Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa
File:                     3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier:          u2AQMdepYBPym6cyLekmZLhZWpBH1lOT/D5kjbMpX1s=
Subject key identifier:   14:BF:30:15:94:3F:FA:3E:F7:DB:8B:EA:B7:AC:9F:7F:52:F4:CA:2B
Certificate issuer:       /CN=09D12D7771C4466942E3DB3E232FA2C569672197
Certificate serial:       1DE4D7DD0A68A8E99989512CABC8FD2CA27F8FC8
Authority key identifier: 09:D1:2D:77:71:C4:46:69:42:E3:DB:3E:23:2F:A2:C5:69:67:21:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09D12D7771C4466942E3DB3E232FA2C569672197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa
Signing time:             Thu 01 Feb 2024 17:21:54 +0000
ROA not before:           Thu 01 Feb 2024 17:16:54 +0000
ROA not after:            Thu 30 Jan 2025 17:21:54 +0000
asID:                     266178
IP address blocks:        192.144.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e4:d7:dd:0a:68:a8:e9:99:89:51:2c:ab:c8:fd:2c:a2:7f:8f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09D12D7771C4466942E3DB3E232FA2C569672197
        Validity
            Not Before: Feb  1 17:16:54 2024 GMT
            Not After : Jan 30 17:21:54 2025 GMT
        Subject: CN=14BF3015943FFA3EF7DB8BEAB7AC9F7F52F4CA2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:5a:20:80:12:df:47:b7:54:d2:f5:73:97:
                    a3:a7:e7:c3:ad:8f:7b:2e:ce:51:70:32:70:13:cf:
                    01:31:ff:d0:48:72:19:75:58:00:50:88:d5:7c:63:
                    93:29:45:3a:90:d6:d8:77:23:58:a9:53:88:e7:b5:
                    ed:5b:e6:2c:21:57:ba:d5:1c:e6:33:17:90:3b:10:
                    ea:34:16:39:fd:bf:bc:99:4d:c0:98:57:d1:87:50:
                    ef:50:99:0b:93:8d:e0:47:f0:08:c6:a3:61:79:ea:
                    07:a6:77:da:c2:9f:df:d5:61:72:b5:f5:26:57:d5:
                    f7:80:35:eb:e9:ee:93:5e:4e:dd:9d:74:c8:0d:50:
                    a5:3c:41:76:7f:28:9a:b5:04:97:30:51:7a:56:ac:
                    78:35:ed:f6:03:ed:d4:16:88:33:7c:07:8f:20:05:
                    ac:a9:35:d9:30:81:f4:9a:1c:2c:01:a3:e3:13:4a:
                    47:b3:23:e6:5a:43:c6:29:21:3f:c9:25:0f:85:5e:
                    69:b3:b5:3b:08:bf:6f:80:f7:e9:c0:e0:b4:a6:ef:
                    48:c4:f5:80:d5:ba:b8:7d:9a:3e:60:ee:bf:de:77:
                    85:a1:05:82:96:56:4a:eb:a3:3f:1c:05:b4:b3:b7:
                    14:21:a3:99:33:e1:cc:ae:e8:44:4e:4d:9f:9d:eb:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BF:30:15:94:3F:FA:3E:F7:DB:8B:EA:B7:AC:9F:7F:52:F4:CA:2B
            X509v3 Authority Key Identifier:
                keyid:09:D1:2D:77:71:C4:46:69:42:E3:DB:3E:23:2F:A2:C5:69:67:21:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/09D12D7771C4466942E3DB3E232FA2C569672197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09D12D7771C4466942E3DB3E232FA2C569672197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:b0:92:77:02:19:88:70:93:e1:ff:43:98:ce:dc:cd:29:06:
         28:a8:cd:49:9e:b0:09:8c:47:92:18:b4:ff:33:61:ad:12:7b:
         52:41:f5:38:2a:e7:8d:49:40:b9:43:2a:44:d7:96:7b:ff:d0:
         af:75:7a:df:be:68:a4:f6:db:0d:1e:d8:99:91:d4:7b:ca:2e:
         ef:c6:87:c3:a7:0f:da:a6:48:11:ff:c2:c3:08:09:ff:47:5f:
         7f:a4:1b:c8:0b:f3:96:c4:82:2a:90:72:84:f2:ba:d6:0b:e0:
         33:a2:be:a5:9e:cd:18:36:be:01:1d:44:bc:7e:5f:f0:c2:b2:
         db:43:91:e0:da:c6:bb:3f:df:1c:3a:3d:02:32:ea:72:7e:14:
         15:1c:f7:b8:31:35:c7:f2:e3:84:ed:59:15:7e:f3:23:b7:86:
         21:e0:dc:d1:7d:8c:b4:6b:1d:2d:23:11:fd:69:17:1f:da:a7:
         6a:c8:93:ce:4b:2e:e2:31:12:ff:31:e6:04:db:f9:a1:db:a0:
         9c:4c:ff:21:5f:8b:80:46:55:ad:17:0e:61:ff:f3:49:a0:bb:
         35:62:c5:f5:45:f3:0e:3b:5f:d7:72:8a:80:2c:0b:3e:ca:0e:
         bd:0b:78:49:ec:2f:a2:11:4c:7c:4c:f2:2b:53:01:b9:82:a2:
         20:b8:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org