Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/3136382e3132312e37362e302f32332d3233203d3e20323635333031.roa
File:                     3136382e3132312e37362e302f32332d3233203d3e20323635333031.roa (raw, json)
Hash identifier:          0nevRKnsvqOqH2HsVh5c98qFUz06G7mEaxBy+CJ+qCY=
Subject key identifier:   AE:C7:7E:E3:68:E3:37:B0:DA:A1:8C:E8:FA:74:F3:F3:A4:12:C8:54
Certificate issuer:       /CN=AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2
Certificate serial:       446FBF400702413287FF0D4173A68D216E7F5AFA
Authority key identifier: AD:80:2A:4B:B5:E6:F8:0C:70:23:71:19:B6:7F:9D:E3:BD:AB:9C:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/3136382e3132312e37362e302f32332d3233203d3e20323635333031.roa
Signing time:             Thu 20 Apr 2023 14:28:30 +0000
ROA not before:           Thu 20 Apr 2023 14:23:30 +0000
ROA not after:            Thu 18 Apr 2024 14:28:30 +0000
asID:                     265301
IP address blocks:        168.121.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6f:bf:40:07:02:41:32:87:ff:0d:41:73:a6:8d:21:6e:7f:5a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2
        Validity
            Not Before: Apr 20 14:23:30 2023 GMT
            Not After : Apr 18 14:28:30 2024 GMT
        Subject: CN=AEC77EE368E337B0DAA18CE8FA74F3F3A412C854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f6:80:cd:d0:b5:6d:79:81:2b:c8:68:c9:ce:
                    c2:fc:cf:24:a2:e5:83:89:6b:6e:19:98:82:a7:d5:
                    e7:3a:50:e0:27:38:51:60:dc:13:c3:f6:14:5f:14:
                    54:52:af:db:9a:ca:2e:98:f1:6f:9e:0a:e0:23:64:
                    03:63:79:b9:0d:7c:f4:f8:90:76:f8:6d:34:23:8d:
                    81:03:2f:d3:8d:13:21:8e:f3:f8:64:ea:16:51:0e:
                    b3:87:31:34:b9:29:78:3c:73:25:4a:9d:35:fc:f8:
                    03:fa:59:7f:67:57:72:ae:b0:ad:c7:f6:95:1f:ed:
                    48:00:2f:ae:00:99:c3:54:ef:8c:e7:56:f9:b7:ec:
                    ec:5d:2a:b8:30:45:c1:59:c2:65:6f:5d:a2:bd:59:
                    35:31:32:12:ba:29:ae:e5:f1:30:4b:b7:c5:aa:af:
                    84:b2:12:f5:8b:9d:b1:96:d2:02:68:33:0d:ad:73:
                    e9:cd:0a:ab:75:b9:e1:b7:e5:3f:7b:6c:51:4b:4a:
                    34:83:98:e3:17:4d:7a:07:72:f2:43:76:53:7c:03:
                    86:51:bd:83:27:2c:9a:4f:27:2c:81:63:c2:ed:0e:
                    7a:b7:8b:cf:7a:2f:e1:c3:b8:cf:92:32:a0:44:6d:
                    3c:94:b2:fb:a3:4c:df:bf:9f:f3:c3:9d:ab:ae:f9:
                    75:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C7:7E:E3:68:E3:37:B0:DA:A1:8C:E8:FA:74:F3:F3:A4:12:C8:54
            X509v3 Authority Key Identifier:
                keyid:AD:80:2A:4B:B5:E6:F8:0C:70:23:71:19:B6:7F:9D:E3:BD:AB:9C:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/3136382e3132312e37362e302f32332d3233203d3e20323635333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:58:65:d7:56:c0:e3:39:33:01:7e:be:cf:60:64:f2:f8:cf:
         c1:4b:63:c3:d5:9e:8b:e9:12:3d:36:15:60:0d:7f:dc:4b:f7:
         cc:42:cb:53:03:0d:69:e6:f7:dc:4a:30:15:6a:6d:ca:e6:bb:
         c5:e4:34:1e:6c:27:50:ea:b6:75:4d:6a:1d:c8:3a:33:12:4b:
         cf:97:11:0a:be:4b:a5:6f:34:a4:ac:cb:12:19:8e:5b:a5:2b:
         6b:14:86:e8:31:38:fb:2e:bc:7d:d9:33:00:98:62:50:9e:1e:
         ad:36:23:87:6c:d6:51:6d:f0:f0:dc:63:20:90:a3:9b:4f:c6:
         c9:4d:30:6c:12:1d:09:f0:da:3b:7f:58:29:5e:bb:e2:f4:7e:
         3f:c3:a5:06:c2:a1:65:90:6c:f6:40:ff:b3:12:9d:f0:15:5e:
         66:9a:32:ed:9c:14:0c:63:78:e5:cd:34:0e:a1:13:be:fe:b3:
         f3:9a:71:4c:77:60:eb:1a:83:99:64:00:69:bd:fb:41:2a:b6:
         63:8b:25:ac:74:bc:1d:fc:f4:1a:91:79:8d:86:76:28:dd:9a:
         b1:52:e9:ff:5b:a1:ed:4e:93:7a:48:a7:7b:f7:ef:45:f1:92:
         43:05:68:86:44:7f:22:3c:7a:7d:55:cc:32:f2:27:22:99:6d:
         d3:fb:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org