Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3138382e302f32332d3233203d3e20323634333932.roa
File:                     3133312e3136312e3138382e302f32332d3233203d3e20323634333932.roa (raw, json)
Hash identifier:          5kk89+SM09lm+a34O2Ggv6rnGi24qy7RdeWal0pC948=
Subject key identifier:   A9:C0:99:62:79:6D:27:0C:82:00:54:00:7E:53:CD:15:65:13:4F:23
Certificate issuer:       /CN=FCD7E8134A54BC69039878FDD2365C466F86B95F
Certificate serial:       78EE306E8E36597C331A34C4084BC90157C7F361
Authority key identifier: FC:D7:E8:13:4A:54:BC:69:03:98:78:FD:D2:36:5C:46:6F:86:B9:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3138382e302f32332d3233203d3e20323634333932.roa
Signing time:             Tue 05 Mar 2024 16:51:51 +0000
ROA not before:           Tue 05 Mar 2024 16:46:51 +0000
ROA not after:            Tue 04 Mar 2025 16:51:51 +0000
asID:                     264392
IP address blocks:        131.161.188.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ee:30:6e:8e:36:59:7c:33:1a:34:c4:08:4b:c9:01:57:c7:f3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD7E8134A54BC69039878FDD2365C466F86B95F
        Validity
            Not Before: Mar  5 16:46:51 2024 GMT
            Not After : Mar  4 16:51:51 2025 GMT
        Subject: CN=A9C09962796D270C820054007E53CD1565134F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dc:c1:44:5b:66:7a:0d:2a:fe:b7:fc:5c:5d:
                    90:af:95:d8:7f:71:53:a2:ac:77:c9:7b:1d:cf:d2:
                    f0:30:c9:1f:fd:76:dd:40:8a:bc:b5:b5:18:76:5b:
                    eb:db:1c:c0:18:5d:6c:73:a4:a7:61:6e:db:31:a8:
                    e0:9e:18:17:aa:0e:6c:a0:c9:c5:ac:c6:7f:47:8c:
                    cc:08:01:e3:7d:dd:af:49:81:4c:37:67:e4:b2:d1:
                    e9:b5:ab:52:5a:c5:61:ea:ea:e5:a1:63:c8:7e:4e:
                    83:f5:08:b7:c0:26:5b:48:2b:d3:28:6e:17:51:9b:
                    04:81:02:66:1d:03:bb:23:9d:73:4d:cc:52:2e:aa:
                    da:8a:5a:e1:76:3c:ee:53:64:2f:44:b1:4f:65:fc:
                    34:20:bb:b9:03:4e:81:a6:4b:b1:9a:af:4a:a8:45:
                    26:53:0a:43:32:70:f8:8b:50:1c:8a:bb:5e:7d:9a:
                    e5:7a:67:69:c4:43:8d:e5:34:d1:a8:6c:97:4b:af:
                    48:0d:d2:ac:18:74:bc:8f:a1:fc:97:eb:f2:10:95:
                    cd:c8:c5:20:0e:24:c2:3c:4a:e3:01:56:fe:c8:0d:
                    6d:e5:83:e0:cb:62:9c:15:cb:4d:20:20:7f:3a:16:
                    33:89:c5:37:7c:d7:de:a0:9e:5d:f1:e6:29:4d:94:
                    00:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C0:99:62:79:6D:27:0C:82:00:54:00:7E:53:CD:15:65:13:4F:23
            X509v3 Authority Key Identifier:
                keyid:FC:D7:E8:13:4A:54:BC:69:03:98:78:FD:D2:36:5C:46:6F:86:B9:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3138382e302f32332d3233203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:67:41:b6:d2:19:81:37:bb:a3:ab:db:f6:92:6d:b2:7a:14:
         13:8b:01:77:ab:62:c9:b4:e4:6e:28:6d:47:75:69:f9:de:93:
         c2:b7:aa:d9:31:29:5e:52:55:49:9c:bc:4c:60:ea:21:19:5c:
         b4:15:79:56:60:20:70:e3:ac:fa:25:10:c9:e6:d0:f3:ad:4d:
         f8:37:9b:f8:38:b0:b0:57:6e:12:9b:d5:f8:05:32:14:42:bd:
         76:c7:f5:09:19:47:da:d4:a2:b5:99:5e:fb:83:bb:f1:56:7f:
         30:c2:2c:dc:b2:58:55:9d:42:a2:6f:a7:05:5f:67:f5:36:b4:
         e5:a1:1c:3e:f7:3a:29:8e:73:7d:b1:15:ef:4a:75:3b:38:2e:
         53:78:01:c8:fd:2e:d5:09:ed:59:57:4b:64:68:60:6b:17:05:
         11:7e:ab:58:e4:fd:29:43:db:ab:34:c2:1e:8f:4a:64:ac:cb:
         56:7c:d8:3c:3c:e1:be:3c:61:c7:47:3f:97:6a:3b:83:84:ed:
         3d:75:69:45:00:9b:f1:c1:ac:61:13:00:e8:94:65:75:3e:9b:
         07:a8:e6:ad:05:8f:95:51:a8:d3:1e:9a:06:58:1a:f8:a4:49:
         0f:9d:c8:f4:b0:d3:5d:05:ba:6c:b3:26:3d:e4:5c:5c:75:84:
         5f:06:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org