Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35322e302f32322d3232203d3e20323635323239.roa
File:                     3136382e302e35322e302f32322d3232203d3e20323635323239.roa (raw, json)
Hash identifier:          5q0N/Dnofzyqs5HQpDJXCMN5WClH/cVQuWx6LXkreTk=
Subject key identifier:   4F:D1:44:9F:41:FD:DB:7A:4D:6D:09:1C:EB:C5:A3:C3:D7:3A:8C:3A
Certificate issuer:       /CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
Certificate serial:       2AC420CBD5CEA1E2E72468AEE1623B1C67FCE12C
Authority key identifier: 0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35322e302f32322d3232203d3e20323635323239.roa
Signing time:             Mon 09 Oct 2023 23:51:53 +0000
ROA not before:           Mon 09 Oct 2023 23:46:53 +0000
ROA not after:            Mon 07 Oct 2024 23:51:53 +0000
asID:                     265229
IP address blocks:        168.0.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c4:20:cb:d5:ce:a1:e2:e7:24:68:ae:e1:62:3b:1c:67:fc:e1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
        Validity
            Not Before: Oct  9 23:46:53 2023 GMT
            Not After : Oct  7 23:51:53 2024 GMT
        Subject: CN=4FD1449F41FDDB7A4D6D091CEBC5A3C3D73A8C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8d:0e:75:bd:7b:8e:5c:cf:83:72:96:49:18:
                    01:34:59:3a:8f:71:ca:2c:04:72:35:b9:28:af:7c:
                    2e:4c:b9:42:f4:e1:ed:dd:77:11:5b:52:c5:ea:df:
                    e4:52:04:cc:68:5e:e6:19:2a:a4:16:d4:a7:5b:7f:
                    85:ba:cd:bc:28:f9:8c:ba:fc:ce:f1:75:09:4c:f9:
                    f0:88:f5:89:95:b3:2f:e6:11:ab:f7:a0:ac:0a:94:
                    54:00:06:4b:50:d5:42:62:49:23:04:25:55:45:5b:
                    27:de:04:27:7e:c2:87:27:3a:e6:87:3b:b3:03:0e:
                    eb:55:25:d0:e2:e4:d5:bf:e8:2a:ad:88:6e:1b:89:
                    eb:b5:4c:aa:02:82:65:6f:27:c7:b5:25:14:98:fa:
                    20:57:40:cd:b7:61:4f:4d:16:d3:6c:bc:53:f9:d6:
                    7a:5a:5f:d7:c6:4f:11:2c:dd:7c:af:5b:6c:82:90:
                    dc:d3:9e:65:55:87:ac:e8:bf:c2:92:68:2f:86:ef:
                    49:5a:44:d0:1c:bc:75:c4:7e:cb:41:ea:41:53:83:
                    f9:63:91:dd:84:b0:d2:df:98:ae:d0:26:6f:18:4b:
                    f3:dd:ca:a7:3e:b6:5b:09:51:3d:2d:8f:cc:a0:b1:
                    6a:63:26:8e:21:2d:51:51:16:c9:39:c3:fc:e1:ee:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D1:44:9F:41:FD:DB:7A:4D:6D:09:1C:EB:C5:A3:C3:D7:3A:8C:3A
            X509v3 Authority Key Identifier:
                keyid:0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35322e302f32322d3232203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:9f:6c:5d:a7:93:ad:cb:6f:cd:62:30:4a:df:22:73:12:ad:
         7a:47:6a:91:54:db:e5:5e:75:f5:d5:f2:eb:46:5d:2f:88:8c:
         ee:f0:2b:be:30:c9:de:75:08:5b:de:88:b0:ba:46:86:88:38:
         2d:73:6c:be:2e:db:c3:9a:4d:e4:6d:2a:78:c8:a7:14:e3:39:
         64:4f:fb:b9:fc:69:f7:ea:63:81:1f:74:96:ef:b4:cd:b2:39:
         52:d0:ad:a7:2b:d3:e1:ac:2f:c1:cb:13:4b:c6:62:8c:10:2b:
         95:b0:cd:9b:f6:ce:a9:d5:40:c6:05:82:92:98:b7:be:ba:b1:
         c8:ac:b7:a7:98:42:b7:d6:e4:82:5d:da:fd:92:23:7d:80:23:
         f1:ce:e1:38:41:1c:48:c8:1c:37:21:c4:7b:10:d5:a3:f6:ff:
         4b:40:1a:ff:67:d4:8e:f7:ac:bd:e4:0c:49:55:bd:d1:21:fa:
         e1:88:71:9b:de:46:1f:f3:f5:5b:07:74:ef:e4:c1:0e:33:58:
         81:b0:39:40:fb:48:69:0c:4e:7c:d7:7a:05:35:86:51:68:e7:
         63:b5:db:4a:33:dd:2a:77:9f:ee:a8:44:fb:9a:98:41:68:48:
         11:ae:a1:3c:2a:b7:9e:b9:22:d6:b5:6f:e5:82:bb:1b:d3:e0:
         e8:85:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org