Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/3230312e3133312e3135322e302f32322d3234203d3e203631373835.roa
File:                     3230312e3133312e3135322e302f32322d3234203d3e203631373835.roa (raw, json)
Hash identifier:          Mu7V8BDiMsPukuOQGbm+UAcBocR1J8Wk3EBDbdqSe3k=
Subject key identifier:   0C:FE:A7:E8:29:B6:0A:5A:CC:E3:93:10:C2:DB:DD:56:F7:2E:EF:88
Certificate issuer:       /CN=317B2083DA24C1BA69201702A19EDCA376FA0379
Certificate serial:       67FF8F5F2DAC9007C4EDE20E9DA803B44A9D7270
Authority key identifier: 31:7B:20:83:DA:24:C1:BA:69:20:17:02:A1:9E:DC:A3:76:FA:03:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/317B2083DA24C1BA69201702A19EDCA376FA0379.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/3230312e3133312e3135322e302f32322d3234203d3e203631373835.roa
Signing time:             Thu 04 Apr 2024 10:05:15 +0000
ROA not before:           Thu 04 Apr 2024 10:00:15 +0000
ROA not after:            Thu 03 Apr 2025 10:05:15 +0000
asID:                     61785
IP address blocks:        201.131.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ff:8f:5f:2d:ac:90:07:c4:ed:e2:0e:9d:a8:03:b4:4a:9d:72:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317B2083DA24C1BA69201702A19EDCA376FA0379
        Validity
            Not Before: Apr  4 10:00:15 2024 GMT
            Not After : Apr  3 10:05:15 2025 GMT
        Subject: CN=0CFEA7E829B60A5ACCE39310C2DBDD56F72EEF88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:39:21:55:ff:d6:8d:88:92:1f:9f:1a:da:
                    5c:d9:3c:f1:2d:f8:bb:26:42:de:54:1f:a6:c1:7b:
                    94:d6:31:f1:2f:89:b1:3c:92:ad:62:27:3d:06:4b:
                    7a:17:a7:4c:70:c7:03:66:f1:9a:5e:dd:b8:bb:3e:
                    d7:18:09:21:9f:21:ef:5c:7d:e2:98:aa:34:5d:8a:
                    7f:e7:2b:3a:23:04:a6:f2:e0:7d:57:2b:b2:c7:d6:
                    f5:a9:32:e0:07:56:f9:e2:8c:cb:ca:db:f7:fc:b8:
                    92:d6:ac:9c:85:a3:94:91:b9:99:41:be:f4:46:88:
                    e8:d5:71:e8:e4:ce:31:6c:c4:5a:f7:09:b6:1c:db:
                    33:16:3b:eb:db:22:4a:ae:fb:a0:2f:3f:38:c6:8f:
                    fd:b8:19:b9:38:87:17:9c:ca:d3:3c:34:a3:51:05:
                    ee:8b:3a:02:0b:71:90:39:af:24:cf:13:bc:bd:e9:
                    ae:c4:f8:65:87:93:07:5f:92:9f:cf:08:82:d1:34:
                    02:64:51:6c:0d:b3:d9:7d:8d:e0:2a:51:eb:fa:5c:
                    36:48:2e:1c:8c:5c:8f:36:2b:a7:29:b3:79:17:23:
                    88:f9:8f:5d:88:73:bf:47:94:c1:3a:cd:b7:a6:4c:
                    d3:a1:ef:5f:a4:f1:54:3b:dd:8f:f2:f6:29:3e:9c:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FE:A7:E8:29:B6:0A:5A:CC:E3:93:10:C2:DB:DD:56:F7:2E:EF:88
            X509v3 Authority Key Identifier:
                keyid:31:7B:20:83:DA:24:C1:BA:69:20:17:02:A1:9E:DC:A3:76:FA:03:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/317B2083DA24C1BA69201702A19EDCA376FA0379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/317B2083DA24C1BA69201702A19EDCA376FA0379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/3230312e3133312e3135322e302f32322d3234203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:a3:42:81:c3:55:af:f4:ed:dd:06:d4:4a:27:55:4e:e8:ce:
         40:9f:33:dd:32:03:44:57:1b:b1:3f:a2:0d:41:c0:7a:f4:b3:
         80:29:04:87:64:3b:08:92:cc:20:de:38:a3:ec:23:c1:6c:29:
         60:e0:5f:87:25:d8:61:05:d5:75:0c:47:fe:76:69:a3:8b:c4:
         d2:a5:91:18:ab:92:ae:51:01:db:69:0f:2c:04:c0:8b:ed:2b:
         cf:69:3c:5c:a2:62:13:6f:f6:ec:53:9c:82:d7:50:1a:38:ee:
         e0:67:57:82:0e:9e:9a:47:11:fe:12:86:f3:1d:e0:ec:9f:20:
         62:37:a6:66:fc:83:15:57:ee:98:25:a4:31:6f:04:1a:f7:63:
         a2:90:5a:68:ea:a4:38:1c:bf:8e:d7:2c:88:a9:21:5b:7a:60:
         c6:f7:02:9a:f8:81:74:cc:5b:e8:ae:a1:f7:b5:a2:b1:61:12:
         df:8f:f8:ad:9b:93:73:50:ae:d1:93:3f:cc:4b:b0:7f:23:b4:
         5d:37:5b:0b:61:59:eb:90:ef:43:44:57:17:b6:d5:47:f8:fb:
         34:e2:8b:bb:b4:c3:31:ae:21:4b:c4:47:ea:c2:89:c7:4b:b6:
         fc:74:0e:ce:5b:d9:cb:23:e0:e2:5b:93:d5:60:2d:0b:04:fb:
         ec:ef:36:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org