Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa
File:                     3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa (raw, json)
Hash identifier:          F4hLLTMoM6394y8eQu/pyoVaOKupaX03CAnrIeXuWjo=
Subject key identifier:   33:08:2D:6E:21:DC:FA:00:A6:62:E5:4F:38:D5:B5:5A:45:CF:48:FC
Certificate issuer:       /CN=8A90DF018B161D6CEA690EF462A96991BD182AEB
Certificate serial:       42F1F0CC4E3E3ED169D2C2F1AE1DCE3071F66917
Authority key identifier: 8A:90:DF:01:8B:16:1D:6C:EA:69:0E:F4:62:A9:69:91:BD:18:2A:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A90DF018B161D6CEA690EF462A96991BD182AEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa
Signing time:             Wed 13 Sep 2023 12:54:15 +0000
ROA not before:           Wed 13 Sep 2023 12:49:15 +0000
ROA not after:            Wed 11 Sep 2024 12:54:15 +0000
asID:                     61632
IP address blocks:        131.100.124.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f1:f0:cc:4e:3e:3e:d1:69:d2:c2:f1:ae:1d:ce:30:71:f6:69:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A90DF018B161D6CEA690EF462A96991BD182AEB
        Validity
            Not Before: Sep 13 12:49:15 2023 GMT
            Not After : Sep 11 12:54:15 2024 GMT
        Subject: CN=33082D6E21DCFA00A662E54F38D5B55A45CF48FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:27:f3:17:94:e1:29:b5:ff:b3:ce:a8:df:
                    b6:ef:08:a5:f4:90:2f:65:7c:4c:8e:46:65:11:22:
                    67:19:40:7c:bc:6e:85:3e:cf:71:45:64:39:c4:d5:
                    96:69:ef:a1:37:12:e0:ac:4f:cc:84:8e:72:6b:7c:
                    db:13:46:83:5f:76:af:b1:e3:d9:44:cf:41:53:16:
                    f9:e0:13:74:ee:c9:90:c1:b7:88:17:1f:db:15:dc:
                    45:17:39:3a:37:7c:b8:ff:bd:02:39:a2:0b:e9:92:
                    2d:c2:87:19:b2:f8:30:6a:b6:ae:6d:11:a7:2c:6b:
                    fc:f2:73:13:8e:b3:9a:2a:a9:29:05:f0:60:dc:18:
                    89:cd:63:43:e0:24:ca:f3:e1:de:44:af:20:f8:13:
                    5a:67:5e:4e:c9:b1:0a:cf:e2:7b:fa:3b:56:be:e7:
                    39:58:6a:1b:fd:aa:b6:7f:2b:0e:b4:ca:60:f3:ef:
                    ff:21:45:db:4f:c5:0c:f1:09:89:de:0c:8c:34:c6:
                    a4:e2:52:3f:93:07:80:72:18:4e:a6:6d:11:b6:fe:
                    81:8d:ff:94:31:66:21:de:d5:57:29:12:48:22:15:
                    c6:9d:a6:02:d4:93:f6:ed:35:25:75:27:41:20:f8:
                    07:6e:2a:9b:4d:99:b8:ff:13:bf:e5:d1:d5:39:cb:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:2D:6E:21:DC:FA:00:A6:62:E5:4F:38:D5:B5:5A:45:CF:48:FC
            X509v3 Authority Key Identifier:
                keyid:8A:90:DF:01:8B:16:1D:6C:EA:69:0E:F4:62:A9:69:91:BD:18:2A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/8A90DF018B161D6CEA690EF462A96991BD182AEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A90DF018B161D6CEA690EF462A96991BD182AEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:70:cd:0e:7a:c2:6c:39:55:2c:2d:dd:21:d6:1f:28:09:bf:
         c7:82:86:0e:6a:c5:f5:06:9b:4b:bf:78:90:0e:3e:32:d8:63:
         47:1c:39:41:a5:a7:b6:d9:aa:1b:18:b9:59:c9:2d:0a:f2:00:
         ae:63:42:ae:3e:19:3e:7c:9d:9a:e4:e2:08:a6:48:c7:0d:a3:
         0f:51:c6:d1:e7:7a:1f:d0:8e:3b:dd:1e:68:c6:2d:8d:d5:05:
         93:e2:b7:93:52:54:41:22:8b:ba:63:e0:a4:56:2d:a5:d5:56:
         9c:0c:b7:d0:ea:9e:e1:34:a1:15:ac:6b:b8:fa:14:27:eb:f8:
         36:4d:02:9b:c5:e7:a1:a2:36:5e:b0:fa:e9:bb:59:82:74:f1:
         ed:ea:d4:cd:18:48:f5:43:84:0f:a0:e0:56:87:95:e1:bb:99:
         7a:2b:19:d2:a3:6b:da:f8:95:68:af:fd:20:34:5d:35:4c:20:
         5c:a1:3d:32:f6:74:48:49:e6:a4:b5:e7:a3:1a:af:7c:1b:46:
         8b:75:db:9d:ea:f6:83:ec:ab:b5:c7:7c:96:c4:2e:98:dd:f3:
         84:cd:6e:bb:cc:9c:88:97:36:6f:43:9b:9c:50:42:e7:ec:4a:
         67:75:44:4a:b7:bb:b8:41:24:27:72:9b:e8:8f:5c:12:30:3c:
         5d:50:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org