Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32342d3234203d3e20323635393238.roa
File:                     3133312e3139362e3133322e302f32342d3234203d3e20323635393238.roa (raw, json)
Hash identifier:          1XIgyXDdfNtPrzTVk+/uCUbDrXu/mLHANM1n1gRT4k0=
Subject key identifier:   9E:14:73:CD:7B:47:78:DF:35:E3:35:FE:F0:DC:51:18:35:ED:3A:E9
Certificate issuer:       /CN=5265AD242CC40D9E4E242C25E31152E30289153C
Certificate serial:       7ACA606D5E7F67645FA046F219DEB7F6BBA4E6AF
Authority key identifier: 52:65:AD:24:2C:C4:0D:9E:4E:24:2C:25:E3:11:52:E3:02:89:15:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5265AD242CC40D9E4E242C25E31152E30289153C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32342d3234203d3e20323635393238.roa
Signing time:             Sat 20 Aug 2022 00:46:21 +0000
ROA not before:           Sat 20 Aug 2022 00:41:21 +0000
ROA not after:            Sat 19 Aug 2023 00:46:21 +0000
asID:                     265928
IP address blocks:        131.196.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ca:60:6d:5e:7f:67:64:5f:a0:46:f2:19:de:b7:f6:bb:a4:e6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5265AD242CC40D9E4E242C25E31152E30289153C
        Validity
            Not Before: Aug 20 00:41:21 2022 GMT
            Not After : Aug 19 00:46:21 2023 GMT
        Subject: CN=9E1473CD7B4778DF35E335FEF0DC511835ED3AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:73:ce:e0:10:bc:3a:55:1a:b1:00:80:e0:fc:
                    54:ef:17:ca:52:5a:3d:d0:f3:be:d2:e8:49:16:5d:
                    0c:09:9d:b8:e5:0b:01:36:a4:0d:ca:91:6d:45:d1:
                    a6:c7:3f:da:70:2e:9c:89:ca:da:96:2d:fb:ba:f5:
                    99:33:b8:e4:83:f4:c5:39:b3:0a:29:bf:59:ec:af:
                    20:85:6c:83:33:c8:92:e3:bf:53:d1:8b:6a:93:e9:
                    e2:3c:b2:6a:1c:45:55:54:43:4f:9c:dc:cc:d4:b4:
                    62:c2:f4:62:47:4b:0f:8d:f1:de:90:18:e2:91:83:
                    65:25:f0:9f:bb:57:06:5a:d1:12:ce:21:dd:99:9a:
                    20:70:8c:3d:3b:1c:a1:6e:57:60:68:79:c2:35:9c:
                    6b:e2:a5:5e:42:0f:7c:2c:8c:4e:ce:78:32:1f:6c:
                    a6:0b:f8:28:6d:2d:d1:52:05:ef:b9:b1:eb:df:2b:
                    32:f7:e3:89:79:62:10:9a:78:ea:cd:13:51:e9:f5:
                    4a:05:c5:b4:50:0b:66:a7:21:1d:08:c4:39:44:2e:
                    10:75:a0:66:b7:14:ea:c6:3e:99:89:a2:22:3b:2f:
                    fa:48:85:fd:14:7c:7f:f8:12:f5:f5:52:20:a3:3e:
                    ba:79:ba:da:08:72:e1:9c:ea:40:da:34:d9:4f:1b:
                    5c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:14:73:CD:7B:47:78:DF:35:E3:35:FE:F0:DC:51:18:35:ED:3A:E9
            X509v3 Authority Key Identifier:
                keyid:52:65:AD:24:2C:C4:0D:9E:4E:24:2C:25:E3:11:52:E3:02:89:15:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/5265AD242CC40D9E4E242C25E31152E30289153C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5265AD242CC40D9E4E242C25E31152E30289153C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32342d3234203d3e20323635393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d6:8e:49:5c:6a:b7:1d:bf:0b:37:4c:dc:41:1c:11:3c:e3:
         15:23:d6:bc:b6:ec:0c:74:8e:89:98:30:a3:c1:20:c8:de:28:
         36:4f:4d:ad:e7:fe:7d:5b:a3:91:0d:97:2a:ad:ed:60:33:26:
         9b:a5:c9:94:4d:b4:60:9d:38:32:4b:53:e8:68:03:c0:7e:13:
         cb:c9:93:5e:9b:a9:0e:aa:22:84:34:ef:1f:2b:67:3f:22:45:
         b4:c0:e6:e7:b1:be:aa:2b:31:96:93:19:7e:c6:a7:fd:4c:14:
         30:81:02:7f:d0:cd:5d:b4:b9:60:a9:58:bd:37:ca:c3:f2:9d:
         79:78:8e:7f:46:0f:ea:ea:f7:f9:56:19:69:b0:10:0e:a1:cc:
         d3:56:57:d9:39:c9:8f:6e:4d:b6:bb:a3:b2:ec:74:e8:d1:ff:
         e8:ac:4f:ae:40:e7:dc:c9:8c:7a:ec:bb:36:8a:73:4c:4e:0b:
         ad:f8:62:9b:f2:d1:2f:d3:62:6b:42:8f:1d:40:42:2d:43:fe:
         54:84:bf:e5:a8:bf:cc:a0:7b:3e:be:11:e6:32:e4:ff:e0:47:
         2f:d1:66:f1:42:b8:e8:e4:ab:d0:ca:20:76:ce:5a:9a:65:3f:
         5a:67:bc:6e:9d:77:df:92:22:ef:68:0a:b4:f2:1d:ac:6e:6c:
         e0:1c:3e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org