Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/3133312e302e34302e302f32322d3234203d3e203631383536.roa
File:                     3133312e302e34302e302f32322d3234203d3e203631383536.roa (raw, json)
Hash identifier:          gjDUJ3Zo7Y8RomdUsT9o50MpPhJfLwbwRbr2BES34bg=
Subject key identifier:   04:08:09:F8:42:BE:47:FF:39:6A:59:F2:E9:64:06:80:63:80:57:86
Certificate issuer:       /CN=AF8669C40A1705DDF9FF8B1C94EE047AB500F37E
Certificate serial:       49E326B86F2E6510343B2884F4832D8A12A10801
Authority key identifier: AF:86:69:C4:0A:17:05:DD:F9:FF:8B:1C:94:EE:04:7A:B5:00:F3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/3133312e302e34302e302f32322d3234203d3e203631383536.roa
Signing time:             Tue 22 Aug 2023 15:25:39 +0000
ROA not before:           Tue 22 Aug 2023 15:20:39 +0000
ROA not after:            Tue 20 Aug 2024 15:25:39 +0000
asID:                     61856
IP address blocks:        131.0.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e3:26:b8:6f:2e:65:10:34:3b:28:84:f4:83:2d:8a:12:a1:08:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF8669C40A1705DDF9FF8B1C94EE047AB500F37E
        Validity
            Not Before: Aug 22 15:20:39 2023 GMT
            Not After : Aug 20 15:25:39 2024 GMT
        Subject: CN=040809F842BE47FF396A59F2E964068063805786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:41:08:09:29:60:80:28:12:55:0d:46:f3:85:
                    0e:40:54:df:81:17:9b:f6:c8:2f:58:de:fc:bd:7c:
                    b1:50:45:bf:f1:fc:e4:76:79:49:59:f6:b6:ef:45:
                    39:fe:11:15:c0:c6:48:4b:e3:1c:fd:96:cf:5b:cb:
                    ad:ee:d9:a3:c9:2f:8a:3b:43:12:9f:b9:d4:3b:e4:
                    03:2f:6d:2e:e7:39:1d:94:d1:e0:3c:d5:e7:cb:9a:
                    b3:a9:45:48:c5:75:11:89:f1:b0:3f:ce:43:32:62:
                    0e:b2:df:36:e0:da:ab:f9:ae:a7:8d:9d:90:2d:84:
                    7f:b8:11:82:0f:a6:15:62:df:91:65:5f:48:5b:3f:
                    8c:2f:82:7c:9e:fb:28:e9:6e:2b:99:bc:f0:52:da:
                    77:a5:44:d0:ae:5e:5d:af:c9:ca:f2:6d:a4:f9:5e:
                    47:4b:8f:48:57:27:39:b9:4a:eb:4c:1c:eb:a9:c0:
                    5c:3e:d4:1c:84:08:0b:57:d4:6e:87:3e:a4:f3:cc:
                    33:28:34:39:10:75:99:bd:a7:8e:dd:27:26:65:e2:
                    14:73:f6:63:16:7a:69:8d:11:c0:c9:9d:d2:dc:8e:
                    3e:69:f9:44:b0:16:1f:eb:18:4c:ce:21:af:b1:62:
                    9a:ec:c8:46:d9:c0:a8:b2:51:2b:2f:a4:be:c0:c9:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:08:09:F8:42:BE:47:FF:39:6A:59:F2:E9:64:06:80:63:80:57:86
            X509v3 Authority Key Identifier:
                keyid:AF:86:69:C4:0A:17:05:DD:F9:FF:8B:1C:94:EE:04:7A:B5:00:F3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/3133312e302e34302e302f32322d3234203d3e203631383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:ee:66:3b:53:78:a5:4f:f7:03:9f:aa:5d:80:8f:da:1c:f9:
         d6:cb:ba:78:75:57:38:07:e3:6b:14:9a:fe:8c:49:fc:50:7a:
         44:f6:9d:c4:74:6a:66:9c:5f:2c:21:0c:57:29:f3:39:6a:96:
         35:33:52:a8:ae:c9:1b:75:78:89:7b:c7:91:dd:74:b0:54:37:
         26:d2:13:74:c5:1c:76:04:3d:41:c5:8d:f1:bd:36:08:54:ae:
         f0:e7:5b:f3:df:8b:fa:65:21:a9:1a:b1:c6:84:04:36:de:82:
         41:6a:8b:89:89:be:8a:1b:1b:d6:cd:5a:d3:1a:de:dc:cd:ba:
         34:68:37:dc:da:b5:86:90:38:d9:8e:a1:e0:48:47:87:59:64:
         c7:a3:4e:00:5b:88:9f:d5:bc:03:36:f8:bf:52:26:c2:ad:2c:
         e7:54:2d:30:91:46:ec:9d:a8:fc:c2:3e:f5:e5:e0:f6:42:55:
         51:c4:f5:4e:5a:d7:a7:b7:09:ed:5d:fb:12:20:4c:a6:44:a1:
         81:bb:d3:7c:dc:a3:ff:78:8c:dc:5e:50:ee:9f:cf:60:5d:cf:
         f3:b1:e1:11:bc:ff:d9:ab:63:32:4c:c9:27:24:e0:6b:52:cf:
         a4:7f:52:f0:31:d7:8e:86:74:40:2b:82:57:95:2b:36:48:5b:
         30:b1:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org