Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135342e302f32332d3233203d3e20323730393436.roa
File:                     3133312e3130382e3135342e302f32332d3233203d3e20323730393436.roa (raw, json)
Hash identifier:          pcwHaSXFnwrHv54VVePhN/+4DEChMiarjh4WMG0BH1g=
Subject key identifier:   D8:6B:9D:FC:4B:69:EA:24:08:70:75:5B:ED:63:00:62:99:13:3C:53
Certificate issuer:       /CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Certificate serial:       53ED31DF8366B03CBE17C595621C1F281A420478
Authority key identifier: 87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135342e302f32332d3233203d3e20323730393436.roa
Signing time:             Sat 17 Feb 2024 05:23:53 +0000
ROA not before:           Sat 17 Feb 2024 05:18:53 +0000
ROA not after:            Sat 15 Feb 2025 05:23:53 +0000
asID:                     270946
IP address blocks:        131.108.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ed:31:df:83:66:b0:3c:be:17:c5:95:62:1c:1f:28:1a:42:04:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
        Validity
            Not Before: Feb 17 05:18:53 2024 GMT
            Not After : Feb 15 05:23:53 2025 GMT
        Subject: CN=D86B9DFC4B69EA240870755BED63006299133C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4f:f8:a5:7a:53:ed:ae:c2:9c:b9:62:9a:9e:
                    84:a7:e0:ec:57:68:b3:6d:8e:26:87:32:6d:4c:d2:
                    ce:3d:14:49:5a:2b:ab:16:ae:8f:0b:47:8c:db:ee:
                    21:58:78:aa:1e:01:4f:c4:0a:f6:56:28:2b:c1:cd:
                    2b:de:be:3e:27:a5:17:fe:15:46:c2:e3:ed:77:79:
                    e2:4f:e2:00:70:19:dd:4c:50:b7:8e:9f:d4:d2:4f:
                    d2:3a:07:55:be:65:47:c5:b2:bb:ff:7b:db:56:9c:
                    fc:29:0c:fb:c6:a9:57:d1:4d:13:18:d7:e0:a9:0b:
                    fc:64:aa:f0:d8:88:8e:c4:f5:6e:a4:0d:73:ec:a6:
                    4d:6a:95:bd:9f:6c:03:97:1c:98:eb:9d:93:39:97:
                    64:be:08:05:7f:ff:17:78:02:d7:69:cf:c2:4d:60:
                    59:16:06:52:b7:d4:b5:01:a1:e1:d6:92:6f:30:67:
                    05:d6:b3:27:68:63:91:03:b9:72:2e:f9:a2:65:50:
                    69:b5:21:3f:1b:38:c5:25:6e:1b:dc:b9:a4:a1:ed:
                    dd:b0:cb:b2:51:3e:0e:34:c7:5f:60:09:12:ed:44:
                    2e:2b:ee:da:f7:57:ed:71:ab:11:89:0a:0a:91:63:
                    c8:fd:7b:b8:32:69:58:a0:44:3b:19:b6:3f:c4:9b:
                    1f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6B:9D:FC:4B:69:EA:24:08:70:75:5B:ED:63:00:62:99:13:3C:53
            X509v3 Authority Key Identifier:
                keyid:87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135342e302f32332d3233203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:a8:ff:89:85:03:84:d9:28:62:9e:6f:a4:f7:fd:6c:a9:79:
         3d:88:19:a3:bb:ab:43:ef:19:1e:4c:58:45:26:44:02:18:c3:
         f7:f1:ad:5b:2f:13:34:18:6a:d2:bd:35:76:fa:1d:f9:d4:1e:
         1e:99:3b:f3:0b:a1:89:45:01:e6:7a:c6:32:bb:93:26:5c:53:
         c2:00:89:aa:2c:01:97:1d:77:f4:85:55:d3:25:2f:50:0c:0d:
         cd:f0:4f:4b:5f:8f:a1:12:1a:1b:c8:5c:d9:3d:07:dd:0d:04:
         fc:28:81:38:f0:fd:b7:68:4d:ac:32:16:45:14:5b:b0:63:98:
         26:87:01:83:34:fa:0b:d1:64:d9:4a:30:65:53:04:34:1c:d3:
         64:74:7c:3c:59:f0:c6:fc:5d:39:e3:81:fa:1e:e6:a1:38:39:
         10:5e:d7:bb:47:40:db:3d:3d:92:5e:c8:d2:ca:bb:32:34:4b:
         97:e9:de:4b:b0:20:96:14:34:90:8c:bd:dc:a5:73:24:c8:a5:
         b8:67:ca:ed:58:e3:02:08:f5:6e:ce:95:90:7a:01:f5:26:0c:
         2e:4e:09:ab:3c:4f:74:10:69:21:92:10:d9:b3:45:cb:8a:4d:
         0a:ae:b3:98:7e:c4:3a:d2:a1:06:30:cf:7d:58:4b:cc:30:23:
         b1:b6:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org