Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133312e3130382e34342e302f32322d3234203d3e203631363630.roa
File:                     3133312e3130382e34342e302f32322d3234203d3e203631363630.roa (raw, json)
Hash identifier:          AwN6KfOAI3Hlgd0dMo+I5Gx66hhPi++diAa5/Y1agL0=
Subject key identifier:   D1:14:DC:0D:84:53:B8:2E:B7:C7:B2:6D:C0:37:CE:B2:2C:62:34:35
Certificate issuer:       /CN=0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC
Certificate serial:       387B356FCE6D969744004A6AE52055F212344F57
Authority key identifier: 0A:D8:AD:7E:0E:AB:2B:26:A5:84:20:EA:22:0F:FC:81:3E:E6:A7:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133312e3130382e34342e302f32322d3234203d3e203631363630.roa
Signing time:             Tue 22 Aug 2023 15:25:38 +0000
ROA not before:           Tue 22 Aug 2023 15:20:38 +0000
ROA not after:            Tue 20 Aug 2024 15:25:38 +0000
asID:                     61660
IP address blocks:        131.108.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7b:35:6f:ce:6d:96:97:44:00:4a:6a:e5:20:55:f2:12:34:4f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC
        Validity
            Not Before: Aug 22 15:20:38 2023 GMT
            Not After : Aug 20 15:25:38 2024 GMT
        Subject: CN=D114DC0D8453B82EB7C7B26DC037CEB22C623435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:1f:91:7a:77:7b:17:af:b8:0f:18:8b:00:
                    0c:dd:7d:25:00:d1:6d:2c:22:ed:9d:0a:c7:d9:79:
                    95:da:60:99:2f:f6:54:15:aa:d5:4c:bf:b5:77:c3:
                    34:d3:51:90:ba:b6:b0:a8:ee:3b:9d:b4:f9:93:1c:
                    09:28:ea:6b:27:82:61:39:bd:4c:93:e0:c4:f9:ea:
                    d3:5b:1c:52:a4:98:68:d1:7e:86:c1:2c:92:ae:83:
                    aa:86:25:ee:51:d8:9b:96:de:ac:4e:e0:d8:e7:ed:
                    49:08:e3:cf:39:07:ee:07:cb:7d:31:4c:2c:35:f3:
                    14:db:a3:8d:22:56:8f:3d:b0:e3:5f:d6:e8:a8:a5:
                    01:2a:c0:bf:43:05:31:10:0a:24:ec:68:8b:92:13:
                    31:b9:61:92:59:7f:63:39:f6:1c:18:66:e4:b8:81:
                    e9:dd:e5:ad:1c:e0:c8:c7:0f:b3:f1:dd:da:2e:61:
                    8d:3b:ad:17:13:7f:a0:71:10:ac:2a:ab:d8:c5:99:
                    b2:5f:58:43:df:73:d3:69:36:5d:61:9f:f4:e9:dd:
                    94:8a:be:08:4a:d7:7e:35:0b:b9:3f:8e:6e:ac:b4:
                    35:1b:21:32:84:af:3d:3f:99:0f:97:9d:bc:1f:43:
                    b5:69:1e:67:b7:5d:18:83:15:e5:14:24:d5:2c:c1:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:14:DC:0D:84:53:B8:2E:B7:C7:B2:6D:C0:37:CE:B2:2C:62:34:35
            X509v3 Authority Key Identifier:
                keyid:0A:D8:AD:7E:0E:AB:2B:26:A5:84:20:EA:22:0F:FC:81:3E:E6:A7:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133312e3130382e34342e302f32322d3234203d3e203631363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:7d:dc:e9:5e:98:cd:7c:49:52:c6:a2:1a:95:55:13:61:da:
         2b:85:f5:ca:dc:5e:9a:0b:33:41:02:b6:45:c1:23:72:96:41:
         e6:f5:1f:eb:6d:d5:12:6e:ba:48:67:69:4b:c1:e4:55:19:51:
         27:3b:a7:36:78:eb:3b:ca:aa:e0:e1:b9:35:94:d5:a1:b5:c4:
         bc:b7:d1:06:a9:04:79:92:c0:9f:8b:36:3a:ca:27:10:49:09:
         24:b0:e9:81:2f:2b:78:2c:6f:65:c0:10:a3:99:25:ab:06:87:
         8a:6d:59:06:73:36:bf:04:ba:03:d7:0e:0c:c5:2d:44:34:23:
         0f:d8:5b:74:e0:0d:09:2f:dd:b1:a7:e3:3a:6b:7b:52:bc:ea:
         73:8e:ce:86:37:da:fd:bc:fa:37:af:fd:67:6d:76:8b:1b:d3:
         5f:76:f7:c2:c5:8c:0a:f4:b2:14:85:66:04:5b:56:41:24:7c:
         c0:85:cd:13:5d:a7:31:15:3f:7f:2f:06:9f:fe:2d:bc:32:3a:
         ed:ef:1a:b0:a5:db:dc:0e:42:30:46:86:36:56:73:b6:e9:59:
         55:d8:14:6b:86:2c:24:6a:16:56:39:74:76:a0:5d:b3:3f:15:
         83:18:9d:8f:6b:8f:92:0e:fc:47:bb:18:33:ac:60:82:28:af:
         ed:1d:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org