Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/3136382e3132312e3234382e302f32322d3234203d3e20323632393636.roa
File:                     3136382e3132312e3234382e302f32322d3234203d3e20323632393636.roa (raw, json)
Hash identifier:          QpAth7sRdjFCafqqudSdfNNi/WZf5jsn4g46gisXd9A=
Subject key identifier:   09:DF:5C:79:09:2C:2C:BA:FB:F0:2F:E5:01:59:BA:7B:21:07:4C:87
Certificate issuer:       /CN=ABB4C702F23574E58CE72DE74FCACBB0D74F490C
Certificate serial:       36E6967F93D35F307324053DE520C2CD320187FA
Authority key identifier: AB:B4:C7:02:F2:35:74:E5:8C:E7:2D:E7:4F:CA:CB:B0:D7:4F:49:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/3136382e3132312e3234382e302f32322d3234203d3e20323632393636.roa
Signing time:             Fri 10 Mar 2023 18:56:58 +0000
ROA not before:           Fri 10 Mar 2023 18:51:58 +0000
ROA not after:            Fri 08 Mar 2024 18:56:58 +0000
asID:                     262966
IP address blocks:        168.121.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e6:96:7f:93:d3:5f:30:73:24:05:3d:e5:20:c2:cd:32:01:87:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB4C702F23574E58CE72DE74FCACBB0D74F490C
        Validity
            Not Before: Mar 10 18:51:58 2023 GMT
            Not After : Mar  8 18:56:58 2024 GMT
        Subject: CN=09DF5C79092C2CBAFBF02FE50159BA7B21074C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:f1:4f:b0:2d:1a:87:af:26:09:0e:cd:68:
                    b3:38:ad:36:33:3b:71:a4:20:93:08:6a:56:87:7e:
                    c9:6d:0a:c3:6e:3c:71:03:65:3e:0a:99:14:e5:d2:
                    91:63:35:2b:1a:23:7e:b8:c3:88:a5:09:32:c8:8c:
                    30:1b:5e:3d:fe:bf:76:bc:e8:95:59:1c:9e:b1:02:
                    0a:6b:d2:27:7e:e6:7e:5c:20:e8:f1:0d:d2:73:76:
                    66:a5:d7:64:3d:30:e3:88:63:cf:2f:c8:a2:29:76:
                    25:92:93:60:fa:23:58:89:b0:01:56:c2:aa:a6:cd:
                    3c:5a:e0:ce:40:18:6f:76:1c:12:b7:c3:3b:c6:ef:
                    d2:8c:30:bf:3f:b1:19:03:68:f1:0a:15:17:ac:f2:
                    1d:3c:5c:06:54:78:97:0c:c3:84:5b:22:ae:74:8f:
                    be:22:d0:45:a8:66:d2:97:56:c1:e4:17:07:33:7d:
                    c8:8e:27:23:c4:4c:10:7a:e5:45:65:41:5f:25:e8:
                    70:4c:02:dc:f3:14:51:aa:48:0a:cb:31:47:69:f4:
                    3b:1f:e5:95:94:c0:fd:04:27:9c:c2:80:d3:e2:cf:
                    41:41:a2:c3:0d:7d:58:87:5e:55:93:85:43:79:8e:
                    06:ec:68:47:dc:72:3b:5c:11:1e:2b:d9:72:ff:10:
                    f9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DF:5C:79:09:2C:2C:BA:FB:F0:2F:E5:01:59:BA:7B:21:07:4C:87
            X509v3 Authority Key Identifier:
                keyid:AB:B4:C7:02:F2:35:74:E5:8C:E7:2D:E7:4F:CA:CB:B0:D7:4F:49:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/3136382e3132312e3234382e302f32322d3234203d3e20323632393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:f7:72:7a:74:69:fd:b4:99:eb:25:56:78:91:7d:ea:46:ba:
         d4:07:8d:40:f4:b2:bc:38:db:fb:93:a3:5a:4c:56:d8:aa:39:
         38:34:8c:82:76:a6:e8:49:9e:a9:47:5f:f0:5f:d7:36:17:e0:
         4a:44:32:57:00:41:0d:69:13:4f:dd:3e:95:13:cb:b0:92:e0:
         89:f0:a7:d2:43:b5:ce:22:e5:4e:b0:b7:8d:f0:f6:3f:8e:6e:
         56:8b:df:bc:fb:55:fe:b1:b9:01:ec:82:d7:22:43:90:77:20:
         f6:ef:f4:ad:66:d8:eb:a7:22:67:61:2b:18:9c:d8:df:de:fa:
         56:be:03:40:f2:92:dd:ad:58:9f:0a:dd:65:bf:23:4a:a6:bc:
         53:24:81:ea:5c:32:d0:68:d6:93:9d:81:05:60:f4:bf:75:cd:
         43:8b:ba:0b:48:a8:87:22:74:4a:f1:30:a7:2d:70:bd:c1:db:
         8c:22:63:eb:f5:be:7c:b5:16:6c:9a:66:18:55:cd:61:08:10:
         65:7a:31:3b:8b:a7:22:c5:ed:67:b0:ea:63:55:68:43:57:d1:
         53:30:6a:da:b1:90:f9:8f:42:6f:a8:2c:0c:b7:e8:c9:4d:02:
         11:52:8a:68:c2:5a:62:3b:86:bc:c5:62:07:19:7e:2f:e4:fa:
         cc:7e:ce:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org