Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e36382e302f32342d3234203d3e20323634343032.roa
File:                     3133312e3136312e36382e302f32342d3234203d3e20323634343032.roa (raw, json)
Hash identifier:          4CQfsw6oGed0KcVHAl1d/HGQOxmMFo8wd6CcoQVG6g0=
Subject key identifier:   0E:E1:5A:FB:C4:24:E5:90:EA:AE:8B:78:E5:7B:B8:57:EF:13:FF:B9
Certificate issuer:       /CN=CAF97F6FB8D9E2AFA9379678AE193B3097BF4744
Certificate serial:       32624DE4F360C19508437ACABEC31FEECEEB27ED
Authority key identifier: CA:F9:7F:6F:B8:D9:E2:AF:A9:37:96:78:AE:19:3B:30:97:BF:47:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e36382e302f32342d3234203d3e20323634343032.roa
Signing time:             Tue 09 Apr 2024 18:08:29 +0000
ROA not before:           Tue 09 Apr 2024 18:03:29 +0000
ROA not after:            Tue 08 Apr 2025 18:08:29 +0000
asID:                     264402
IP address blocks:        131.161.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:62:4d:e4:f3:60:c1:95:08:43:7a:ca:be:c3:1f:ee:ce:eb:27:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF97F6FB8D9E2AFA9379678AE193B3097BF4744
        Validity
            Not Before: Apr  9 18:03:29 2024 GMT
            Not After : Apr  8 18:08:29 2025 GMT
        Subject: CN=0EE15AFBC424E590EAAE8B78E57BB857EF13FFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:79:38:7f:54:49:37:2c:e8:c8:29:3e:8d:
                    2a:e1:08:d3:fa:15:f4:15:50:69:57:73:ac:20:62:
                    d9:a5:db:da:f1:21:09:32:36:fe:b5:83:34:3d:ee:
                    bf:12:e6:6e:a0:de:22:93:52:22:0c:63:05:eb:dd:
                    ee:45:b5:10:d4:69:1a:b2:a9:6b:72:65:cd:01:e6:
                    a8:2c:99:f8:c8:dd:bd:38:4a:b5:62:e9:79:5c:79:
                    47:ec:6d:97:80:8a:35:35:0a:ad:1c:01:97:e1:70:
                    d1:11:2f:79:26:d0:2d:96:7a:24:2d:2b:a7:e4:29:
                    4b:dc:2d:fd:5b:4f:f9:1f:0c:eb:f3:7c:95:13:93:
                    1f:6d:cd:0d:4e:79:91:55:bb:a8:c0:e8:a9:44:b0:
                    a0:9a:c0:60:3e:f4:8a:59:02:c1:3d:f3:49:b4:90:
                    e0:1f:50:a7:3f:20:a0:df:c1:1a:ab:2b:55:0a:d3:
                    a9:11:87:a0:9a:2c:12:fb:e5:2e:cc:04:20:2d:4c:
                    53:7d:31:cf:6c:69:ef:5f:82:cc:9a:10:0a:0f:56:
                    ad:c0:03:25:d9:6c:c2:3c:23:4b:19:f8:c7:26:1d:
                    64:8f:85:c0:4a:69:c1:1c:af:a6:af:76:7e:f4:db:
                    1e:54:77:02:c8:de:c5:6f:a0:ee:76:ec:78:85:74:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E1:5A:FB:C4:24:E5:90:EA:AE:8B:78:E5:7B:B8:57:EF:13:FF:B9
            X509v3 Authority Key Identifier:
                keyid:CA:F9:7F:6F:B8:D9:E2:AF:A9:37:96:78:AE:19:3B:30:97:BF:47:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e36382e302f32342d3234203d3e20323634343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:ac:bd:53:8a:d9:0e:21:bf:52:b3:3b:be:46:74:ed:a6:67:
         98:b6:15:06:74:19:8d:90:fd:2e:db:7b:c9:ca:b8:00:9d:01:
         80:ec:40:03:bf:f6:23:b7:3d:63:29:4a:d1:4b:21:ba:70:2f:
         78:3c:24:c1:c0:88:f0:3b:22:08:dc:9f:38:6f:e4:ac:81:8f:
         55:92:bb:77:56:b0:67:a1:3b:80:c7:84:f9:5d:36:be:34:a5:
         fb:19:c1:f5:c5:81:33:74:07:8c:62:28:d4:41:e3:20:29:5e:
         8a:cd:d4:2e:3c:6a:8f:f1:dd:57:4a:33:e3:ce:07:16:3f:9b:
         fb:d4:3e:80:5a:3c:bc:60:45:af:c9:87:27:7d:4a:60:96:a0:
         10:a1:4c:a5:75:e6:f7:ce:6f:9d:67:cb:03:e5:70:3f:19:5a:
         f8:78:66:0e:de:fa:c0:f5:ef:40:33:01:c0:30:b1:b0:c2:6f:
         7d:8f:b4:be:26:43:60:b9:e4:2e:7c:11:23:bf:0c:2e:07:41:
         d2:07:20:d4:5a:ff:7a:74:72:23:31:00:05:6e:cb:f7:8c:e8:
         c0:83:d9:b7:c6:16:2b:59:9a:0e:12:4e:82:c3:7f:25:24:94:
         1b:44:24:6d:d1:d8:fe:7b:31:d0:ec:b2:29:54:98:e7:75:d9:
         d1:ba:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org