Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa
File:                     3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa (raw, json)
Hash identifier:          3ARM03ujc+THUoA3mLvbPyfyeK5KhRvZ8StNwMJ3NNY=
Subject key identifier:   47:19:7D:65:09:8F:F6:F1:5F:CE:E3:20:11:FF:69:95:02:59:F1:9E
Certificate issuer:       /CN=1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437
Certificate serial:       1B173CEDE8BF22BE189499B83F99CFE9F4131375
Authority key identifier: 1B:EC:76:29:C7:FA:AF:B4:C8:F7:87:4D:1A:6B:BC:0A:28:2D:44:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa
Signing time:             Mon 29 Jan 2024 17:00:00 +0000
ROA not before:           Mon 29 Jan 2024 16:55:00 +0000
ROA not after:            Mon 27 Jan 2025 17:00:00 +0000
asID:                     265905
IP address blocks:        131.196.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:17:3c:ed:e8:bf:22:be:18:94:99:b8:3f:99:cf:e9:f4:13:13:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437
        Validity
            Not Before: Jan 29 16:55:00 2024 GMT
            Not After : Jan 27 17:00:00 2025 GMT
        Subject: CN=47197D65098FF6F15FCEE32011FF69950259F19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:30:9f:b4:21:4a:33:83:fe:03:d2:7f:56:61:
                    87:4f:85:93:27:85:0e:56:77:cf:3b:2a:56:a0:5b:
                    dd:6a:0a:a9:5d:e6:66:e1:2e:57:2a:9e:4f:50:af:
                    f4:b0:a3:b5:33:5d:28:93:c5:ae:30:12:43:7e:b0:
                    71:54:bd:1a:32:08:bc:bb:30:8c:47:a7:96:5f:8f:
                    24:2e:d4:98:09:10:1a:c5:ec:34:46:66:92:7f:fb:
                    ee:4e:a4:48:88:43:cc:83:ed:bd:b7:4c:1e:d8:6f:
                    fa:55:c2:34:1d:28:2c:91:32:4a:46:5c:cb:8c:c8:
                    42:17:91:74:5c:89:c2:85:63:3d:4d:6c:a1:69:bc:
                    e9:b1:6d:cd:af:a4:76:a6:b9:ee:f4:f2:a3:50:7c:
                    82:71:ca:d5:13:9f:b1:6b:68:2a:01:bd:b5:86:b5:
                    fb:5c:3b:7b:92:79:63:65:e3:a4:3d:22:cf:00:e6:
                    72:bf:c6:98:00:19:08:46:35:7f:73:5c:dc:50:9c:
                    f9:dd:55:86:ad:d6:2d:93:70:5e:05:00:17:91:d7:
                    a0:d2:a8:55:d1:bd:7f:1d:f8:46:1b:36:25:7b:d2:
                    7c:09:94:41:c4:dc:a4:6c:58:1e:b5:f6:8d:45:bc:
                    76:a1:bf:80:1f:36:9c:34:c8:39:4c:1d:df:2d:23:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:19:7D:65:09:8F:F6:F1:5F:CE:E3:20:11:FF:69:95:02:59:F1:9E
            X509v3 Authority Key Identifier:
                keyid:1B:EC:76:29:C7:FA:AF:B4:C8:F7:87:4D:1A:6B:BC:0A:28:2D:44:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:ff:de:84:b3:58:f3:7c:d1:b0:e0:7d:c3:3c:ba:2c:c3:
         d2:59:88:3c:af:dd:f4:53:d3:c2:57:c0:c5:9b:06:fb:31:00:
         ce:8e:69:b6:71:c8:80:3d:57:c1:99:58:6d:27:19:92:51:7e:
         c7:aa:87:45:d7:0c:ad:74:8c:02:d2:18:44:13:07:03:4c:55:
         e8:f3:0d:88:1f:59:f9:e7:85:6e:67:e1:69:db:19:08:ec:5d:
         ba:d7:7d:c2:30:4c:cc:68:f9:82:b6:ad:c7:fb:23:a5:18:53:
         a7:44:b9:de:6c:9a:4a:8e:8c:fd:8a:3a:b2:a0:fa:c1:5e:af:
         44:dc:49:0a:89:cf:d3:41:64:80:e5:eb:61:c2:e7:d6:65:c0:
         e9:95:d0:44:9b:0b:bc:49:21:b6:f1:8d:8d:cc:c3:b5:d2:fd:
         d0:72:b6:64:04:27:48:26:9a:c6:11:6b:0d:4b:9e:a2:a1:88:
         06:55:6f:67:b8:0c:4f:87:d5:08:0e:ce:d9:64:d1:15:61:da:
         a1:96:f5:d7:7e:80:8d:bf:ac:fe:36:22:75:b3:2e:ed:73:da:
         48:ca:f7:01:ea:43:5a:fa:13:06:c2:c9:5f:ae:7a:ba:0e:a9:
         7f:62:8d:6e:c7:a6:fd:f8:7d:9d:7d:e4:9e:c1:90:f3:af:0e:
         34:81:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org