Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3232203d3e20323634343034.roa
File:                     3133312e3136312e3232382e302f32322d3232203d3e20323634343034.roa (raw, json)
Hash identifier:          qwhVQ4+v3Tbzr5fM8XdYpvjpJReIQalorGQDAQ0pEzM=
Subject key identifier:   70:50:85:6C:41:14:7A:29:0C:38:AB:A8:7D:80:BF:A5:22:EA:9D:A8
Certificate issuer:       /CN=9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6
Certificate serial:       3BC8C9BA4F106B8607EA165435E03FE18E646225
Authority key identifier: 9E:7F:85:E6:64:5B:79:3C:FE:0D:1D:98:7C:09:FB:13:7B:FB:F7:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3232203d3e20323634343034.roa
Signing time:             Fri 20 Oct 2023 14:40:13 +0000
ROA not before:           Fri 20 Oct 2023 14:35:13 +0000
ROA not after:            Fri 18 Oct 2024 14:40:13 +0000
asID:                     264404
IP address blocks:        131.161.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c8:c9:ba:4f:10:6b:86:07:ea:16:54:35:e0:3f:e1:8e:64:62:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6
        Validity
            Not Before: Oct 20 14:35:13 2023 GMT
            Not After : Oct 18 14:40:13 2024 GMT
        Subject: CN=7050856C41147A290C38ABA87D80BFA522EA9DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:af:46:8f:02:c1:09:a7:c2:43:7c:10:cd:
                    11:2e:c9:47:99:02:e6:ec:0c:ae:ba:99:82:62:86:
                    b3:94:c0:92:18:ae:44:db:2d:ba:a6:5c:ab:ed:b9:
                    66:a0:41:4e:c2:a4:c5:c7:9e:d8:2c:e5:c9:f0:fc:
                    80:66:61:0b:75:14:a6:09:e8:06:4b:4e:8c:9b:17:
                    c7:f2:db:d4:b0:a9:40:35:68:24:10:db:94:78:3b:
                    ec:2c:fb:ff:b2:f9:c2:dc:81:3f:4c:4a:ea:aa:89:
                    df:6c:36:ac:77:b6:5c:e6:df:e7:81:ba:65:a2:a8:
                    ab:a4:ba:9a:46:bc:62:e4:c7:06:dc:ad:a7:e7:70:
                    4b:7a:0f:ec:87:25:2c:ff:fb:0f:22:ff:41:21:c7:
                    2d:f9:aa:85:9e:58:7a:cd:f8:e5:26:72:21:43:4a:
                    07:5e:b7:09:47:f6:00:9b:c2:44:ec:17:af:2b:32:
                    09:a8:8b:96:be:29:95:a8:b5:d1:90:78:29:cb:20:
                    88:c9:e9:e8:38:55:94:02:ca:dc:8d:b0:54:a8:5e:
                    fc:8c:f6:52:9e:00:bc:6f:3c:90:6c:2f:5e:c8:e3:
                    21:81:11:b4:ed:76:32:27:65:7b:ff:d8:78:c7:7d:
                    82:ec:0b:7b:fc:e7:3c:41:f5:22:c5:49:e7:58:18:
                    09:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:50:85:6C:41:14:7A:29:0C:38:AB:A8:7D:80:BF:A5:22:EA:9D:A8
            X509v3 Authority Key Identifier:
                keyid:9E:7F:85:E6:64:5B:79:3C:FE:0D:1D:98:7C:09:FB:13:7B:FB:F7:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3232203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:c9:61:6d:3b:4e:77:66:61:85:ff:46:89:e7:b2:77:9c:b8:
         49:7e:ec:aa:aa:d8:ea:b8:49:3f:70:0b:2c:93:fd:ff:58:bc:
         b7:4c:53:30:b9:b6:20:c4:08:43:ef:37:dc:f2:1f:ce:40:31:
         a6:13:e2:94:94:c3:f5:bc:27:53:10:68:99:57:d1:41:ee:5d:
         3f:a1:33:63:f0:e8:48:ba:fb:e0:8f:9b:30:5c:3e:3b:fb:cb:
         86:68:fd:c3:bf:93:8e:ea:81:ef:8d:d6:bf:95:5f:6a:dc:45:
         8b:d4:fe:38:9a:2c:43:76:4d:86:39:6d:f9:56:1f:f5:12:5f:
         60:6a:6a:dc:1a:0b:e1:50:1e:b2:ad:8b:1c:b7:45:97:5d:9e:
         26:9c:d5:88:cf:b5:25:60:ca:f9:1a:51:d1:a0:02:54:d0:3f:
         3f:59:b8:0e:0a:a6:f3:8b:5b:dc:d5:f0:e9:ec:34:9a:5e:1d:
         2c:6a:e9:d6:91:65:f6:fc:da:e1:7e:49:59:bc:c1:9e:a5:51:
         c7:fd:e9:f4:11:2a:80:f6:d7:9e:3c:30:2a:4a:06:a8:e2:3c:
         0e:c0:a6:ef:01:19:1b:a3:40:6a:5d:ff:7f:81:c0:68:34:9d:
         5a:b0:2f:39:d7:97:9a:bb:c1:5a:3f:e1:ee:7f:29:d4:76:ad:
         05:71:6e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org