Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3133312e302f32342d3234203d3e20323635333635.roa
File:                     3136382e3230352e3133312e302f32342d3234203d3e20323635333635.roa (raw, json)
Hash identifier:          mAmnobunZI72Zsz7DhaEBceDrsuT6daNgjRNvMH6vqc=
Subject key identifier:   18:54:43:76:A2:FF:7C:60:A9:D6:2D:1F:89:EB:A8:14:34:C0:31:40
Certificate issuer:       /CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
Certificate serial:       102E2ECA05099E902A9D14819C8A6E876D94F303
Authority key identifier: 47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3133312e302f32342d3234203d3e20323635333635.roa
Signing time:             Sun 14 Jan 2024 12:00:00 +0000
ROA not before:           Sun 14 Jan 2024 11:55:00 +0000
ROA not after:            Sun 12 Jan 2025 12:00:00 +0000
asID:                     265365
IP address blocks:        168.205.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2e:2e:ca:05:09:9e:90:2a:9d:14:81:9c:8a:6e:87:6d:94:f3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
        Validity
            Not Before: Jan 14 11:55:00 2024 GMT
            Not After : Jan 12 12:00:00 2025 GMT
        Subject: CN=18544376A2FF7C60A9D62D1F89EBA81434C03140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:d6:c0:ef:27:3d:f2:03:ef:90:81:a0:b6:
                    76:58:58:8f:4e:da:8e:f6:f9:9f:4f:64:6a:91:d5:
                    fc:b5:a5:54:68:5a:69:d6:74:52:3e:fd:cd:0d:93:
                    2a:a9:17:dc:90:e8:a9:bf:7a:46:83:28:c5:8a:61:
                    5e:80:27:b8:9b:08:52:c0:6c:10:f0:49:d7:71:52:
                    94:2a:2a:86:c4:10:c9:87:72:04:40:a5:77:d4:35:
                    e7:31:4b:84:7f:5a:62:90:e3:61:e0:e8:c8:00:a7:
                    ef:02:21:a7:44:80:05:07:68:d4:46:ad:49:8c:14:
                    43:6f:61:3b:26:34:84:66:e7:bf:2e:f2:3b:6e:9f:
                    bb:61:b7:8d:8e:4d:96:6c:af:62:48:b9:e9:cf:03:
                    d6:90:fa:10:ca:9c:9a:cc:61:6b:f2:3e:20:b4:54:
                    d7:cb:c0:8c:fe:5a:f5:92:1d:32:de:4b:94:d9:1e:
                    83:c1:cc:01:fc:6e:05:db:38:85:15:bf:61:4b:c5:
                    18:12:92:9d:a9:c8:e9:3f:79:af:17:c3:b0:44:15:
                    a5:71:89:26:77:41:23:fd:ae:2c:b2:d0:6d:59:c7:
                    b4:87:8e:d9:76:36:5d:1b:10:92:aa:aa:de:06:8e:
                    4c:5f:d9:d7:ac:cc:6b:4d:a6:97:45:98:53:6f:a0:
                    0a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:54:43:76:A2:FF:7C:60:A9:D6:2D:1F:89:EB:A8:14:34:C0:31:40
            X509v3 Authority Key Identifier:
                keyid:47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/3136382e3230352e3133312e302f32342d3234203d3e20323635333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:3d:fd:70:fd:c1:aa:26:40:e2:55:b0:7a:10:38:73:f4:81:
         a0:9e:9c:f9:46:f1:0f:4c:98:02:e8:9a:01:49:c8:fa:7c:be:
         d1:1c:dc:4c:a9:d8:68:15:ae:c4:14:aa:5f:b6:5e:25:f2:31:
         93:f2:19:01:13:1c:ce:9b:fa:fc:f4:b8:e4:a6:95:d5:06:bd:
         2b:1a:fe:47:2a:5e:32:39:23:8e:43:32:32:14:04:47:d7:90:
         91:63:be:f7:40:b8:f1:f7:c3:27:47:ce:28:dd:a8:84:2c:87:
         d2:7f:4e:42:80:d4:66:17:67:b5:01:24:fc:b8:60:3c:2d:36:
         0b:19:16:82:84:32:b2:da:7e:49:fc:4c:12:20:0e:82:d3:ad:
         aa:a5:d2:30:2d:8e:4a:6f:0a:1c:60:e0:72:92:29:19:cc:0f:
         a0:80:3d:bd:7f:7b:5d:49:57:32:3a:ef:bf:66:44:c2:88:62:
         11:6d:6f:83:8d:90:01:23:06:c1:27:b4:b2:27:68:31:54:32:
         f3:89:61:ad:75:19:5f:db:92:87:f3:9d:3f:fb:11:3e:ee:06:
         7e:ca:0b:0d:d6:a2:7a:b5:f1:0b:4b:a2:18:4d:68:10:7c:41:
         26:2c:7c:f1:62:1a:41:fb:1a:64:45:a9:86:90:73:97:61:ca:
         d6:d5:5c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org