Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133312e3130382e3131362e302f32332d3233203d3e20323634333533.roa
File:                     3133312e3130382e3131362e302f32332d3233203d3e20323634333533.roa (raw, json)
Hash identifier:          gvSLwMATnmW3fUduljLub28Yn7778Kf/J5H34ukYMtE=
Subject key identifier:   36:3A:FF:31:C1:7B:BF:C8:D1:BD:C9:9F:5E:7C:1E:DD:99:69:1F:3B
Certificate issuer:       /CN=8D73F533955BE76ECBC1190057DAB05442B4A50E
Certificate serial:       6CAF453645F22ECED1B1CFCF12889327CD3308B4
Authority key identifier: 8D:73:F5:33:95:5B:E7:6E:CB:C1:19:00:57:DA:B0:54:42:B4:A5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D73F533955BE76ECBC1190057DAB05442B4A50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133312e3130382e3131362e302f32332d3233203d3e20323634333533.roa
Signing time:             Sun 30 Oct 2022 13:00:07 +0000
ROA not before:           Sun 30 Oct 2022 12:55:07 +0000
ROA not after:            Sun 29 Oct 2023 13:00:07 +0000
asID:                     264353
IP address blocks:        131.108.116.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:af:45:36:45:f2:2e:ce:d1:b1:cf:cf:12:88:93:27:cd:33:08:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D73F533955BE76ECBC1190057DAB05442B4A50E
        Validity
            Not Before: Oct 30 12:55:07 2022 GMT
            Not After : Oct 29 13:00:07 2023 GMT
        Subject: CN=363AFF31C17BBFC8D1BDC99F5E7C1EDD99691F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:b5:ba:76:0e:e2:0f:9d:f2:00:4b:a2:74:
                    71:fb:6c:71:75:69:06:dd:d6:6f:b1:46:04:98:b8:
                    d5:19:c6:bf:17:1c:5e:2f:ae:30:ca:a3:20:c4:79:
                    01:a1:e7:f8:79:5f:c9:ab:8e:16:41:c1:e0:66:58:
                    db:a7:86:55:83:b2:dc:0f:13:8a:80:80:b0:00:2e:
                    7e:75:10:cf:c8:ec:68:34:9c:b3:b7:9f:ef:65:a6:
                    a9:0e:b7:d4:55:59:8e:2a:25:cd:9d:bc:7a:27:08:
                    45:f9:53:1e:f1:31:3f:37:56:6f:a9:47:f5:09:ac:
                    46:5c:37:de:2f:e1:f2:7c:76:b8:35:ad:b9:f8:03:
                    7b:3a:89:d0:f2:82:14:e1:ad:56:ae:22:6f:f6:0c:
                    5d:03:89:04:ef:8a:62:40:db:06:20:fc:5f:84:55:
                    42:8a:3a:51:f1:69:74:42:22:19:9b:ad:35:c7:22:
                    92:ef:a8:02:86:74:d3:30:bd:e2:c5:38:cb:81:84:
                    3a:2a:81:d9:d5:91:a1:eb:16:42:20:96:5b:9c:bc:
                    9c:a6:87:ca:a5:56:a0:a3:01:96:26:e8:6a:54:9a:
                    7d:46:6a:48:10:07:14:55:90:bb:d8:75:4a:ba:b1:
                    54:cc:3a:53:c4:24:d5:87:92:4e:9f:b4:dd:03:8b:
                    df:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3A:FF:31:C1:7B:BF:C8:D1:BD:C9:9F:5E:7C:1E:DD:99:69:1F:3B
            X509v3 Authority Key Identifier:
                keyid:8D:73:F5:33:95:5B:E7:6E:CB:C1:19:00:57:DA:B0:54:42:B4:A5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/8D73F533955BE76ECBC1190057DAB05442B4A50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D73F533955BE76ECBC1190057DAB05442B4A50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133312e3130382e3131362e302f32332d3233203d3e20323634333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:22:cd:67:a9:7f:b9:48:89:02:e4:e8:bf:03:5f:bc:ca:03:
         cf:19:ce:32:09:ed:db:2f:c8:be:40:0a:7d:86:e0:83:41:b1:
         0f:fd:54:be:c5:5a:78:54:c1:fa:75:8c:54:eb:36:d7:25:27:
         03:8e:77:c5:b2:61:e1:b3:c9:73:04:9a:5f:9a:db:92:3b:bf:
         da:40:3b:87:a0:23:df:22:1e:b5:21:84:7a:90:44:90:a3:31:
         44:a1:09:3c:c3:3d:a0:b8:c9:ae:0b:9a:88:c5:2f:72:4d:20:
         fb:dc:ea:6b:fb:e4:e7:b0:6f:53:36:a6:a5:61:e9:c1:4e:fa:
         33:9b:16:ee:51:d8:43:5a:86:80:63:b3:8c:df:5a:33:d2:c0:
         fa:e7:cc:43:0b:38:ab:82:b6:89:4c:94:b4:a3:a8:05:c8:00:
         98:1d:b7:4f:c2:c7:31:d0:dc:5c:21:92:9b:9a:3f:44:b8:4a:
         a9:6c:bc:90:c1:36:bd:af:65:2f:97:06:cc:34:80:c2:33:d0:
         26:58:ab:4b:85:e3:2f:78:1f:26:f5:5c:60:de:99:30:90:84:
         b3:52:2c:90:3b:85:7d:39:14:f2:bd:e4:69:e7:c5:72:9c:78:
         ae:6b:49:f8:0c:bb:62:d0:16:8b:80:f6:de:5a:7a:08:f0:75:
         b7:f2:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org