Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33392e302f32342d3234203d3e203532353634.roa
File:                     3133312e3136312e33392e302f32342d3234203d3e203532353634.roa (raw, json)
Hash identifier:          PbQudLlyt03Fy6cMnFJq1PiKYg8sIJWOFIwmGI68aN8=
Subject key identifier:   90:F1:A9:F8:BC:C0:E5:71:A3:35:74:0F:5E:E7:8C:98:35:10:77:E4
Certificate issuer:       /CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
Certificate serial:       5D20CA5D04D5D59C70811186CCA2815970EAC61B
Authority key identifier: 6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33392e302f32342d3234203d3e203532353634.roa
Signing time:             Tue 31 Oct 2023 20:32:17 +0000
ROA not before:           Tue 31 Oct 2023 20:27:17 +0000
ROA not after:            Tue 29 Oct 2024 20:32:17 +0000
asID:                     52564
IP address blocks:        131.161.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:20:ca:5d:04:d5:d5:9c:70:81:11:86:cc:a2:81:59:70:ea:c6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Validity
            Not Before: Oct 31 20:27:17 2023 GMT
            Not After : Oct 29 20:32:17 2024 GMT
        Subject: CN=90F1A9F8BCC0E571A335740F5EE78C98351077E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:a9:39:fe:94:09:8e:08:99:be:bc:58:4d:
                    95:04:18:ac:b8:de:34:f9:35:3a:ea:5f:86:4d:07:
                    49:10:ae:59:0d:49:b2:3a:b1:af:30:44:f9:33:97:
                    4f:ef:8b:f0:78:bc:5d:ff:ea:56:c9:9f:09:99:c2:
                    65:88:8c:d0:9b:9f:cd:5e:d7:58:78:03:44:8e:2e:
                    62:36:ca:e2:a0:eb:b2:a1:4f:b1:27:a5:1d:aa:ad:
                    dd:92:58:b5:79:74:46:da:d8:68:82:98:4c:69:97:
                    c9:ba:f5:e6:17:94:72:80:6f:ab:3b:aa:f7:c6:c0:
                    f8:3d:42:87:62:c5:a5:88:76:21:17:d7:2a:05:78:
                    97:9f:27:5d:38:1a:f1:d4:0e:50:11:e8:f3:d1:01:
                    a4:2f:48:05:61:5d:cf:07:38:b8:a6:24:b0:fd:7f:
                    b3:da:e8:59:87:91:60:51:ea:23:7f:1e:cd:3d:a7:
                    8b:fe:da:16:e2:2e:92:66:90:66:d5:25:2c:40:6f:
                    77:48:14:99:cf:84:18:20:73:1f:82:94:22:9e:9f:
                    2c:2a:fe:c6:02:f8:5c:30:da:0c:d5:2e:6a:09:ac:
                    83:ba:23:b9:dd:58:06:be:7e:4a:16:76:02:1b:09:
                    69:e0:eb:62:61:fa:c9:91:9d:96:76:0a:9b:de:d6:
                    5a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F1:A9:F8:BC:C0:E5:71:A3:35:74:0F:5E:E7:8C:98:35:10:77:E4
            X509v3 Authority Key Identifier:
                keyid:6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33392e302f32342d3234203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:33:3a:1e:ca:1c:61:f1:9b:71:89:7c:89:bc:72:7e:b9:1b:
         0b:b5:dd:f3:fd:36:b8:02:f6:c0:c5:bc:c5:f5:1d:9b:0e:b2:
         37:0d:cf:96:c2:4b:4f:9c:65:2f:61:00:ab:49:a5:79:0f:69:
         56:35:24:65:0a:d2:91:4e:13:d3:20:4a:47:ce:ee:ae:b2:90:
         4e:25:e6:54:09:b1:47:bd:76:1c:dd:67:c5:12:72:0b:5d:61:
         51:a8:bd:cc:9d:83:04:60:99:39:dd:4b:ed:b5:8d:0b:4f:f1:
         cd:ff:10:50:da:60:ea:1d:a2:e7:ce:7b:c6:28:61:f5:bb:1c:
         29:b6:88:8b:0b:4e:3c:81:34:28:17:51:3e:84:3a:ca:38:5f:
         6d:d8:c0:f5:48:6f:58:2e:aa:c3:aa:49:99:38:0c:a3:97:58:
         22:ab:83:2f:c9:09:2d:bd:39:fd:62:a7:01:d4:26:91:81:3b:
         08:d7:c7:cc:f4:21:2b:24:e7:3d:97:ea:e3:6e:ba:c3:b0:c7:
         9f:7b:5d:7c:d6:d1:b6:17:8f:58:33:e1:6e:0b:2c:8d:bc:04:
         4b:c2:9c:30:af:79:a7:ac:d3:7e:1d:15:c6:90:d3:94:20:7d:
         da:0b:a2:fd:d0:ca:13:d8:7f:28:e5:a3:73:9a:d5:6b:4f:b4:
         b0:88:53:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org