Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33362e302f32342d3234203d3e203532353634.roa
File:                     3133312e3136312e33362e302f32342d3234203d3e203532353634.roa (raw, json)
Hash identifier:          DRwlvrtpIDKGAWb+pDZmqGKonj5f0dxNTWnZ5QsQ8+A=
Subject key identifier:   D9:E6:9B:53:FB:23:F8:3B:7F:C7:52:F9:D1:32:0A:8F:7B:E7:5B:34
Certificate issuer:       /CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
Certificate serial:       3BB74ADBF86DEEEC777524CF7EF675187D109132
Authority key identifier: 6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33362e302f32342d3234203d3e203532353634.roa
Signing time:             Tue 31 Oct 2023 20:32:18 +0000
ROA not before:           Tue 31 Oct 2023 20:27:18 +0000
ROA not after:            Tue 29 Oct 2024 20:32:18 +0000
asID:                     52564
IP address blocks:        131.161.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b7:4a:db:f8:6d:ee:ec:77:75:24:cf:7e:f6:75:18:7d:10:91:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Validity
            Not Before: Oct 31 20:27:18 2023 GMT
            Not After : Oct 29 20:32:18 2024 GMT
        Subject: CN=D9E69B53FB23F83B7FC752F9D1320A8F7BE75B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:d3:f1:50:6b:72:70:81:e2:a0:a8:47:b3:
                    94:12:6e:71:d0:55:71:4c:ae:df:92:29:0d:94:22:
                    61:2f:a4:59:4e:78:0f:e9:24:56:bb:e5:af:62:a4:
                    a2:36:ca:59:f6:c6:a8:be:a0:00:8a:10:43:86:07:
                    25:b2:00:99:9b:c2:39:58:4c:a3:08:de:b5:4f:0d:
                    6e:69:a3:65:a2:a0:9e:c6:43:36:d9:00:27:78:1f:
                    98:fb:11:ff:e1:8b:50:c0:b1:db:5b:07:83:01:02:
                    03:3f:d3:ee:a9:62:29:7b:9e:c9:e6:43:78:f4:10:
                    91:3d:f2:2e:75:96:0a:ef:3e:1a:64:2c:94:54:2d:
                    48:11:69:66:f0:22:3e:ec:9c:7c:7c:ad:02:d2:aa:
                    5d:f4:a6:ff:5f:f1:b8:20:b0:8a:96:d7:4c:2b:29:
                    76:b6:ae:a0:68:60:90:22:cd:0c:8d:0d:2b:c1:31:
                    9d:b8:fe:7e:0e:08:3b:69:36:a0:26:9a:bc:97:56:
                    40:3a:ad:c6:00:ff:93:60:cd:8e:49:37:00:6e:e6:
                    ef:01:35:5b:c4:1e:93:27:7f:ba:f6:26:74:79:75:
                    fb:39:47:a8:cb:86:4e:aa:6f:f5:8b:8d:e7:e5:1f:
                    9b:fd:b3:e8:1f:9f:5d:6e:54:31:0b:37:9b:ae:ba:
                    07:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E6:9B:53:FB:23:F8:3B:7F:C7:52:F9:D1:32:0A:8F:7B:E7:5B:34
            X509v3 Authority Key Identifier:
                keyid:6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33362e302f32342d3234203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:af:32:18:d9:7d:56:3e:06:a0:44:ed:e7:bc:41:09:74:9d:
         e4:08:33:73:a5:73:d7:3c:f8:b6:7e:06:85:39:35:fe:c8:b4:
         b5:11:fb:95:e4:52:b4:16:8d:3f:0e:ed:64:83:41:ed:6e:a5:
         5f:db:08:1f:52:a1:05:36:91:01:75:fb:90:6e:24:1b:de:5e:
         8a:75:94:c5:cc:50:02:5f:66:ff:49:f1:21:cc:5c:7e:e2:a3:
         93:5e:7e:d5:0d:fd:14:80:4d:48:24:c3:47:9f:ca:2b:ca:94:
         8a:3f:d7:52:e6:7b:af:51:a6:09:df:5d:2c:94:a4:20:32:5d:
         46:8f:02:9b:14:19:46:10:6c:75:b1:1a:75:f4:8c:9e:e9:ad:
         24:78:65:79:56:d8:e1:ea:5f:3c:d1:28:fa:6d:29:6e:f3:0b:
         e4:49:a8:5d:63:06:4c:b0:68:62:fc:dd:6a:50:65:fd:47:c7:
         ea:b7:39:57:78:02:bb:83:ef:5f:97:75:3d:5f:af:a3:4f:68:
         84:48:ec:23:16:af:b6:ce:98:d4:73:7e:e7:4a:83:df:47:15:
         74:00:2a:ac:d1:c2:84:27:aa:ab:50:9e:9f:31:b8:08:c8:f5:
         a5:0c:4b:97:de:f2:08:8c:e9:71:1c:59:83:f2:db:54:c6:20:
         6f:1e:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org