Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/3133312e302e3131362e302f32322d3234203d3e203631383834.roa
File:                     3133312e302e3131362e302f32322d3234203d3e203631383834.roa (raw, json)
Hash identifier:          cFQTtiDuCS92BihxPW6eEbnXuETkmJAImrjlgqcwx1w=
Subject key identifier:   59:25:77:DD:11:A6:E6:F1:1D:F2:01:87:EC:CD:1D:3A:51:91:0A:CA
Certificate issuer:       /CN=869F06292831A01521243CA24882F2D83807942B
Certificate serial:       2FEA638C7C7EF7A9E86804076C50ED567500B7E5
Authority key identifier: 86:9F:06:29:28:31:A0:15:21:24:3C:A2:48:82:F2:D8:38:07:94:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/869F06292831A01521243CA24882F2D83807942B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/3133312e302e3131362e302f32322d3234203d3e203631383834.roa
Signing time:             Fri 27 Oct 2023 13:42:10 +0000
ROA not before:           Fri 27 Oct 2023 13:37:10 +0000
ROA not after:            Fri 25 Oct 2024 13:42:10 +0000
asID:                     61884
IP address blocks:        131.0.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ea:63:8c:7c:7e:f7:a9:e8:68:04:07:6c:50:ed:56:75:00:b7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869F06292831A01521243CA24882F2D83807942B
        Validity
            Not Before: Oct 27 13:37:10 2023 GMT
            Not After : Oct 25 13:42:10 2024 GMT
        Subject: CN=592577DD11A6E6F11DF20187ECCD1D3A51910ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:06:b6:28:7f:f0:d3:92:cf:7b:85:81:c6:
                    fd:37:36:57:a9:38:ff:d1:a0:5a:8d:ac:74:02:6f:
                    e8:ca:60:74:32:d2:88:af:3f:d5:46:63:af:5f:c9:
                    57:05:99:f9:43:ea:d3:41:59:c0:96:09:03:e3:b1:
                    ab:89:bf:96:63:9b:1a:f1:61:89:ef:08:34:bb:6b:
                    20:0b:fa:e6:5d:bd:c3:62:a8:99:eb:f7:0c:b8:b0:
                    f0:1b:bb:a2:3f:25:26:96:55:23:b7:7b:0e:9a:15:
                    94:14:a4:21:e8:d7:dd:91:42:45:db:a4:98:96:50:
                    b2:d9:5d:b3:28:90:d0:4b:c1:42:e5:4b:22:4a:7d:
                    9e:78:24:8d:da:0b:0e:c6:1b:ec:7b:85:39:32:ee:
                    0a:13:cc:be:a8:3f:9e:b8:1f:b2:e4:42:aa:de:8b:
                    ee:fc:84:0a:2b:60:63:52:de:ce:04:ef:de:b7:c0:
                    5b:04:c6:d0:a0:87:58:c8:e7:26:ec:35:11:88:6f:
                    49:c5:da:1d:f0:73:63:5f:27:0a:0e:56:22:8b:93:
                    61:86:82:c6:61:c0:83:ef:89:2e:08:60:ba:fa:b5:
                    5e:25:fd:72:6d:b9:05:63:12:bf:16:1d:7a:fe:ff:
                    e9:3b:9d:4c:82:37:63:b5:1f:14:b9:9a:53:75:4a:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:25:77:DD:11:A6:E6:F1:1D:F2:01:87:EC:CD:1D:3A:51:91:0A:CA
            X509v3 Authority Key Identifier:
                keyid:86:9F:06:29:28:31:A0:15:21:24:3C:A2:48:82:F2:D8:38:07:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/869F06292831A01521243CA24882F2D83807942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/869F06292831A01521243CA24882F2D83807942B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/3133312e302e3131362e302f32322d3234203d3e203631383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:1e:a1:d1:73:ca:a4:2e:1a:50:47:1d:44:0c:7b:07:c2:b7:
         8f:0f:bb:24:bc:25:7f:85:2a:7f:93:45:ed:14:b0:b4:eb:4d:
         65:b5:70:e3:48:b0:97:07:6c:e3:ef:70:96:5c:8e:28:65:4b:
         91:89:1d:d5:c6:1e:c0:ef:96:96:6a:e5:21:fa:1d:06:0b:76:
         a6:ed:96:15:27:47:a9:79:ed:b8:19:db:8d:48:f0:1b:44:3d:
         cc:fd:d2:38:ea:d0:f6:39:8c:f6:2a:c2:2f:c4:68:23:c9:f7:
         54:0c:37:6b:f3:94:fc:08:db:55:3c:68:d3:91:d1:02:34:38:
         f9:e5:7a:9c:33:66:ef:c9:49:16:24:07:78:3b:34:f8:d5:16:
         93:97:ea:75:63:8f:0a:7b:cb:b3:0e:55:38:ff:34:61:a7:b1:
         ec:a3:9d:96:cd:51:13:51:08:df:57:a9:bf:77:5b:46:e2:64:
         81:19:95:6a:22:c0:ea:e6:5f:44:cd:3c:f2:38:bf:5f:5b:10:
         74:d5:30:0f:8e:88:64:c1:13:79:93:2c:a6:6a:70:35:1d:e5:
         8a:1a:84:aa:1f:d9:79:b2:df:84:39:1a:25:87:1a:b6:8c:f9:
         67:96:39:a0:9c:11:d4:a4:f9:df:30:93:86:36:83:75:5c:73:
         61:b8:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org