Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa
File:                     3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa (raw, json)
Hash identifier:          oJ+hoGtISHYD6f48posXZIdxDyGUyGjL3RFrSDrA0S0=
Subject key identifier:   50:1B:6F:C8:3D:F7:25:6F:C8:D1:1A:35:D5:BF:C7:C1:68:77:C7:93
Certificate issuer:       /CN=CAF97F6FB8D9E2AFA9379678AE193B3097BF4744
Certificate serial:       2AA1334A853FE129659A985615696049CEB37FF1
Authority key identifier: CA:F9:7F:6F:B8:D9:E2:AF:A9:37:96:78:AE:19:3B:30:97:BF:47:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa
Signing time:             Tue 09 Apr 2024 18:08:27 +0000
ROA not before:           Tue 09 Apr 2024 18:03:27 +0000
ROA not after:            Tue 08 Apr 2025 18:08:27 +0000
asID:                     264402
IP address blocks:        131.161.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a1:33:4a:85:3f:e1:29:65:9a:98:56:15:69:60:49:ce:b3:7f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF97F6FB8D9E2AFA9379678AE193B3097BF4744
        Validity
            Not Before: Apr  9 18:03:27 2024 GMT
            Not After : Apr  8 18:08:27 2025 GMT
        Subject: CN=501B6FC83DF7256FC8D11A35D5BFC7C16877C793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:52:53:b9:55:ce:1d:e6:4b:76:cb:63:88:
                    1f:21:aa:37:0e:05:0c:6f:33:a4:7d:1d:77:bd:10:
                    15:5b:90:6c:37:aa:ba:3a:42:89:36:24:3d:e9:b7:
                    85:05:7c:a4:a2:00:d6:69:da:4e:63:02:52:7c:f1:
                    6a:9a:6e:f6:46:86:dc:dc:33:9e:4d:aa:1e:4e:51:
                    99:05:38:79:f1:92:1e:c0:a1:90:a9:46:3f:87:f5:
                    b6:74:b7:f2:39:95:6d:b6:d4:6b:90:c6:82:f4:ff:
                    c3:28:10:99:6d:be:8e:f5:1a:08:9f:17:66:d0:5a:
                    11:7b:4e:9a:39:68:d1:1d:e1:30:02:ce:96:7f:a0:
                    d6:e4:06:1b:97:10:f3:fe:33:f3:cf:a6:73:4e:03:
                    2e:c9:08:d0:71:f3:ff:a9:95:28:eb:93:44:01:55:
                    0a:3d:cb:85:d9:a9:83:83:3e:4b:00:98:80:ff:05:
                    1b:75:42:f6:d1:58:bc:5a:fb:09:d4:32:00:1b:9b:
                    e6:82:a8:31:ca:9d:ba:85:a3:fe:ba:07:d3:74:d1:
                    07:60:d7:66:f3:74:b5:b0:5d:cc:fe:f6:b7:32:c8:
                    2e:2b:b3:d1:42:34:41:7e:54:f4:5f:e6:37:a0:7c:
                    ef:d2:19:23:ee:90:d4:18:f6:44:ab:9c:82:3d:79:
                    ac:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1B:6F:C8:3D:F7:25:6F:C8:D1:1A:35:D5:BF:C7:C1:68:77:C7:93
            X509v3 Authority Key Identifier:
                keyid:CA:F9:7F:6F:B8:D9:E2:AF:A9:37:96:78:AE:19:3B:30:97:BF:47:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:87:b9:51:b4:31:13:60:23:35:d3:94:33:65:f5:8f:e0:
         9f:58:9b:18:31:57:6b:7b:48:38:2b:65:ce:15:4e:ff:8e:ea:
         a1:99:a2:36:d6:36:2f:98:e5:1b:09:3f:6f:b0:72:0b:e8:7a:
         e9:53:fc:b2:16:f4:1b:75:41:67:bc:b0:87:ac:20:b8:ce:58:
         76:9b:5f:1e:28:2e:bf:ab:ae:c2:fa:9e:af:2f:1f:8b:fe:7e:
         fc:fd:5b:74:41:47:58:2c:55:a7:6d:1e:25:a0:c2:d1:c8:37:
         10:2e:5b:e4:74:9f:e9:e5:00:7f:da:f0:cc:88:96:6c:df:08:
         c8:f0:3a:f7:65:89:2d:83:51:12:65:d3:65:ad:a8:89:b8:6b:
         d4:9c:5e:63:58:fb:a2:66:75:1f:3b:30:e4:e3:e3:35:3a:9c:
         11:63:ce:dd:0c:a9:ad:91:79:57:e4:30:24:0b:79:d1:ed:dc:
         19:18:c0:b5:29:38:99:74:ce:34:a0:22:33:8a:ca:9b:56:11:
         77:4c:8d:91:20:b2:c1:7b:8e:a0:82:d1:6e:70:da:69:79:13:
         bb:fd:f3:60:fc:9e:fd:76:70:96:25:92:d3:b6:32:07:30:eb:
         e4:ca:01:c4:a0:28:8c:3e:8c:78:86:30:5e:8b:0c:15:8e:c3:
         67:82:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org