Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e35302e302f32342d3234203d3e20323634333638.roa
File:                     3133312e3136312e35302e302f32342d3234203d3e20323634333638.roa (raw, json)
Hash identifier:          NSH9q8cnI4anl16Fwvq0U8ws/G36whwEAogFUA7RiiI=
Subject key identifier:   39:24:36:7F:65:F1:8F:36:9E:D5:3D:D8:D0:D2:37:4E:4B:B4:DC:00
Certificate issuer:       /CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
Certificate serial:       385B9BD78F77F08596A41E836516A6D39477215F
Authority key identifier: 8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e35302e302f32342d3234203d3e20323634333638.roa
Signing time:             Tue 05 Mar 2024 17:59:51 +0000
ROA not before:           Tue 05 Mar 2024 17:54:51 +0000
ROA not after:            Tue 04 Mar 2025 17:59:51 +0000
asID:                     264368
IP address blocks:        131.161.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5b:9b:d7:8f:77:f0:85:96:a4:1e:83:65:16:a6:d3:94:77:21:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
        Validity
            Not Before: Mar  5 17:54:51 2024 GMT
            Not After : Mar  4 17:59:51 2025 GMT
        Subject: CN=3924367F65F18F369ED53DD8D0D2374E4BB4DC00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:14:57:7d:f6:d1:06:bc:6a:b0:07:da:a2:0f:
                    8e:2d:d2:df:87:7d:2e:51:a5:0d:1f:2a:33:8f:0b:
                    44:3e:d4:5b:cc:1f:4c:0e:b6:5d:74:8c:df:ff:29:
                    3a:c2:d2:a3:4d:84:d0:dc:06:1a:b4:71:b2:b2:69:
                    f8:2d:ea:16:98:1e:a0:1f:df:13:a5:ef:aa:e9:75:
                    2a:30:c7:a6:e3:c5:2e:1d:51:e0:07:96:e2:1f:02:
                    c0:5b:27:d8:5f:57:07:ad:ce:8f:fe:0e:b5:32:08:
                    ee:28:16:bf:a7:a9:09:53:17:bb:d5:71:ab:6f:06:
                    20:d8:41:be:d5:13:75:20:23:41:5a:1b:eb:d0:8e:
                    19:e0:13:8c:6f:98:70:ec:fe:32:7d:55:be:3b:83:
                    3b:99:ac:a4:27:6d:0c:5e:be:26:0d:ee:c4:7d:02:
                    0d:8b:d0:06:f8:52:57:3b:64:a5:5d:b5:19:aa:50:
                    b6:84:66:41:98:6a:3d:50:6f:d0:ad:80:94:4a:cc:
                    a5:94:2f:8c:bb:91:29:38:95:42:35:07:e6:7f:56:
                    9b:71:18:80:ba:2e:4b:7d:d9:2e:17:e0:4a:93:09:
                    3b:bc:7d:77:9e:b5:a8:74:b8:bc:6d:50:13:9a:13:
                    fe:66:63:6c:a8:b1:b0:d1:46:b6:b9:c1:17:d5:2b:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:24:36:7F:65:F1:8F:36:9E:D5:3D:D8:D0:D2:37:4E:4B:B4:DC:00
            X509v3 Authority Key Identifier:
                keyid:8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e35302e302f32342d3234203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:c0:bb:88:b0:54:b5:6f:5a:e8:34:46:b5:e9:23:16:86:34:
         e7:4e:ea:31:95:22:04:fc:96:56:eb:e8:31:3b:ff:a3:4d:75:
         ea:60:fd:a5:db:12:41:c6:7f:6a:69:96:b8:8a:b9:98:31:61:
         9b:95:b2:1f:dd:71:9e:00:de:2b:39:58:ae:df:a7:ba:8e:dd:
         6d:db:2c:45:1f:7b:56:3f:73:88:17:b5:59:16:49:60:86:0b:
         3d:db:84:34:53:7b:06:44:bb:0a:8d:41:b4:76:8f:62:84:d8:
         4c:e7:17:29:4f:0e:a5:81:2b:5e:46:79:51:17:78:a2:c0:e4:
         e1:96:11:e9:b6:2a:e9:e7:b5:9d:ee:aa:20:56:64:27:1a:2b:
         34:64:c2:75:ab:fe:2b:32:59:6d:a1:1e:b6:b7:a5:6d:83:d8:
         5c:e8:b0:33:c7:4c:d0:a6:a9:de:ef:45:67:1d:0a:b3:cf:df:
         9e:f9:3d:bd:09:15:9c:bf:a4:34:09:d5:81:91:7e:48:d0:6b:
         23:e2:20:88:97:9e:23:e2:74:93:55:c0:7f:40:73:8b:a6:42:
         57:b4:6e:cb:1f:6e:3a:a0:39:1c:02:af:19:8b:1a:62:ba:bc:
         9b:44:09:44:14:d8:c4:40:19:8e:e1:42:89:77:7f:e2:52:d9:
         3d:f5:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org