Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa
File:                     3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa (raw, json)
Hash identifier:          9+nfjgCxhHt3WY3vxuXEunml/oqpnZNM9dqtETXDOX8=
Subject key identifier:   39:C8:BA:B4:6E:1F:AC:5D:D9:B6:55:C1:CC:E8:D3:A2:69:24:FF:AE
Certificate issuer:       /CN=ABB4C702F23574E58CE72DE74FCACBB0D74F490C
Certificate serial:       356D28D7829F37A461F9ACDE683C24AF9F005A34
Authority key identifier: AB:B4:C7:02:F2:35:74:E5:8C:E7:2D:E7:4F:CA:CB:B0:D7:4F:49:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa
Signing time:             Fri 09 Feb 2024 19:56:43 +0000
ROA not before:           Fri 09 Feb 2024 19:51:43 +0000
ROA not after:            Fri 07 Feb 2025 19:56:43 +0000
asID:                     262966
IP address blocks:        168.121.248.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6d:28:d7:82:9f:37:a4:61:f9:ac:de:68:3c:24:af:9f:00:5a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB4C702F23574E58CE72DE74FCACBB0D74F490C
        Validity
            Not Before: Feb  9 19:51:43 2024 GMT
            Not After : Feb  7 19:56:43 2025 GMT
        Subject: CN=39C8BAB46E1FAC5DD9B655C1CCE8D3A26924FFAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:7a:04:08:13:b6:eb:cf:83:9f:76:fe:1c:
                    8b:c8:ad:5e:b8:44:3b:39:e3:33:fa:e1:a4:a5:f4:
                    c3:7b:f8:eb:ca:0c:97:4d:19:2e:0c:85:de:90:aa:
                    7c:74:1e:44:0f:d0:3f:7b:6d:e7:a5:62:b1:a7:f9:
                    46:a8:bb:f9:06:e1:7e:61:e8:73:d5:82:5a:26:a9:
                    fb:8b:ea:52:16:b2:18:0c:73:ba:6b:0b:5e:23:3f:
                    5a:63:b9:74:35:fe:31:8d:3d:be:53:04:d1:f5:98:
                    e4:9a:01:15:9d:77:49:c4:cb:dd:76:d1:39:a5:24:
                    12:94:b5:0e:97:95:a8:83:57:f2:6f:20:fd:31:25:
                    34:63:41:76:09:cb:24:1d:ef:72:fc:e2:47:92:a7:
                    a8:e7:7c:c0:7c:40:bf:ae:96:8b:c3:a8:ad:c6:6c:
                    c1:ed:b4:30:15:25:67:c7:0a:95:ea:0b:d4:ba:1e:
                    04:29:ed:af:1b:83:17:f8:c6:dc:80:f8:9f:02:5b:
                    0f:2b:64:b4:ab:37:db:d6:a2:cb:14:94:c0:5e:66:
                    0f:17:0c:4c:47:62:fd:69:b2:44:51:a2:ae:ca:b9:
                    a7:86:68:31:c8:5e:d9:a1:d4:32:d7:4e:d2:e3:76:
                    3b:18:04:4a:6a:5e:d7:8f:a3:1f:15:dc:c6:28:0a:
                    38:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C8:BA:B4:6E:1F:AC:5D:D9:B6:55:C1:CC:E8:D3:A2:69:24:FF:AE
            X509v3 Authority Key Identifier:
                keyid:AB:B4:C7:02:F2:35:74:E5:8C:E7:2D:E7:4F:CA:CB:B0:D7:4F:49:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:71:47:0a:a2:0b:24:3c:c3:d8:d9:d3:17:6f:09:ed:9f:4f:
         d3:18:af:2e:22:db:c6:e3:8e:a7:f7:e1:ad:d1:6b:58:76:52:
         f3:0d:d6:a9:08:da:26:1c:23:77:83:5d:c4:ef:c6:f4:2f:a9:
         2b:67:90:b0:d3:cf:b6:5c:f7:54:34:0c:54:52:6c:ce:78:f9:
         7e:77:36:7e:f2:6a:e5:de:15:c6:50:62:f4:f5:a6:2f:55:28:
         ff:f0:85:ea:8f:b2:be:e2:04:4a:14:b8:9a:4a:86:a1:b5:55:
         26:78:fc:51:ef:5a:14:c2:c5:19:9f:2b:95:80:3f:9e:f3:ea:
         34:7f:17:76:ed:d6:e2:61:fc:f6:ee:57:2d:12:ef:57:af:b7:
         0b:5c:fc:3c:63:d7:3b:0c:d4:e1:c3:68:86:9a:71:86:35:50:
         10:21:d0:1e:90:8e:f5:ed:79:91:fa:00:b4:2f:2a:d3:a4:cb:
         f3:df:79:b9:80:d1:0f:7d:60:35:15:a5:c9:b2:3c:95:42:b0:
         8d:c9:43:a3:bb:a1:e4:15:1f:00:60:ad:9b:41:69:19:42:2f:
         e3:b2:2c:36:90:56:e3:43:1d:cf:9e:f5:2b:63:a8:43:8d:cc:
         99:8c:87:cc:8d:ed:8b:c0:e6:e0:2b:b3:f4:72:bd:40:ce:d5:
         a3:8a:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org