Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133312e3130302e36302e302f32322d3234203d3e20323632333534.roa
File:                     3133312e3130302e36302e302f32322d3234203d3e20323632333534.roa (raw, json)
Hash identifier:          MnBhc8wCNT13astnU6PgZImIp8XNJo9+S8XbHdnvkxg=
Subject key identifier:   92:03:00:00:90:4A:22:1C:8D:F6:C0:65:52:15:90:76:99:F3:CF:6D
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       2EE131AE22520BDD01455ACEAA7F016BE9DCDE76
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133312e3130302e36302e302f32322d3234203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:57:24 +0000
ROA not before:           Wed 06 Mar 2024 14:52:24 +0000
ROA not after:            Wed 05 Mar 2025 14:57:24 +0000
asID:                     262354
IP address blocks:        131.100.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e1:31:ae:22:52:0b:dd:01:45:5a:ce:aa:7f:01:6b:e9:dc:de:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:52:24 2024 GMT
            Not After : Mar  5 14:57:24 2025 GMT
        Subject: CN=92030000904A221C8DF6C0655215907699F3CF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:e0:d0:9e:90:ab:0e:51:ce:29:c7:0d:f1:
                    e4:b3:99:23:18:31:32:ac:f6:56:1e:c3:d6:a6:8c:
                    86:ad:b0:6f:7a:6c:6a:b0:f5:97:d6:65:0b:69:a1:
                    c1:48:b2:e0:97:aa:b7:ed:4c:b2:89:5f:bc:7c:90:
                    f7:63:e3:11:f3:26:42:64:b2:9f:6e:97:43:9e:fa:
                    b1:4e:c8:0e:94:06:35:15:8d:3b:a7:8b:0d:ee:28:
                    00:0a:7d:f8:a8:06:e8:6b:8a:a0:31:70:a9:43:a3:
                    90:fd:e1:62:ee:02:10:35:2a:62:58:03:c9:e1:12:
                    1f:51:5d:74:64:99:88:0b:d3:d5:aa:92:32:27:af:
                    79:7c:24:8a:1e:19:98:d2:4f:cf:0c:45:dc:b1:7b:
                    b5:5f:fb:a0:38:26:13:3b:f9:dc:8c:71:4b:02:cd:
                    6a:e9:67:cd:f1:0d:41:dd:ce:de:3f:af:d3:cb:e9:
                    e5:60:af:ad:f7:31:70:1a:c7:ee:74:bf:e6:73:a0:
                    af:b2:17:fc:f7:9d:91:2d:0c:fd:db:65:ed:38:3f:
                    bc:c4:e7:62:53:52:15:46:34:75:7f:b2:38:ee:a8:
                    eb:59:2c:ea:59:fa:07:e5:be:bd:b8:b5:6d:bb:a3:
                    f7:77:c9:a5:73:10:a3:0d:45:4b:ee:6a:b9:34:a4:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:03:00:00:90:4A:22:1C:8D:F6:C0:65:52:15:90:76:99:F3:CF:6D
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133312e3130302e36302e302f32322d3234203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:08:0c:0a:95:b0:a7:1b:39:67:2e:dd:3b:55:60:0c:65:6c:
         e5:a6:12:f1:09:4c:09:35:b8:a8:03:60:ba:e6:8e:43:22:ba:
         4e:3d:9a:3a:7c:86:95:2f:66:33:b0:89:ed:95:8c:36:3d:0f:
         c8:00:ce:5a:e7:a3:c1:ec:f2:a7:42:ff:40:d1:1b:d4:06:6d:
         4b:1c:a1:94:3a:13:06:90:35:3d:17:5f:36:59:22:50:c8:83:
         57:dc:da:b7:32:ef:5c:af:0a:ff:84:13:25:e3:d1:c6:f2:9e:
         1e:6f:3a:b8:98:5a:4b:be:c4:26:e4:94:5a:52:d4:04:33:af:
         4f:84:00:5b:21:e6:88:34:bc:bd:ea:f3:31:e1:b2:ad:98:f7:
         06:f2:c0:5a:85:71:ab:87:98:1f:86:9a:26:d4:6c:44:fb:7c:
         7a:06:88:ab:1c:26:c8:2c:37:09:49:87:80:6e:75:72:26:b0:
         a5:a5:53:54:98:82:eb:ea:0e:af:89:0f:4d:34:fa:fe:b7:19:
         da:a5:05:4c:d5:b6:67:5c:ef:f6:99:ae:72:84:cf:b5:45:ab:
         82:21:5c:67:1c:ac:9f:9a:16:36:36:a8:c4:52:39:30:5f:93:
         99:28:3c:c5:0c:95:05:fc:0f:ec:97:a2:fb:45:23:a2:34:b5:
         6f:4b:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org