Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34382e302f32322d3232203d3e20323634333638.roa
File:                     3133312e3136312e34382e302f32322d3232203d3e20323634333638.roa (raw, json)
Hash identifier:          96sFrpXwFooinK018AQG3XVpNc66KkkjIkvH0TCtZcs=
Subject key identifier:   2D:2E:6F:7D:AF:8F:A1:85:8C:E4:25:4C:84:AA:A3:9B:BC:35:5A:67
Certificate issuer:       /CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
Certificate serial:       2DBC4D7ECE1B499FBDA3349CD026C19A65E88B6A
Authority key identifier: 8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34382e302f32322d3232203d3e20323634333638.roa
Signing time:             Tue 05 Mar 2024 17:59:50 +0000
ROA not before:           Tue 05 Mar 2024 17:54:50 +0000
ROA not after:            Tue 04 Mar 2025 17:59:50 +0000
asID:                     264368
IP address blocks:        131.161.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bc:4d:7e:ce:1b:49:9f:bd:a3:34:9c:d0:26:c1:9a:65:e8:8b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
        Validity
            Not Before: Mar  5 17:54:50 2024 GMT
            Not After : Mar  4 17:59:50 2025 GMT
        Subject: CN=2D2E6F7DAF8FA1858CE4254C84AAA39BBC355A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:fe:f4:d0:3a:05:0b:87:01:59:cf:fd:46:
                    5f:f1:fd:7d:d6:8d:25:a2:e4:1c:75:46:6d:f9:b4:
                    bb:1e:ea:1c:b9:00:13:21:2b:02:98:c9:f5:22:09:
                    d9:d7:50:15:de:8b:01:71:36:20:29:6f:41:32:97:
                    55:3a:ef:17:13:c1:3c:0e:57:d3:8f:f7:ce:1e:c3:
                    29:a6:91:09:3d:d1:5e:45:80:61:e5:6b:b2:06:ed:
                    06:f6:8f:2f:c9:7c:d8:86:ff:07:95:4b:f6:0e:c6:
                    d5:11:f6:8f:d7:9a:68:92:2f:1c:58:38:3a:03:f7:
                    02:3a:b0:1f:1a:3c:5f:2e:60:4e:ac:af:ed:fe:5e:
                    67:1b:bb:8b:b0:e1:fe:18:29:93:ce:5e:fd:e2:a2:
                    17:3b:54:16:3d:77:9e:d0:fb:eb:69:17:82:51:40:
                    59:31:2f:3d:5b:21:31:1a:2e:bf:bb:17:74:68:2b:
                    73:8b:b8:02:5f:0a:89:c9:13:d2:6c:67:bd:e0:3c:
                    19:0e:00:89:22:f2:1f:3e:c9:92:e1:db:ed:b3:fd:
                    a0:52:4a:6a:81:10:fb:f8:6d:b3:25:eb:7b:b6:c7:
                    d5:33:ff:33:98:04:0a:8f:30:0e:e8:48:4e:00:95:
                    af:1b:7a:35:1d:dd:17:6d:56:20:08:f0:ab:8e:05:
                    f8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2E:6F:7D:AF:8F:A1:85:8C:E4:25:4C:84:AA:A3:9B:BC:35:5A:67
            X509v3 Authority Key Identifier:
                keyid:8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34382e302f32322d3232203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:80:c0:8f:8c:89:89:33:87:c3:d3:6b:a0:87:9d:7f:2e:60:
         fd:ec:3a:61:1e:4e:2a:2b:3f:36:d6:64:2e:b7:aa:3a:42:7a:
         cc:d3:2a:6f:83:10:24:8c:ba:7d:89:57:a2:8d:43:4d:6d:c8:
         dc:0e:29:fc:69:a9:02:d0:1d:49:a2:c0:3a:ea:24:0c:4d:71:
         4d:83:10:bb:3a:d2:12:d2:11:35:37:e5:17:31:f0:43:f1:1a:
         1a:9d:31:ef:53:8b:f9:c3:01:5f:b4:4a:a6:a1:fc:71:4a:78:
         4d:74:26:67:1f:5e:cf:d6:f4:75:b3:bf:88:e3:6a:08:ac:78:
         75:cb:59:f3:6a:5f:90:c5:f0:6a:69:3f:c8:52:81:3f:5b:9c:
         92:e0:49:16:ff:ef:27:ef:bb:4b:09:75:3d:d9:d8:c1:83:85:
         35:0c:fd:b3:2f:86:94:25:cf:a9:03:db:08:ac:89:75:9a:11:
         48:eb:bb:16:2c:7f:23:8d:5e:28:47:f1:3f:be:2d:b9:9e:48:
         07:5c:7e:67:3c:a1:97:e9:15:7b:0f:10:71:d0:85:df:a0:32:
         9a:2a:d5:1a:ad:f7:ac:bf:d1:4e:03:1a:48:d3:37:e0:55:ad:
         1b:c4:eb:6b:30:49:26:9b:fb:d8:93:c3:d2:5c:98:6e:0b:19:
         30:c7:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org