Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35332e302f32342d3234203d3e20323635323239.roa
File:                     3136382e302e35332e302f32342d3234203d3e20323635323239.roa (raw, json)
Hash identifier:          9HHOQmVtxzWA00rrWQ5dJhlM0qHn4aDXseok70w+1/A=
Subject key identifier:   92:64:AA:63:A0:7F:8F:18:C6:0F:4B:35:15:E9:94:20:DA:20:73:80
Certificate issuer:       /CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
Certificate serial:       76B830E5634C056F9A34F5F458AE81845BC1A21B
Authority key identifier: 0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35332e302f32342d3234203d3e20323635323239.roa
Signing time:             Mon 09 Oct 2023 23:51:54 +0000
ROA not before:           Mon 09 Oct 2023 23:46:54 +0000
ROA not after:            Mon 07 Oct 2024 23:51:54 +0000
asID:                     265229
IP address blocks:        168.0.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b8:30:e5:63:4c:05:6f:9a:34:f5:f4:58:ae:81:84:5b:c1:a2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
        Validity
            Not Before: Oct  9 23:46:54 2023 GMT
            Not After : Oct  7 23:51:54 2024 GMT
        Subject: CN=9264AA63A07F8F18C60F4B3515E99420DA207380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:bb:af:37:2d:a2:7b:b6:20:3f:8b:af:57:
                    77:1f:f1:ca:43:52:88:07:bb:bf:d8:64:40:de:d9:
                    e9:24:b7:17:fa:94:df:b1:8a:d8:32:c7:f5:9a:15:
                    2f:b6:78:a3:62:6a:43:f0:2f:cf:68:59:90:52:f5:
                    eb:5d:ff:a5:bd:a8:ae:96:74:1b:49:b8:e8:72:c2:
                    b8:71:39:c4:c8:a1:89:30:10:7a:0c:bd:c3:f4:5e:
                    fb:a8:e2:c5:67:33:98:f6:83:52:e6:32:30:c9:c9:
                    71:cf:33:0e:2f:cd:a8:58:21:94:31:4d:2f:97:48:
                    bc:d7:9e:d4:5f:e0:9a:d6:68:94:84:d8:27:d6:98:
                    50:6a:2f:28:f4:60:28:95:1f:54:18:f2:d2:66:38:
                    da:50:d1:0a:78:13:44:1e:6b:99:09:b7:23:69:4c:
                    f0:71:92:88:69:1d:4e:26:07:e5:59:68:4f:83:ee:
                    d9:c7:cb:47:77:ee:4c:1a:84:37:6d:5c:73:8e:ac:
                    84:29:2a:c7:d7:a5:7d:57:17:d3:e7:19:57:bc:17:
                    94:70:a0:45:0f:0e:ca:ff:50:e0:89:13:16:ce:e9:
                    ad:51:37:7f:39:da:aa:d3:bc:db:d1:8a:36:d8:ad:
                    c6:3c:29:06:6f:b9:34:95:19:f6:12:65:ee:12:0a:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:64:AA:63:A0:7F:8F:18:C6:0F:4B:35:15:E9:94:20:DA:20:73:80
            X509v3 Authority Key Identifier:
                keyid:0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35332e302f32342d3234203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:a1:9d:e6:65:09:69:1b:e7:81:07:31:a4:95:d7:7b:9a:43:
         f6:cb:d8:2a:11:1c:31:17:6c:b7:97:6f:68:7c:4d:61:3d:db:
         61:ef:63:74:f5:29:17:b9:fe:fd:de:18:9e:c5:dc:6a:90:45:
         50:ec:b7:d1:ba:a6:d7:4a:74:da:c4:6a:76:b1:a1:5e:29:a3:
         45:c2:22:7d:52:e8:fb:c9:eb:ec:a5:39:23:01:06:7e:68:c2:
         a0:d5:d7:e0:1a:52:9f:39:e8:f3:04:4f:dc:c1:7e:71:a5:4e:
         44:50:7c:2d:20:64:64:9c:a2:5f:3e:d2:15:a9:8d:54:a5:8b:
         eb:4e:a7:f0:be:fb:90:cd:cb:8f:a4:17:0b:f4:60:53:e0:80:
         f1:b7:9d:7b:da:3e:17:8e:01:15:e5:2d:0f:b3:c8:ca:80:1f:
         54:ea:9b:46:09:b2:0d:21:d4:cd:93:f8:1f:eb:da:55:1b:a9:
         8d:2a:63:80:ee:4e:d8:74:89:c7:7d:a6:11:b5:40:36:ab:52:
         68:b6:df:76:8c:91:36:d1:ef:b4:8d:7c:dd:f0:00:40:7a:61:
         55:53:e0:db:d6:c0:2a:dd:72:6f:7b:4d:59:67:45:6d:61:74:
         cc:b6:62:9e:12:f4:e2:04:f7:9d:55:6b:78:7c:a7:98:ab:03:
         97:ba:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org