cc:68:fc:42:
         df:4c:e8:72:93:b6:95:4d:35:1d:bd:11:7f:af:58:c7:de:df:
         89:a8:f6:df:2f:39:d3:b0:30:f7:92:94:dd:2d:86:c8:7e:37:
         05:0e:73:2b:a7:f2:14:85:b0:04:95:77:2e:30:1a:ff:70:c8:
         3a:6b:ca:72:1c:2c:dd:39:d5:de:4f:68:2b:ba:0f:c9:a4:c7:
         9f:e4:f0:86:85:a1:19:78:a7:cf:01:3a:7e:bf:41:e9:a3:2b:
         d9:53:ce:ef:ff:ae:97:59:fe:ef:a9:1b:74:63:d8:c8:4e:2b:
         a9:b5:cd:0a:e7:ae:1e:34:13:f7:57:0d:bd:f0:08:18:de:54:
         11:cb:45:aa:40:01:48:25:c2:28:c8:c5:d9:4a:93:8d:b1:df:
         fc:5a:26:81:5b:d1:52:b5:77:2d:f0:8d:ac:4d:e7:94:28:e4:
         10:c3:95:0e:9d:59:84:ff:1b:7e:2f:6f:80:f6:e8:b0:98:28:
         5e:7b:ae:2e:4c:b0:c8:53:91:e1:63:f5:cf:5b:17:f2:34:d7:
         99:68:0c:3b:85:15:f0:c8:ee:30:94:e2:0d:07:75:ea:36:12:
         1f:6b:89:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org