Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/3133312e3130382e36302e302f32322d3234203d3e203631363634.roa
File:                     3133312e3130382e36302e302f32322d3234203d3e203631363634.roa (raw, json)
Hash identifier:          AZkKVUVi3WKHTMPoEYojLCqqCP1to6kDGL/XmUBFzO0=
Subject key identifier:   48:8B:27:F0:F9:A2:6E:31:11:20:CD:E5:D7:EF:3A:95:C9:B8:1F:62
Certificate issuer:       /CN=8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E
Certificate serial:       512CD765AB1BCB89EA32DC992EB4B2AE4B1487F6
Authority key identifier: 8D:C0:C4:33:D5:7D:2C:2F:89:C5:DD:89:88:9B:31:8E:AC:D8:AB:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/3133312e3130382e36302e302f32322d3234203d3e203631363634.roa
Signing time:             Thu 18 Jan 2024 20:15:32 +0000
ROA not before:           Thu 18 Jan 2024 20:10:32 +0000
ROA not after:            Thu 16 Jan 2025 20:15:32 +0000
asID:                     61664
IP address blocks:        131.108.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2c:d7:65:ab:1b:cb:89:ea:32:dc:99:2e:b4:b2:ae:4b:14:87:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E
        Validity
            Not Before: Jan 18 20:10:32 2024 GMT
            Not After : Jan 16 20:15:32 2025 GMT
        Subject: CN=488B27F0F9A26E311120CDE5D7EF3A95C9B81F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:d2:7a:b5:59:51:a8:f8:d7:10:6a:db:d1:
                    26:3a:66:b2:3f:54:0e:89:9b:f0:50:4c:2d:85:71:
                    6e:66:ba:92:b4:6c:e8:8d:b4:07:61:ea:90:4c:3e:
                    ba:fd:9d:5b:85:5f:50:15:6d:fa:f9:50:a6:e9:55:
                    54:11:b7:77:7b:b0:0e:ab:a2:5f:3c:2b:ad:77:68:
                    23:a1:22:ea:aa:0a:96:50:82:50:80:b7:45:3e:14:
                    5c:d5:e3:fc:23:72:5b:cc:a7:1d:d4:fa:77:f4:5b:
                    d8:65:11:45:ca:c7:67:1c:3b:7c:fe:94:9f:9f:f6:
                    55:48:c8:5f:f1:d5:dd:39:33:b1:9c:96:67:6c:79:
                    ca:6c:ae:a9:4e:f2:26:0e:47:82:e8:84:cd:2c:e9:
                    d4:55:31:f5:cc:09:58:7d:00:f7:f3:87:7f:54:e1:
                    b6:65:72:f0:63:9d:0e:f7:c0:5a:12:db:58:cb:23:
                    40:85:56:dd:ae:ab:2a:b2:74:1d:47:e6:e4:30:c3:
                    53:41:2f:d9:f9:4d:ca:c3:12:af:28:96:09:41:bb:
                    0f:f6:66:93:b4:b2:b3:e9:9e:b4:5f:8f:6b:57:ad:
                    88:2f:2f:1f:e0:02:4a:da:cc:73:0d:c0:40:40:11:
                    02:f6:9b:d5:8b:1c:a4:a1:ad:35:bc:87:82:b3:36:
                    5e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8B:27:F0:F9:A2:6E:31:11:20:CD:E5:D7:EF:3A:95:C9:B8:1F:62
            X509v3 Authority Key Identifier:
                keyid:8D:C0:C4:33:D5:7D:2C:2F:89:C5:DD:89:88:9B:31:8E:AC:D8:AB:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/3133312e3130382e36302e302f32322d3234203d3e203631363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:b5:64:14:68:64:29:ac:35:b6:52:74:fc:a9:e3:3b:0e:42:
         62:9c:62:77:a9:ba:b0:4a:a4:1c:9b:0e:4c:4a:85:9f:aa:c8:
         10:85:91:e3:26:93:9f:63:56:cd:3b:12:c2:39:3a:68:57:82:
         af:fa:a2:e2:94:18:ab:87:4e:a2:4d:85:b5:33:d7:0e:2e:0f:
         47:7f:4e:59:9d:0b:18:c8:49:fc:3b:e0:01:c7:e8:77:17:07:
         da:3c:1e:69:a2:d3:a3:06:6b:49:24:89:9f:cc:fb:a6:2c:6d:
         cb:f4:5d:d7:72:f6:ef:b7:86:d1:44:cf:aa:e3:66:9c:b1:ad:
         e8:96:83:ba:5c:70:08:d8:86:13:a1:25:1a:12:7a:79:f4:e0:
         2d:9d:fa:6d:6f:c7:12:34:69:f7:1b:c6:a0:ca:8f:35:a4:f6:
         2a:06:63:56:32:39:a6:05:e0:71:50:7a:d7:c7:1f:1c:aa:36:
         d6:e5:74:64:58:ed:78:40:99:0a:f7:e1:de:f7:c7:5a:e8:36:
         9e:1e:84:4d:fd:32:26:7b:b4:0b:8a:53:98:59:df:25:e6:1d:
         78:bd:4b:33:5e:8e:e2:80:62:0d:49:2d:4b:7b:e3:aa:aa:a8:
         5b:00:11:37:e6:f4:30:35:b1:fa:1a:38:35:ae:8e:ca:64:4c:
         9e:13:67:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org