Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
File:                     3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          OZupPM3brlTGbZgaFygerA59zVm+hU5eH3/Y25KyGdY=
Subject key identifier:   B1:A9:57:FC:32:E3:18:75:A2:50:56:B8:BF:00:6D:F7:ED:8E:29:EA
Certificate issuer:       /CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
Certificate serial:       51E6C8B4563AAA43BF80B36E5601C97EACF12FF1
Authority key identifier: F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
Signing time:             Wed 03 Apr 2024 21:39:08 +0000
ROA not before:           Wed 03 Apr 2024 21:34:08 +0000
ROA not after:            Wed 02 Apr 2025 21:39:08 +0000
asID:                     262391
IP address blocks:        168.181.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e6:c8:b4:56:3a:aa:43:bf:80:b3:6e:56:01:c9:7e:ac:f1:2f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
        Validity
            Not Before: Apr  3 21:34:08 2024 GMT
            Not After : Apr  2 21:39:08 2025 GMT
        Subject: CN=B1A957FC32E31875A25056B8BF006DF7ED8E29EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:71:d1:44:1d:27:41:50:19:69:43:67:67:d3:
                    60:e7:4f:3c:d9:df:bc:10:d6:8e:4c:bd:ba:5b:7d:
                    5d:c8:c7:b8:61:3a:16:1d:a9:dc:75:ff:05:41:32:
                    f2:4a:5d:d8:31:ff:8b:ca:55:43:3e:52:78:73:e3:
                    17:0b:32:84:8f:63:b8:1e:0d:47:18:fb:d3:55:54:
                    3e:87:0e:f7:15:8d:fb:48:8b:66:55:e5:79:9d:75:
                    c3:06:18:c7:0e:f6:21:ec:fc:7f:fe:80:7f:c1:71:
                    71:08:b5:5e:5f:d9:82:35:5f:75:2f:9b:fe:ed:a5:
                    4b:dd:d1:18:fc:bf:b6:43:ed:97:75:62:ee:9c:df:
                    8e:6c:1b:b4:5f:c5:66:f8:df:06:02:81:ef:16:e5:
                    66:a6:cc:ea:00:3f:0c:5a:2c:a1:f5:b1:98:5f:1a:
                    c8:89:6d:1a:1a:c1:f1:a0:13:4f:0d:79:37:03:79:
                    5a:89:fa:71:79:74:8d:c4:f9:d4:6b:ad:eb:61:7a:
                    7e:ee:32:9c:a4:98:12:16:e1:28:11:94:c6:bb:64:
                    01:92:c5:8d:6d:8a:39:02:6d:8b:b4:b1:c3:b3:6b:
                    56:64:51:a0:b5:7b:a1:94:1e:bd:01:9a:c2:b1:47:
                    6b:98:49:91:c2:75:7c:0b:5e:98:c1:ae:13:32:f3:
                    52:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A9:57:FC:32:E3:18:75:A2:50:56:B8:BF:00:6D:F7:ED:8E:29:EA
            X509v3 Authority Key Identifier:
                keyid:F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:fa:ff:34:50:24:8d:b7:fa:76:75:ee:12:cf:8f:15:7b:70:
         1e:0b:00:18:a5:0b:c8:a0:7a:e8:4e:c6:cd:8b:39:ec:b7:e3:
         24:ff:4f:04:5a:dc:86:c1:91:be:29:72:69:f9:6a:e4:21:18:
         6d:b7:48:62:53:07:c5:c2:71:85:58:9c:52:89:75:10:16:b1:
         fe:04:09:1d:74:89:d7:b2:a8:e3:55:f8:fd:4c:84:09:3f:be:
         4f:7e:85:07:06:89:f8:53:83:52:fe:f2:f4:f2:d3:f4:e5:d6:
         6f:30:58:aa:3c:51:f4:47:65:c7:6f:cb:e2:c2:ef:68:7b:ca:
         6d:bd:94:2a:0c:0c:4c:3c:d7:12:30:1c:bf:ca:19:b9:cf:cd:
         c2:5f:90:04:2d:32:ee:db:3f:b9:cb:55:96:cb:d1:11:17:78:
         e4:ea:d5:ba:09:f9:11:9d:4f:4f:4c:a8:42:ef:65:d1:d5:f0:
         88:0c:27:90:fd:6d:b5:bb:d8:7e:b5:ad:e4:43:27:22:e6:5a:
         4a:20:09:07:36:fd:59:d1:7a:cb:cc:6d:ee:60:4c:77:52:a0:
         86:d4:b5:dc:66:5e:55:bb:c9:bf:b0:58:0c:92:9b:97:8e:1b:
         76:1e:78:48:a1:b1:69:61:38:a4:13:48:87:10:d7:78:8d:df:
         1a:19:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:00 2024 by rpki-client on console-fra.rpki-client.org