Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3133312e302e36342e302f32322d3234203d3e203631383537.roa
File:                     3133312e302e36342e302f32322d3234203d3e203631383537.roa (raw, json)
Hash identifier:          vKGLEAmPcYKlrtcZHICVhzwka3JC9SRDS2u5zNWPZnI=
Subject key identifier:   E3:09:1D:D8:4D:0B:F6:27:79:9B:51:05:FD:CB:41:FC:03:6A:F8:1A
Certificate issuer:       /CN=EDBB71BFB5C814DA471F371C214CD6D1C45122E9
Certificate serial:       23515DBD0FCFA95B4AAB863BFB7AD97222E3F025
Authority key identifier: ED:BB:71:BF:B5:C8:14:DA:47:1F:37:1C:21:4C:D6:D1:C4:51:22:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDBB71BFB5C814DA471F371C214CD6D1C45122E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3133312e302e36342e302f32322d3234203d3e203631383537.roa
Signing time:             Thu 14 Jul 2022 20:00:00 +0000
ROA not before:           Thu 14 Jul 2022 19:55:00 +0000
ROA not after:            Thu 13 Jul 2023 20:00:00 +0000
asID:                     61857
IP address blocks:        131.0.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:51:5d:bd:0f:cf:a9:5b:4a:ab:86:3b:fb:7a:d9:72:22:e3:f0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDBB71BFB5C814DA471F371C214CD6D1C45122E9
        Validity
            Not Before: Jul 14 19:55:00 2022 GMT
            Not After : Jul 13 20:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:6c:aa:92:fc:4e:9b:39:a1:a4:6e:57:1c:
                    74:1b:cc:7b:4e:1a:91:83:a1:4c:08:68:81:1c:0a:
                    30:da:d8:63:dc:1f:65:5b:90:59:5e:4f:07:be:82:
                    f3:84:29:e6:10:60:91:89:9c:43:24:65:4a:89:af:
                    f7:a2:a9:30:81:f4:94:8a:e1:fd:93:d5:2c:9a:b9:
                    43:25:a5:d6:58:88:b6:43:9e:a1:06:3a:85:f9:26:
                    5f:a4:1d:16:d7:18:e5:01:f4:8d:49:b8:91:2a:4d:
                    f6:df:c8:34:d3:52:b7:34:d4:ed:5d:26:90:cf:54:
                    62:5e:08:be:10:07:4e:6d:85:03:1b:95:71:da:2a:
                    6c:0d:5a:57:ce:c8:d5:24:35:6e:d3:e0:c0:ec:ad:
                    8c:d3:a1:e3:32:dd:aa:3a:1c:f5:51:bf:d7:fc:37:
                    51:e2:33:06:e9:48:23:26:cc:7a:9c:a1:c8:ba:08:
                    5b:e0:47:ca:a8:62:64:30:a8:36:5a:06:23:86:bf:
                    43:22:a7:84:f4:c4:7e:30:a1:90:70:45:91:5a:f4:
                    17:6a:ac:01:b6:82:36:0d:21:03:c5:13:3f:71:1b:
                    76:8a:06:61:1a:5a:7b:8d:0f:0d:9f:c6:11:f1:94:
                    d3:8e:34:c6:1a:66:1e:e9:b9:e7:6c:03:42:63:8c:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:09:1D:D8:4D:0B:F6:27:79:9B:51:05:FD:CB:41:FC:03:6A:F8:1A
            X509v3 Authority Key Identifier:
                keyid:ED:BB:71:BF:B5:C8:14:DA:47:1F:37:1C:21:4C:D6:D1:C4:51:22:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/EDBB71BFB5C814DA471F371C214CD6D1C45122E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDBB71BFB5C814DA471F371C214CD6D1C45122E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3133312e302e36342e302f32322d3234203d3e203631383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:97:75:3e:4b:73:f1:61:0c:a1:ed:71:d0:4b:8f:93:0f:69:
         2e:e6:3b:87:98:32:25:44:bb:10:a3:f3:58:cb:82:34:e8:b8:
         c4:f7:e0:c7:2e:a2:c9:dd:ea:d1:23:ac:92:71:ee:07:80:31:
         b9:6f:7b:8d:17:a5:b3:80:e3:2c:86:6a:85:94:31:32:67:27:
         a9:50:eb:79:c1:73:57:74:10:26:8a:e1:2e:4b:69:70:89:6d:
         4d:9b:27:53:07:9e:4f:ed:9e:fe:56:4f:58:b7:e8:a5:01:94:
         1d:16:06:39:5c:f2:8a:c9:9e:2e:f3:67:f2:33:97:1c:68:40:
         30:02:a6:5c:f5:9c:f2:0f:f6:90:56:f1:6a:16:04:57:57:72:
         2b:9c:76:31:b3:db:22:b5:f3:b7:20:9c:ec:6e:04:44:a4:56:
         d5:7e:9b:e6:4a:3f:25:6b:ee:1c:f8:e2:10:e8:bf:d6:46:83:
         27:08:04:bc:fd:fa:6b:07:ae:2b:dc:60:64:c1:17:fe:62:f7:
         03:ba:12:d6:39:98:08:de:82:54:c3:39:d6:4e:a4:86:56:39:
         a4:b1:bc:79:e1:1c:dd:a6:5e:41:e3:88:03:8e:4b:9d:e6:80:
         5f:a3:8a:64:f6:38:12:02:1f:19:80:80:fb:7c:32:36:59:25:
         58:c2:25:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org