Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          pfgEuXk05LFB6cmSbTsnN8vXjBVHoNT4vaAJkghjX1Q=
Subject key identifier:   FD:42:A9:5E:9E:F5:9B:AE:61:7F:FE:6B:C8:CE:58:AF:1A:61:61:02
Certificate issuer:       /CN=96E0B60592DF76BE603ED2B08A261F1D0F488BAE
Certificate serial:       3F04CB72E663B0E83A41D4FEF5A9653CF1DC76EC
Authority key identifier: 96:E0:B6:05:92:DF:76:BE:60:3E:D2:B0:8A:26:1F:1D:0F:48:8B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa
Signing time:             Wed 27 Dec 2023 15:15:12 +0000
ROA not before:           Wed 27 Dec 2023 15:10:12 +0000
ROA not after:            Wed 25 Dec 2024 15:15:12 +0000
asID:                     265919
IP address blocks:        131.196.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:04:cb:72:e6:63:b0:e8:3a:41:d4:fe:f5:a9:65:3c:f1:dc:76:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E0B60592DF76BE603ED2B08A261F1D0F488BAE
        Validity
            Not Before: Dec 27 15:10:12 2023 GMT
            Not After : Dec 25 15:15:12 2024 GMT
        Subject: CN=FD42A95E9EF59BAE617FFE6BC8CE58AF1A616102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:1e:1c:3f:62:98:c5:3a:b6:5a:56:66:a2:
                    97:96:c9:30:61:98:7b:f4:e0:d0:f1:3b:90:16:ea:
                    c6:37:ee:69:0f:67:14:43:c5:88:5e:84:35:2d:06:
                    c3:1d:16:b7:9e:da:5c:10:dd:4b:a2:db:a6:52:f4:
                    88:a1:58:8c:26:c2:91:38:0a:2c:77:e6:3a:c3:27:
                    de:7a:cc:32:88:2b:ea:b9:18:af:48:78:52:27:77:
                    5d:39:6b:98:c8:15:2b:92:fd:72:50:b2:ec:47:35:
                    8d:81:58:48:dc:b9:01:ef:3a:44:35:51:67:8c:6d:
                    5b:2c:23:00:c6:e2:7c:d6:4f:e4:33:6a:32:de:ed:
                    50:a6:a8:60:5b:db:03:22:5c:87:ce:b9:43:3f:b5:
                    3c:d3:23:bf:20:3c:f9:e0:b2:93:cc:62:3f:c9:c8:
                    5f:ce:92:53:4a:c9:b2:ad:dc:3b:18:76:7c:2e:5b:
                    a1:5f:f3:e9:7d:43:61:e9:f7:c6:f5:18:dd:cd:a9:
                    59:a2:46:02:4c:54:f2:dc:90:e0:12:66:86:b7:93:
                    b3:43:92:da:3d:44:12:80:86:f8:8d:1f:ba:77:11:
                    01:5e:70:33:19:1b:0e:10:a5:3b:30:45:6c:fb:ce:
                    11:96:57:9a:8e:71:37:05:e3:da:31:87:ab:f9:69:
                    b3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:42:A9:5E:9E:F5:9B:AE:61:7F:FE:6B:C8:CE:58:AF:1A:61:61:02
            X509v3 Authority Key Identifier:
                keyid:96:E0:B6:05:92:DF:76:BE:60:3E:D2:B0:8A:26:1F:1D:0F:48:8B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:f7:4d:c2:e3:3d:3a:e0:ab:18:02:59:68:6e:ff:f6:31:4a:
         04:7e:ed:11:3e:ce:d4:26:52:b0:e7:4c:c4:ae:9c:55:0f:c6:
         d4:f0:7a:2a:14:4b:ed:8e:12:84:01:c5:aa:4a:41:d2:39:e2:
         0d:9a:a3:86:e4:5d:dd:2e:49:3c:53:fd:60:51:57:1e:81:a3:
         31:e7:14:94:a5:5c:1a:66:66:7f:7b:02:c6:18:c0:7c:55:f4:
         3f:c4:9a:bf:4e:53:56:61:08:8b:e9:e2:60:13:3b:dc:f2:40:
         bc:ab:9f:3d:c8:c9:76:e4:14:af:fb:4d:e4:57:f3:fc:16:63:
         69:39:d5:12:63:c3:7c:82:9c:0a:9f:75:8d:34:70:f1:9e:d7:
         41:f4:cf:4c:a0:4e:99:00:d2:6f:2c:30:19:6b:ac:69:15:63:
         e4:7e:7a:06:52:ff:12:b1:21:ed:bf:99:4a:39:78:ad:f0:f1:
         57:78:4e:67:e1:d5:58:95:2a:a6:e5:12:96:c5:10:80:c3:cb:
         6a:83:02:42:cd:99:c2:63:1d:3d:63:21:cc:f8:2b:35:53:55:
         29:93:c5:c8:20:97:8d:17:28:5a:13:90:41:d6:ef:f9:23:a9:
         9a:30:b9:7b:eb:cb:62:0e:5e:86:f1:9f:10:c3:30:79:c9:76:
         98:2e:00:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org