Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/3136382e3132312e37372e302f32342d3234203d3e20323635333031.roa
File:                     3136382e3132312e37372e302f32342d3234203d3e20323635333031.roa (raw, json)
Hash identifier:          /MimHJ2ezb7F/n/fudU9PZbv4PQVUxEqUlUiuRYtADo=
Subject key identifier:   63:B6:CB:AE:83:C2:20:F7:FB:6F:7C:D0:AF:9E:DF:B5:44:D1:A8:8D
Certificate issuer:       /CN=AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2
Certificate serial:       2087D31D2B787CE3F92F8337C9239787AB074F84
Authority key identifier: AD:80:2A:4B:B5:E6:F8:0C:70:23:71:19:B6:7F:9D:E3:BD:AB:9C:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/3136382e3132312e37372e302f32342d3234203d3e20323635333031.roa
Signing time:             Thu 20 Apr 2023 14:28:36 +0000
ROA not before:           Thu 20 Apr 2023 14:23:36 +0000
ROA not after:            Thu 18 Apr 2024 14:28:36 +0000
asID:                     265301
IP address blocks:        168.121.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:87:d3:1d:2b:78:7c:e3:f9:2f:83:37:c9:23:97:87:ab:07:4f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2
        Validity
            Not Before: Apr 20 14:23:36 2023 GMT
            Not After : Apr 18 14:28:36 2024 GMT
        Subject: CN=63B6CBAE83C220F7FB6F7CD0AF9EDFB544D1A88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:5d:d1:45:b9:97:2b:57:df:4e:1b:ea:ba:
                    bd:aa:8d:74:87:f4:5c:e8:4e:12:8d:34:3f:0e:9a:
                    71:d6:b4:0a:18:c4:5f:2f:70:fc:08:04:0b:71:d4:
                    87:60:50:8f:a6:13:5f:5d:81:16:4a:f7:29:f1:fe:
                    55:94:59:54:be:1d:e2:4a:cc:54:7b:08:08:51:b2:
                    c7:86:fd:77:8e:dc:3b:b0:23:21:5f:98:dd:b7:d8:
                    be:86:1c:ee:60:21:f0:4b:3a:b7:88:ad:77:e1:ad:
                    50:94:67:32:2f:35:73:24:a7:24:28:f5:6b:97:8b:
                    4e:7b:f4:e2:e1:4c:a8:8e:81:6d:ea:57:52:70:62:
                    53:06:46:2e:d0:d2:27:3d:c3:97:69:9e:6c:04:d0:
                    c8:11:c8:09:e0:f8:f7:98:5f:62:c0:70:fb:94:1a:
                    64:9d:8a:79:70:04:87:23:3b:b7:81:06:c0:82:fc:
                    5b:6d:cd:32:5a:46:3a:4a:50:3e:85:40:c6:b8:c3:
                    fc:a0:24:27:8a:19:53:b4:04:f8:50:8c:77:d5:f8:
                    cc:13:11:aa:c7:51:ac:a0:a7:c5:6d:66:d5:86:59:
                    74:b5:a7:cc:e9:d6:59:20:d2:fa:c1:12:2d:fb:92:
                    e5:03:cb:51:02:56:a5:bc:99:74:58:1b:4e:4a:86:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B6:CB:AE:83:C2:20:F7:FB:6F:7C:D0:AF:9E:DF:B5:44:D1:A8:8D
            X509v3 Authority Key Identifier:
                keyid:AD:80:2A:4B:B5:E6:F8:0C:70:23:71:19:B6:7F:9D:E3:BD:AB:9C:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/3136382e3132312e37372e302f32342d3234203d3e20323635333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:cb:9b:61:21:53:62:4f:cd:88:dd:8f:b9:d0:e1:e9:4e:89:
         ff:af:6e:c7:d7:d4:73:28:07:6f:63:49:fa:c1:75:af:42:cf:
         0e:51:3b:1d:6d:8d:c0:2e:4a:59:a6:c2:34:97:e2:5c:f5:cb:
         ee:6a:78:2c:27:28:46:87:92:bc:b1:ad:10:c7:b0:05:9c:44:
         ed:3d:87:96:2f:2b:c4:24:5c:63:1d:7b:93:47:e2:00:8a:b2:
         96:7c:94:33:f0:34:2c:4c:5c:0f:da:e4:50:77:7f:6b:e5:cc:
         83:36:87:0b:bc:b1:a9:00:fc:8b:a3:2e:32:4f:85:d8:fa:bd:
         2b:c5:7a:53:36:aa:3d:28:c5:b2:ac:73:bd:73:39:c8:77:e0:
         a8:81:d4:4f:cd:c8:3d:b2:77:1c:f6:4b:94:c2:b9:3c:37:c5:
         f8:51:1f:c5:0c:06:ca:6f:8e:a5:94:61:f2:e6:61:98:9c:d5:
         8a:20:8f:12:d0:7b:d9:71:21:db:02:44:4f:12:f2:6f:16:61:
         22:45:c4:91:0c:50:93:3a:41:2d:c8:5b:b5:bf:9d:30:cc:13:
         08:7e:d5:b9:61:cd:31:fa:fd:13:9c:09:ee:8d:2c:91:65:49:
         d0:4c:b0:50:c6:e1:29:f1:ee:9a:bb:ce:8b:ce:64:25:f3:ec:
         d6:c2:8b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org