Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/3136382e3139362e36302e302f32322d3234203d3e20323635343634.roa
File:                     3136382e3139362e36302e302f32322d3234203d3e20323635343634.roa (raw, json)
Hash identifier:          0oy6tLujT6u7tzdbZGYJoWSJnoP8KxJx9NqlnMTIK8Q=
Subject key identifier:   5D:37:BC:9B:F4:D4:39:14:D1:A6:D7:BB:4A:80:58:5D:86:65:9F:FD
Certificate issuer:       /CN=7E86076B38640325D63FEE1E30C0DA584FCE43AD
Certificate serial:       7DC952BEF6722F10FA6F1C83B33063B609F5CFF2
Authority key identifier: 7E:86:07:6B:38:64:03:25:D6:3F:EE:1E:30:C0:DA:58:4F:CE:43:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E86076B38640325D63FEE1E30C0DA584FCE43AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/3136382e3139362e36302e302f32322d3234203d3e20323635343634.roa
Signing time:             Sat 29 Jul 2023 17:51:46 +0000
ROA not before:           Sat 29 Jul 2023 17:46:46 +0000
ROA not after:            Sat 27 Jul 2024 17:51:46 +0000
asID:                     265464
IP address blocks:        168.196.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c9:52:be:f6:72:2f:10:fa:6f:1c:83:b3:30:63:b6:09:f5:cf:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E86076B38640325D63FEE1E30C0DA584FCE43AD
        Validity
            Not Before: Jul 29 17:46:46 2023 GMT
            Not After : Jul 27 17:51:46 2024 GMT
        Subject: CN=5D37BC9BF4D43914D1A6D7BB4A80585D86659FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:b1:d7:52:e3:8c:51:59:30:ee:d6:62:e9:
                    86:3d:b3:e9:f2:e2:ea:b8:86:ac:20:02:0c:5f:53:
                    f3:7e:e9:b4:1c:e8:d6:06:2b:3c:4b:33:18:81:d2:
                    27:69:0a:cd:1d:87:c1:d2:70:81:8a:27:f7:e6:e6:
                    a2:3e:be:23:f2:45:07:1c:30:42:4b:3c:61:7e:de:
                    7d:aa:c5:aa:8c:70:62:49:7c:0e:5b:4f:a5:48:30:
                    e2:60:b1:6d:9c:0f:30:52:7e:7e:36:19:b7:99:20:
                    e3:23:ae:55:cd:70:77:28:45:7b:4a:c4:d8:e4:5e:
                    55:f7:64:86:3a:80:75:ed:2a:cd:51:04:ce:2e:fe:
                    75:12:6f:bb:39:cb:88:36:8f:2c:27:a1:8d:a5:43:
                    39:b5:71:ee:77:fd:78:8f:11:23:7c:77:54:da:88:
                    23:d5:36:91:86:d9:f0:47:cb:10:e8:97:bb:db:dd:
                    27:80:cc:37:d2:3f:00:23:d5:4d:51:07:01:03:52:
                    6e:88:76:02:28:2b:67:1e:82:81:a3:c7:7b:81:e9:
                    a1:a9:67:24:64:96:34:16:e4:63:15:84:4c:65:dd:
                    b9:98:c1:1f:d7:c0:27:b8:bb:cb:57:9e:fb:1e:17:
                    aa:09:83:5c:b0:d9:1c:20:96:11:f9:99:75:99:94:
                    ca:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:37:BC:9B:F4:D4:39:14:D1:A6:D7:BB:4A:80:58:5D:86:65:9F:FD
            X509v3 Authority Key Identifier:
                keyid:7E:86:07:6B:38:64:03:25:D6:3F:EE:1E:30:C0:DA:58:4F:CE:43:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/7E86076B38640325D63FEE1E30C0DA584FCE43AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E86076B38640325D63FEE1E30C0DA584FCE43AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/3136382e3139362e36302e302f32322d3234203d3e20323635343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:5f:6b:4e:e8:30:5f:47:f6:b4:43:7f:cf:37:6f:2e:36:1b:
         42:a3:8a:40:8c:19:e1:aa:66:c1:b2:af:06:27:68:6a:b1:f5:
         3a:ec:65:2d:60:ea:e7:43:b0:c0:2f:7a:bf:58:70:bd:57:86:
         3d:31:e7:89:e4:9b:2f:bb:f9:34:14:d7:8c:8e:67:4b:cb:ed:
         e6:35:e7:7a:6c:81:90:00:ea:69:5d:8a:22:60:3c:41:64:b3:
         f7:1a:bb:f8:09:67:9d:1d:a7:2c:da:ff:d7:d3:40:58:83:2a:
         ee:4a:5b:c4:01:a6:a4:57:1d:6d:fb:4a:5a:1c:04:ef:ef:77:
         81:c6:a8:d5:37:f9:f7:02:63:39:a0:8e:74:95:17:de:f2:d8:
         fd:19:27:f9:b4:2a:5b:b5:11:b2:b5:b6:94:36:18:0c:6e:95:
         0f:3e:db:d7:ac:7b:08:c0:89:31:6a:02:69:81:91:59:43:b9:
         fa:f9:6c:3e:3c:08:75:8c:d6:36:4f:24:01:4e:28:42:54:ff:
         36:e4:43:be:1c:37:48:cd:90:f3:99:37:66:60:48:45:1d:42:
         5d:ed:d7:70:4d:be:eb:bd:2b:6c:e4:8c:c1:7f:37:af:3c:68:
         f8:00:ef:1a:dd:90:e7:d6:ab:da:9c:86:dc:37:b9:4c:cc:b7:
         80:6f:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org