Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136372e302f32342d3234203d3e203631363738.roa
File:                     3133312e3130382e3136372e302f32342d3234203d3e203631363738.roa (raw, json)
Hash identifier:          a1fFhrdAqeVoORWlEh0GBUYsrqXagb7OJLjqRxNawGI=
Subject key identifier:   DB:57:11:05:E7:90:89:F1:6A:8D:A8:09:1B:67:F8:38:10:E7:33:2E
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       1AD5273A05FBE8139B8DEDC34315084BF31BE872
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136372e302f32342d3234203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:15 +0000
ROA not before:           Wed 03 Apr 2024 21:41:15 +0000
ROA not after:            Wed 02 Apr 2025 21:46:15 +0000
asID:                     61678
IP address blocks:        131.108.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d5:27:3a:05:fb:e8:13:9b:8d:ed:c3:43:15:08:4b:f3:1b:e8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:15 2024 GMT
            Not After : Apr  2 21:46:15 2025 GMT
        Subject: CN=DB571105E79089F16A8DA8091B67F83810E7332E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:bc:a5:a0:96:ff:f6:a7:f3:7e:92:15:a1:
                    30:f0:64:13:a8:a8:a6:1a:eb:db:53:89:cd:f8:0d:
                    52:24:60:6d:b9:69:31:00:7d:7e:16:0b:c9:f2:8e:
                    61:68:3a:3b:55:88:47:9d:58:ca:73:51:20:8f:31:
                    7b:06:97:5d:46:fe:9e:f2:25:5a:e7:24:46:80:ce:
                    31:91:8d:3e:a4:89:34:78:fb:e8:e3:5e:99:5d:07:
                    14:dc:44:2c:b8:59:2c:8c:a4:eb:6e:ed:7a:36:41:
                    1a:df:e6:26:ea:32:e3:c4:0e:50:e3:66:a2:53:67:
                    97:38:4e:3f:58:e6:61:b7:8e:62:25:18:ad:07:f4:
                    08:1b:6f:5e:19:0e:b4:2a:7f:9b:eb:43:53:a6:db:
                    b0:c1:29:6a:51:e5:a7:a2:a1:1f:f6:1b:6e:a5:a4:
                    c5:12:93:38:42:5f:13:1f:98:19:33:d0:ab:7c:9b:
                    ab:5f:e8:ab:93:7f:fa:b6:2f:6a:c8:cb:f2:29:5d:
                    e3:c3:73:65:1b:a0:e7:02:10:06:a6:26:4e:45:fb:
                    74:d2:01:ad:5c:8b:6f:08:a8:64:a4:8f:97:f5:78:
                    5f:1d:58:bc:20:c4:7e:2c:ac:d8:78:61:de:c0:55:
                    c0:cf:69:69:51:71:7a:0c:c5:3a:61:06:48:d8:c0:
                    83:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:57:11:05:E7:90:89:F1:6A:8D:A8:09:1B:67:F8:38:10:E7:33:2E
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136372e302f32342d3234203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:d6:f7:a9:6a:b3:69:7e:24:d0:81:44:60:51:6a:29:c2:75:
         b4:45:75:8a:95:83:c0:37:74:87:d6:a0:20:21:f5:76:82:7e:
         02:7f:2e:47:cf:9f:41:4b:1b:87:c3:0c:f8:49:9b:e5:07:df:
         9d:63:fa:91:16:63:51:7e:9e:0d:a7:37:5e:fb:02:ce:0b:5a:
         cf:f8:b6:37:fd:3b:89:8b:9f:c5:cd:49:ea:a4:6b:37:5b:ac:
         cf:b4:1e:af:b2:cc:04:9c:6f:6f:03:99:ed:5e:52:b3:72:05:
         24:40:92:7d:a0:48:14:62:d1:cd:e0:a9:4f:14:19:09:6a:29:
         be:f3:b8:e6:33:0f:aa:05:74:f1:6b:85:29:52:15:6f:8d:a3:
         eb:5d:40:e0:ed:64:01:48:92:c2:0f:ff:37:15:5c:30:4d:a1:
         e4:81:ea:b4:a4:1a:b7:60:68:75:a5:0b:de:4e:2f:67:ba:15:
         fa:de:f4:3a:7e:08:74:41:70:23:b0:2c:8f:27:f8:f4:5d:d1:
         8f:8d:03:86:a6:22:96:e5:41:19:8b:5d:08:a2:b3:0f:4f:c0:
         45:aa:37:6e:eb:c8:af:53:01:6b:de:fd:86:67:67:1b:4e:af:
         67:b6:dc:68:ce:cd:7a:cd:ab:58:dc:a1:92:82:8e:c1:8d:2a:
         6b:c2:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org