Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e322e302f32342d3234203d3e20323635323430.roa
File:                     3136382e302e322e302f32342d3234203d3e20323635323430.roa (raw, json)
Hash identifier:          ld928R9AOVIiflEyxoYFZ4+PDfqeoqOvYdUvmdwqJR4=
Subject key identifier:   30:CB:6F:08:21:9E:CA:B8:6C:18:E8:B5:0F:2B:59:AC:89:10:6E:62
Certificate issuer:       /CN=42C85A39ED0D33A761B78E8D797BDD5D476B11C4
Certificate serial:       7FA3302224D0D45C690F1A82A7ED83E815356E43
Authority key identifier: 42:C8:5A:39:ED:0D:33:A7:61:B7:8E:8D:79:7B:DD:5D:47:6B:11:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e322e302f32342d3234203d3e20323635323430.roa
Signing time:             Mon 28 Aug 2023 19:48:48 +0000
ROA not before:           Mon 28 Aug 2023 19:43:48 +0000
ROA not after:            Mon 26 Aug 2024 19:48:48 +0000
asID:                     265240
IP address blocks:        168.0.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a3:30:22:24:d0:d4:5c:69:0f:1a:82:a7:ed:83:e8:15:35:6e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C85A39ED0D33A761B78E8D797BDD5D476B11C4
        Validity
            Not Before: Aug 28 19:43:48 2023 GMT
            Not After : Aug 26 19:48:48 2024 GMT
        Subject: CN=30CB6F08219ECAB86C18E8B50F2B59AC89106E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6a:72:b8:52:2c:fd:a3:e9:91:80:75:63:53:
                    93:0b:ed:20:aa:a3:1e:51:9b:5d:42:98:50:c2:56:
                    9c:c1:87:eb:c4:a2:74:89:eb:81:0e:10:e6:01:cb:
                    4f:a3:66:94:34:bb:ca:d9:26:69:cc:38:48:be:d8:
                    15:15:38:09:02:ff:8d:fd:4c:c3:e2:28:43:ab:56:
                    e8:8a:4b:e1:43:51:ad:45:3d:25:c5:3a:50:8f:47:
                    13:c3:77:9b:1e:a5:67:9b:77:4c:65:fc:dc:83:4a:
                    37:50:24:20:fd:08:ef:0f:ba:75:5e:ee:6b:85:6a:
                    9e:ec:2e:62:31:04:74:a7:15:26:c1:ef:5d:aa:0f:
                    f8:e1:1b:c8:09:53:3d:e1:2b:3c:06:c9:0a:e4:19:
                    6d:71:02:b6:fa:72:bc:b6:1f:e5:eb:16:02:e3:75:
                    8a:36:5f:84:da:7b:5a:dd:0e:4e:d9:3e:78:fe:0e:
                    5f:cf:0c:43:98:68:17:98:f9:46:a2:54:56:ac:80:
                    6c:46:71:88:5d:65:c9:c2:07:26:08:72:b1:ef:e3:
                    d2:de:e1:9f:6a:9c:1a:68:30:c4:da:f0:98:97:e0:
                    57:7f:64:9a:58:85:61:18:80:5c:10:5e:f4:67:8a:
                    29:52:13:08:bd:75:e5:bf:1f:e3:6f:06:be:30:c9:
                    b4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CB:6F:08:21:9E:CA:B8:6C:18:E8:B5:0F:2B:59:AC:89:10:6E:62
            X509v3 Authority Key Identifier:
                keyid:42:C8:5A:39:ED:0D:33:A7:61:B7:8E:8D:79:7B:DD:5D:47:6B:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e322e302f32342d3234203d3e20323635323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:15:10:d7:d7:bf:9b:2c:f8:fe:0b:1a:34:e0:b3:63:13:a2:
         bc:ab:4f:c8:61:6a:81:a9:65:f3:ed:98:2d:9d:ff:54:4c:0b:
         09:04:aa:de:39:31:2c:b1:10:8a:b0:0c:8e:08:cc:97:93:0f:
         da:39:d7:df:e6:f7:8d:64:d8:d5:6b:95:1f:63:37:94:a5:77:
         da:fb:f7:b2:e4:0f:68:f8:4c:9b:89:10:29:95:bf:56:2d:0a:
         3c:48:fd:75:1e:dc:84:bb:8d:36:73:b7:64:25:3d:2c:b2:8b:
         51:36:f8:a9:32:3f:de:cf:7d:fa:ad:19:c0:40:ff:75:ff:19:
         2c:fc:7a:b9:1e:85:41:cd:39:d1:52:7b:65:13:1b:92:61:40:
         24:33:45:0c:58:a7:a8:17:0e:ce:3d:a2:9a:11:6e:37:a0:e4:
         6a:ab:85:8a:71:ac:95:bf:05:d1:d2:88:24:c0:60:9c:d8:30:
         08:d5:e0:14:8f:8e:e7:cc:5a:23:d1:b6:4f:23:7a:a7:fe:83:
         2d:3b:1e:aa:6f:3c:d6:3d:9c:21:29:05:24:20:52:79:58:30:
         d8:dc:35:a8:af:bc:f9:de:2c:dd:e8:d3:67:07:05:bf:1f:73:
         40:80:9a:e0:9d:93:09:d3:d6:0a:96:3f:a3:5b:c4:76:9b:61:
         cc:f9:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:10 2024 by rpki-client on console.sobornost.net