Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e34382e302f32322d3234203d3e203631383832.roa
File:                     3133312e302e34382e302f32322d3234203d3e203631383832.roa (raw, json)
Hash identifier:          1YIHkIotGQeuK0Ak074Je+zwjkDGOuXWC39YYjCrFqo=
Subject key identifier:   A9:7A:93:82:BF:29:66:A5:E9:6F:DC:AE:DC:BE:AC:BC:2F:61:27:A1
Certificate issuer:       /CN=1D99E9AD3D637A53C85C20B4682E7BA1FB03F453
Certificate serial:       1971A47495E4344A55E42194F184392142ABDFB0
Authority key identifier: 1D:99:E9:AD:3D:63:7A:53:C8:5C:20:B4:68:2E:7B:A1:FB:03:F4:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e34382e302f32322d3234203d3e203631383832.roa
Signing time:             Mon 08 Apr 2024 19:24:16 +0000
ROA not before:           Mon 08 Apr 2024 19:19:16 +0000
ROA not after:            Mon 07 Apr 2025 19:24:16 +0000
asID:                     61882
IP address blocks:        131.0.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:71:a4:74:95:e4:34:4a:55:e4:21:94:f1:84:39:21:42:ab:df:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D99E9AD3D637A53C85C20B4682E7BA1FB03F453
        Validity
            Not Before: Apr  8 19:19:16 2024 GMT
            Not After : Apr  7 19:24:16 2025 GMT
        Subject: CN=A97A9382BF2966A5E96FDCAEDCBEACBC2F6127A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:2c:0a:6a:9b:12:92:fb:bc:b2:78:47:45:
                    f1:4a:0a:0a:c0:52:eb:76:0a:a3:74:73:08:28:c6:
                    4e:e4:f7:5a:0b:d7:55:2f:72:e9:69:40:b9:dd:c2:
                    c3:e3:85:ae:1d:60:b9:1f:a3:16:ba:4a:e0:ae:9c:
                    e2:af:d7:11:9e:ad:59:27:e6:01:d3:66:95:54:6b:
                    4f:89:82:f5:49:4d:fe:34:f6:25:10:bb:60:ed:2e:
                    ab:35:48:84:5e:b6:e9:42:f2:a6:cb:83:74:d1:12:
                    d8:4a:33:91:99:8e:5a:25:f0:6d:ee:e2:d5:60:ab:
                    04:ab:66:a7:3e:00:86:7d:be:79:89:b6:8e:ba:fd:
                    af:6d:2b:e1:59:29:ba:7e:6e:9a:07:85:58:70:35:
                    93:bc:53:e7:f9:9c:55:ac:bd:aa:01:d1:fe:1f:68:
                    17:00:3c:27:af:ba:58:c6:33:5a:88:99:36:37:68:
                    11:d2:54:8d:40:fa:10:d2:ea:13:5e:5a:46:19:93:
                    be:da:4a:fb:9f:b4:30:ce:e7:41:ff:7f:b2:0b:6f:
                    45:0d:98:4e:09:f2:28:d8:e1:75:7f:39:6f:ce:28:
                    47:3c:89:3b:a8:9c:40:99:5a:50:0e:28:0b:6e:0c:
                    c4:3a:bb:a7:d4:b2:bb:06:29:bc:d4:14:7e:cf:22:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7A:93:82:BF:29:66:A5:E9:6F:DC:AE:DC:BE:AC:BC:2F:61:27:A1
            X509v3 Authority Key Identifier:
                keyid:1D:99:E9:AD:3D:63:7A:53:C8:5C:20:B4:68:2E:7B:A1:FB:03:F4:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e34382e302f32322d3234203d3e203631383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:88:90:13:3d:f2:de:b5:34:7e:4e:53:95:31:ee:a5:be:fc:
         32:d5:a8:c0:fe:d7:6f:f4:86:c9:f8:85:bf:60:de:23:0a:2b:
         92:9c:87:42:ed:04:e1:8e:78:b7:6a:12:d1:5b:a7:16:27:4c:
         23:0f:c2:8d:e9:e3:24:11:d8:2f:1a:f1:76:2c:84:7a:28:7c:
         25:a6:d7:c9:1c:44:ae:c7:56:62:d1:39:a3:85:ae:b2:24:ba:
         9f:91:14:77:8b:ae:13:80:77:21:5f:cb:47:73:81:b8:13:e5:
         52:01:4a:49:39:38:d5:4f:9c:39:b4:47:4f:70:f7:36:ca:a8:
         80:22:fb:28:fe:02:27:5c:fa:a0:76:32:66:85:3f:84:af:ca:
         9f:f5:e7:5e:aa:39:ce:dc:2f:46:b4:68:5d:11:a7:3a:5b:9e:
         2f:9d:b1:ce:0d:07:09:dc:c5:07:3f:c9:b9:ce:43:b1:7b:0e:
         84:12:6c:6c:78:fc:e3:41:0c:09:a4:86:74:ce:7c:2e:32:04:
         52:5f:14:b2:02:77:da:04:bc:6d:16:7c:41:49:7d:97:dc:cf:
         f7:13:94:4c:5a:b7:33:94:53:0c:6c:a0:ee:36:b1:8c:83:2a:
         16:af:5d:3c:e1:fe:dc:e4:ea:c6:52:38:5c:0b:f5:03:6f:1d:
         e9:38:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org