Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e37312e302f32342d3234203d3e20323634343032.roa
File:                     3133312e3136312e37312e302f32342d3234203d3e20323634343032.roa (raw, json)
Hash identifier:          x8ckbp/ycH+NQlHvGe5uhzQ58Gv1jzFUNMTjPTXyGhY=
Subject key identifier:   B8:C4:F4:10:7A:9F:1A:11:28:0B:A0:D4:02:0F:5C:2B:25:C3:75:C5
Certificate issuer:       /CN=CAF97F6FB8D9E2AFA9379678AE193B3097BF4744
Certificate serial:       09915A5BB8B47EC766DEF7E7B7D26C4235E5C01C
Authority key identifier: CA:F9:7F:6F:B8:D9:E2:AF:A9:37:96:78:AE:19:3B:30:97:BF:47:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e37312e302f32342d3234203d3e20323634343032.roa
Signing time:             Tue 09 Apr 2024 18:08:34 +0000
ROA not before:           Tue 09 Apr 2024 18:03:34 +0000
ROA not after:            Tue 08 Apr 2025 18:08:34 +0000
asID:                     264402
IP address blocks:        131.161.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:91:5a:5b:b8:b4:7e:c7:66:de:f7:e7:b7:d2:6c:42:35:e5:c0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF97F6FB8D9E2AFA9379678AE193B3097BF4744
        Validity
            Not Before: Apr  9 18:03:34 2024 GMT
            Not After : Apr  8 18:08:34 2025 GMT
        Subject: CN=B8C4F4107A9F1A11280BA0D4020F5C2B25C375C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:fb:89:2e:65:51:a1:4b:02:47:a5:cb:7d:
                    1d:3b:65:15:ac:ff:e1:5d:0b:c3:a4:25:59:e3:cb:
                    36:5d:f0:4f:7d:0b:bb:7a:18:c9:3f:51:d0:11:93:
                    d9:13:ef:54:2e:14:1b:c7:39:8b:d1:50:c3:1c:be:
                    2c:c0:25:97:ac:99:6f:4f:4e:c0:0f:a2:e5:83:a2:
                    7d:3d:37:cc:4b:ce:31:66:54:b0:c0:28:4c:6e:24:
                    dc:37:ae:d3:90:97:c4:a2:d3:a4:ee:15:eb:45:13:
                    3b:75:34:98:d4:c7:c8:6d:08:c3:19:4e:60:98:a8:
                    ab:2d:60:41:bc:60:35:94:0b:ca:62:b7:20:ba:da:
                    0c:cd:5b:de:fc:5f:d1:b7:8e:e8:94:80:c3:c0:b5:
                    72:8a:e0:aa:9c:75:ea:69:ec:80:3f:3a:6e:dc:14:
                    2f:ad:ee:96:aa:48:b0:f8:2d:aa:60:46:7d:37:78:
                    af:12:5f:60:29:c2:89:50:b2:4b:eb:fd:84:3e:1d:
                    2d:02:98:f4:f2:42:35:0a:a8:42:b2:1a:7e:e7:3b:
                    8a:29:79:8a:d3:e5:df:af:d3:77:0d:52:12:61:74:
                    29:e1:77:57:22:db:80:03:80:ad:05:48:c0:c5:77:
                    8e:da:4a:37:aa:8e:1e:82:8c:e6:92:1a:5f:e3:22:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C4:F4:10:7A:9F:1A:11:28:0B:A0:D4:02:0F:5C:2B:25:C3:75:C5
            X509v3 Authority Key Identifier:
                keyid:CA:F9:7F:6F:B8:D9:E2:AF:A9:37:96:78:AE:19:3B:30:97:BF:47:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e37312e302f32342d3234203d3e20323634343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:ee:fd:7a:91:15:a5:32:33:99:f0:79:64:b5:76:2f:24:75:
         64:0a:35:4e:07:03:ca:4c:46:71:15:cc:92:c4:5f:ae:74:d9:
         81:35:2a:87:0f:7e:93:8b:dd:48:02:6b:fd:dd:21:29:79:62:
         67:01:1d:25:fc:0e:c8:6e:82:92:bb:e2:62:98:67:85:28:6d:
         13:c3:0f:57:6e:f7:ef:51:a8:b2:6a:55:aa:e6:da:b0:ce:88:
         f7:5b:ff:4c:09:80:65:8d:b5:b0:8b:e9:c3:ad:cd:f8:71:72:
         b9:ab:97:00:2e:9a:4d:4d:e5:24:c4:8a:97:73:d9:21:1d:91:
         f2:bf:8b:7f:f1:44:6c:cb:65:73:cc:41:b5:8d:91:d7:0d:1a:
         4f:c5:5c:bd:6d:73:36:20:b9:16:2c:dd:0b:34:c1:bb:7c:fb:
         57:ea:63:09:af:4d:23:a5:03:72:01:8f:86:31:cb:e6:00:2b:
         cd:b6:6c:d3:6a:5b:8a:b9:8b:2f:54:1c:fa:b3:aa:ff:5a:ac:
         96:56:a8:a8:85:ed:6c:57:86:bf:ba:4b:c7:d1:7d:36:10:06:
         7f:43:dd:34:10:1d:c9:59:0b:24:ea:59:cf:ff:fb:ed:0a:cf:
         92:99:58:7e:10:ec:56:e1:57:e2:0f:ff:49:bb:f0:7c:db:bd:
         c8:58:79:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCZFaW7i0fsdm3vfnt9JsQjXlwBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FGOTdGNkZCOEQ5RTJBRkE5Mzc5Njc4QUUxOTNCMzA5
N0JGNDc0NDAeFw0yNDA0MDkxODAzMzRaFw0yNTA0MDgxODA4MzRaMDMxMTAvBgNV
BAMTKEI4QzRGNDEwN0E5RjFBMTEyODBCQTBENDAyMEY1QzJCMjVDMzc1QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiY/uJLmVRoUsCR6XLfR07ZRWs
/+FdC8OkJVnjyzZd8E99C7t6GMk/UdARk9kT71QuFBvHOYvRUMMcvizAJZesmW9P
TsAPouWDon09N8xLzjFmVLDAKExuJNw3rtOQl8Si06TuFetFEzt1NJjUx8htCMMZ
TmCYqKstYEG8YDWUC8pityC62gzNW978X9G3juiUgMPAtXKK4Kqcdepp7IA/Om7c
FC+t7paqSLD4LapgRn03eK8SX2ApwolQskvr/YQ+HS0CmPTyQjUKqEKyGn7nO4op
eYrT5d+v03cNUhJhdCnhd1ci24ADgK0FSMDFd47aSjeqjh6CjOaSGl/jIvr7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuMT0EHqfGhEoC6DUAg9cKyXDdcUwHwYDVR0j
BBgwFoAUyvl/b7jZ4q+pN5Z4rhk7MJe/R0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUhEN1FyUFBpQmFhV0tMOW5wcXlzS0oyQ1NpM0tLQ0pYRGZTc1RyZUpN
SHcvMS9DQUY5N0Y2RkI4RDlFMkFGQTkzNzk2NzhBRTE5M0IzMDk3QkY0NzQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBRjk3RjZGQjhEOUUyQUZB
OTM3OTY3OEFFMTkzQjMwOTdCRjQ3NDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FIRDdRclBQaUJhYVdLTDlucHF5c0tKMkNTaTNLS0NKWERmU3NUcmVKTUh3LzEv
MzEzMzMxMmUzMTM2MzEyZTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDoUcwDQYJKoZIhvcNAQELBQADggEBABzu/XqR
FaUyM5nweWS1di8kdWQKNU4HA8pMRnEVzJLEX6502YE1KocPfpOL3UgCa/3dISl5
YmcBHSX8DshugpK74mKYZ4UobRPDD1du9+9RqLJqVarm2rDOiPdb/0wJgGWNtbCL
6cOtzfhxcrmrlwAumk1N5STEipdz2SEdkfK/i3/xRGzLZXPMQbWNkdcNGk/FXL1t
czYguRYs3Qs0wbt8+1fqYwmvTSOlA3IBj4Yxy+YAK822bNNqW4q5iy9UHPqzqv9a
rJZWqKiF7WxXhr+6S8fRfTYQBn9D3TQQHclZCyTqWc//++0Kz5KZWH4Q7FbhV+IP
/0m78HzbvchYefQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org