Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/0/3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa
File:                     3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa (raw, json)
Hash identifier:          e7gLq45ohPpZ/SllJoMMWEbLeTvvJ/5nJtPq2/5GP3c=
Subject key identifier:   8A:43:A2:84:2E:D2:30:B9:88:70:2D:45:E0:05:98:3C:B2:E2:5F:31
Certificate issuer:       /CN=688713330CB4C70F06A051D58CEFD329ED90208B
Certificate serial:       224BE90C04557CADC056E16DE2B0D77E75BAFBD3
Authority key identifier: 68:87:13:33:0C:B4:C7:0F:06:A0:51:D5:8C:EF:D3:29:ED:90:20:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/688713330CB4C70F06A051D58CEFD329ED90208B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/0/3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa
Signing time:             Thu 18 May 2023 17:43:14 +0000
ROA not before:           Thu 18 May 2023 17:38:14 +0000
ROA not after:            Thu 16 May 2024 17:43:14 +0000
asID:                     265421
IP address blocks:        168.195.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4b:e9:0c:04:55:7c:ad:c0:56:e1:6d:e2:b0:d7:7e:75:ba:fb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688713330CB4C70F06A051D58CEFD329ED90208B
        Validity
            Not Before: May 18 17:38:14 2023 GMT
            Not After : May 16 17:43:14 2024 GMT
        Subject: CN=8A43A2842ED230B988702D45E005983CB2E25F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:14:0b:7f:d1:65:83:b4:ad:9c:b9:a4:0d:
                    c9:f1:2b:34:90:88:64:bc:f1:42:d2:17:cd:7e:20:
                    23:b9:35:77:89:0c:5f:58:6e:37:17:0e:4f:a3:16:
                    c3:cf:12:44:20:63:f7:e1:81:fd:1b:c0:bc:c7:92:
                    da:37:9f:0f:83:4b:50:11:db:5c:32:7f:ce:2e:51:
                    c7:b7:99:87:02:f2:2f:51:9e:f3:ce:0c:a0:7a:50:
                    e0:27:a6:48:a9:b6:95:94:35:28:54:f2:30:a6:ea:
                    fd:8b:8d:e9:be:77:48:86:29:34:ac:4a:e7:b1:eb:
                    3a:4c:71:97:ae:30:58:73:de:4e:54:cb:a7:28:a9:
                    0b:72:ff:5a:57:0e:93:46:e2:0e:02:a0:98:75:54:
                    e9:92:53:be:cd:83:b8:9e:f0:a9:c1:2a:be:f7:e2:
                    83:5d:4e:7b:ee:6b:3d:4f:a2:ee:6f:ba:2d:64:b7:
                    f5:7a:6b:8c:65:77:d9:25:28:47:e4:e2:26:12:e6:
                    13:86:f8:d0:de:e5:f1:c8:e5:c6:f1:c9:8a:33:25:
                    f3:d8:f7:62:1a:b3:f7:2e:74:5f:49:4f:c8:f0:eb:
                    64:7f:13:0f:45:07:c5:d6:1c:cd:53:07:ac:cf:5a:
                    d4:53:fa:c2:b5:dc:cc:70:55:d8:48:1b:53:39:04:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:43:A2:84:2E:D2:30:B9:88:70:2D:45:E0:05:98:3C:B2:E2:5F:31
            X509v3 Authority Key Identifier:
                keyid:68:87:13:33:0C:B4:C7:0F:06:A0:51:D5:8C:EF:D3:29:ED:90:20:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/0/688713330CB4C70F06A051D58CEFD329ED90208B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/688713330CB4C70F06A051D58CEFD329ED90208B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/0/3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:81:db:3a:5b:70:2f:f4:87:23:e5:f2:a2:d2:d3:a0:08:de:
         6c:66:88:e4:8f:2b:cd:fc:10:f6:0f:34:c1:78:6c:20:0b:25:
         9f:a2:b9:94:fc:7e:8c:3d:f7:22:37:2f:39:43:16:bd:0a:6f:
         50:8c:f0:09:6f:12:46:af:2b:db:56:1d:0a:75:14:68:67:c8:
         53:68:c5:ea:60:b8:65:7d:b7:4f:84:04:93:d9:7b:88:3a:9b:
         d2:6f:09:3f:03:99:af:04:4d:03:91:ef:74:3b:69:5e:09:3c:
         69:38:c4:cf:88:b8:9e:d4:47:da:9b:86:ad:1c:b1:85:e5:11:
         9a:18:f3:36:bb:e8:23:3e:de:c3:46:1e:d8:08:d0:35:37:19:
         55:0c:73:69:ef:97:dd:16:88:43:67:a1:3f:81:8e:fb:96:a6:
         a7:e3:3c:c4:3b:5f:5d:90:28:c2:40:b7:55:a8:48:e7:9b:c5:
         b4:3e:34:fd:dc:3c:44:16:f8:57:c4:fc:61:c1:85:14:d4:52:
         02:a3:ef:13:b4:a3:66:c8:d2:0c:90:7f:75:58:0c:2c:31:61:
         b4:9a:4c:66:10:56:96:0d:34:82:c8:45:12:b4:53:89:55:8c:
         c8:44:ac:3d:96:f3:bf:e3:6b:39:bd:55:3a:4c:c8:20:31:9d:
         12:e0:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org