Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136352e302f32342d3234203d3e203631363738.roa
File:                     3133312e3130382e3136352e302f32342d3234203d3e203631363738.roa (raw, json)
Hash identifier:          UhWjArLObk6b8bvxyKaTt4oGFE58SZxkpzwFtmDrOeQ=
Subject key identifier:   49:8D:A8:4A:FD:13:7A:72:28:60:D4:7F:FB:AF:FC:71:17:17:12:8F
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       767F1378E9BA0BB73ADE14C76C0B8F68C7D9A6F5
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136352e302f32342d3234203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:15 +0000
ROA not before:           Wed 03 Apr 2024 21:41:15 +0000
ROA not after:            Wed 02 Apr 2025 21:46:15 +0000
asID:                     61678
IP address blocks:        131.108.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:7f:13:78:e9:ba:0b:b7:3a:de:14:c7:6c:0b:8f:68:c7:d9:a6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:15 2024 GMT
            Not After : Apr  2 21:46:15 2025 GMT
        Subject: CN=498DA84AFD137A722860D47FFBAFFC711717128F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:67:9b:b6:f8:27:29:20:09:88:87:ce:6b:
                    a2:f7:6f:25:5a:a3:28:58:e4:8a:82:28:12:88:56:
                    5d:49:20:54:fa:cf:97:e0:50:0b:65:19:cd:2c:84:
                    77:89:34:ba:75:14:af:96:1c:cd:79:02:99:48:7d:
                    3a:d1:28:23:2f:b6:65:f2:a3:32:58:09:e8:61:93:
                    e5:a8:d6:b3:e4:b7:17:ee:51:b3:06:6b:f7:b3:6f:
                    26:06:09:0b:07:71:00:29:9a:37:42:cc:36:33:a5:
                    c5:20:34:ca:ce:e0:d8:e2:25:58:9c:d5:7c:e0:3d:
                    0b:e8:c8:36:76:15:2c:3a:d5:6e:7e:99:c9:db:78:
                    70:25:e9:0b:0f:26:2a:1b:34:6e:fc:a3:83:88:97:
                    1f:97:5e:aa:a3:00:e0:e3:3b:0a:6f:e3:46:d2:31:
                    4f:51:d0:80:77:3c:40:49:f5:4e:a4:68:89:56:e2:
                    42:42:7a:f5:4f:5f:c8:b4:81:d0:47:ad:46:95:3b:
                    c5:7d:42:c0:35:b4:37:02:3d:71:bb:46:77:6f:3e:
                    22:e4:70:d9:7d:48:2f:91:91:5e:0d:27:e6:13:1b:
                    15:78:0f:e1:3e:a0:e0:e7:d4:7f:f0:f7:fb:59:75:
                    13:3d:75:5b:ca:8f:1b:75:ca:6e:65:bf:d4:aa:d0:
                    e7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8D:A8:4A:FD:13:7A:72:28:60:D4:7F:FB:AF:FC:71:17:17:12:8F
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136352e302f32342d3234203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:96:a3:ff:7b:d7:b5:fd:0a:64:e4:4b:23:67:01:ef:bb:50:
         86:24:1c:0f:aa:d6:c8:95:f7:1a:c3:db:5b:1c:de:e8:47:53:
         13:17:88:12:4a:47:7d:3b:3f:17:85:b7:4a:a1:f9:e1:3b:39:
         25:b9:95:95:23:d9:a4:91:5c:22:69:b6:11:94:aa:73:a6:cd:
         31:fa:8a:1b:bb:23:59:d5:c7:27:5b:db:6a:8c:ac:0a:67:ca:
         39:ed:fa:f5:20:3d:c3:9d:dd:4c:68:ac:a9:39:4f:4f:6d:0a:
         d7:bf:cc:2e:69:35:60:1a:8f:8c:3b:8e:54:d6:f1:f9:af:81:
         22:6c:3d:cb:db:c5:56:c5:45:79:3e:d3:ff:0a:78:e9:f6:54:
         7c:4b:99:7f:d5:fb:88:bb:1a:92:93:be:15:ea:08:01:c6:78:
         1f:3f:9f:91:44:b4:80:1a:b0:1a:5f:d1:ff:6d:65:e9:ed:dd:
         04:a9:ac:1b:98:78:66:54:95:b4:64:43:89:04:51:b6:dd:9f:
         3b:38:66:e0:8a:27:c5:c7:0d:b4:68:c6:41:4b:59:49:a3:d3:
         b8:8f:c5:30:81:1c:2a:e5:d8:41:8e:cc:15:5d:ca:ec:11:1b:
         c4:bc:91:c8:e7:13:a1:7f:17:15:14:aa:38:78:7b:d6:54:d1:
         aa:16:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:06 2024 by rpki-client on console-fra.rpki-client.org