Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138352e302f32342d3234203d3e20323635393330.roa
File:                     3133312e3139362e3138352e302f32342d3234203d3e20323635393330.roa (raw, json)
Hash identifier:          L01r3yCCsa+hY9asTxlyHaqK+nd5HbwLa+bUQN3tPDc=
Subject key identifier:   7A:83:AD:E5:92:CC:1A:E5:84:64:61:D7:30:1C:2E:55:FB:2B:5A:70
Certificate issuer:       /CN=3233E2EDC348AC978221BFAE80C08A1A69277683
Certificate serial:       40DB07EC3DE0D142B3869752C52520B1E9E40DCD
Authority key identifier: 32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138352e302f32342d3234203d3e20323635393330.roa
Signing time:             Mon 06 Mar 2023 19:07:18 +0000
ROA not before:           Mon 06 Mar 2023 19:02:18 +0000
ROA not after:            Mon 04 Mar 2024 19:07:18 +0000
asID:                     265930
IP address blocks:        131.196.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:db:07:ec:3d:e0:d1:42:b3:86:97:52:c5:25:20:b1:e9:e4:0d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3233E2EDC348AC978221BFAE80C08A1A69277683
        Validity
            Not Before: Mar  6 19:02:18 2023 GMT
            Not After : Mar  4 19:07:18 2024 GMT
        Subject: CN=7A83ADE592CC1AE5846461D7301C2E55FB2B5A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:a7:55:6d:0a:35:9e:d1:85:19:f6:29:05:
                    5e:39:e3:35:fc:c6:f2:e0:7b:2f:5a:e9:f0:10:41:
                    30:dc:53:d2:66:e0:dc:46:77:37:33:53:5b:e1:08:
                    cc:11:5a:65:cf:1a:df:95:97:92:79:03:c7:88:2f:
                    64:54:57:06:1f:a8:25:30:fb:9f:04:fa:df:42:98:
                    6b:40:52:47:ba:98:49:18:98:40:fc:72:76:98:e6:
                    5b:cd:47:78:20:04:b2:64:ad:71:e8:9e:64:e9:1e:
                    b9:22:c1:80:46:76:42:e2:b8:3c:c3:6a:b3:b9:97:
                    66:d3:1f:88:0f:71:99:18:be:ad:3e:16:1d:2d:c9:
                    e4:75:0d:86:c4:6e:71:e7:fe:db:25:04:06:86:7c:
                    05:00:39:e1:cc:14:6b:7e:eb:62:64:34:54:65:ed:
                    8e:92:25:43:d3:9b:37:29:d8:e3:5f:eb:13:7d:f8:
                    78:dd:fe:57:fa:eb:9e:1b:4f:22:10:38:c6:a6:e8:
                    ed:47:35:2e:86:c3:9d:7d:37:92:b0:9a:c1:62:2c:
                    f5:9e:7a:13:a9:1a:78:8a:e9:7f:a4:51:b9:d2:ac:
                    a9:1a:99:d2:3d:3a:1c:2c:07:d9:3a:51:05:04:63:
                    b5:29:34:2d:dc:da:73:d9:24:11:d9:6f:33:9a:01:
                    f1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:83:AD:E5:92:CC:1A:E5:84:64:61:D7:30:1C:2E:55:FB:2B:5A:70
            X509v3 Authority Key Identifier:
                keyid:32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3233E2EDC348AC978221BFAE80C08A1A69277683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138352e302f32342d3234203d3e20323635393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:b3:df:56:3a:e9:f3:ee:17:ce:43:5a:4a:9c:44:cd:4d:42:
         f2:3d:fa:fb:de:64:23:f4:c7:fb:b7:9d:ab:aa:97:5d:98:33:
         19:50:a0:4f:cf:b1:c4:b9:1d:90:e4:d2:94:c3:20:d5:f1:ea:
         4e:72:9b:80:ca:4b:23:75:f3:16:70:59:25:73:a5:8b:99:7e:
         52:8c:a0:6b:61:13:d2:ab:57:84:d1:da:1e:bc:c9:df:dd:b7:
         f8:1c:5a:85:fd:40:73:84:9d:a1:24:ce:e8:60:e0:b4:27:22:
         61:1f:ce:58:3a:a4:2e:7c:19:4a:c0:b6:cb:9e:13:43:7f:a6:
         31:69:c6:e5:29:16:45:4c:e8:3e:96:f7:02:83:51:ce:95:d3:
         d5:b7:e1:3d:6b:81:cb:99:2c:ac:c0:52:76:cc:6c:2e:ab:f5:
         c3:2e:c9:d9:0f:37:66:36:66:4a:3c:7e:a1:67:f4:6a:82:93:
         dd:e2:1c:29:8f:b4:aa:7c:26:62:df:d2:5f:5f:40:ce:4d:9f:
         32:ca:bb:df:01:bf:f8:c0:5e:a9:76:f4:f8:fa:ad:32:77:4a:
         75:2b:15:85:5d:48:ab:0f:79:e8:50:3c:75:d3:cd:42:bf:99:
         a5:3b:ae:77:7a:d4:d7:a1:d2:67:25:33:69:d6:b0:f3:9b:99:
         ab:13:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org