Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32322d3234203d3e203631363333.roa
File:                     3133312e3130302e3134382e302f32322d3234203d3e203631363333.roa (raw, json)
Hash identifier:          Hs4RNUmFfBmJytJ8tQ0eHt6Bnx2GyYx2GI7l6kQAiJc=
Subject key identifier:   8E:1F:A7:21:8F:E4:4F:10:CA:30:F3:F4:AF:CD:B3:54:53:D3:4C:9B
Certificate issuer:       /CN=CDE7AD619ADE061F54FC38424291FA04B034E709
Certificate serial:       74B029B44B0EE3598CF73B988C6DA2975AFFFD0A
Authority key identifier: CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32322d3234203d3e203631363333.roa
Signing time:             Wed 10 Apr 2024 13:32:14 +0000
ROA not before:           Wed 10 Apr 2024 13:27:14 +0000
ROA not after:            Wed 09 Apr 2025 13:32:14 +0000
asID:                     61633
IP address blocks:        131.100.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b0:29:b4:4b:0e:e3:59:8c:f7:3b:98:8c:6d:a2:97:5a:ff:fd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE7AD619ADE061F54FC38424291FA04B034E709
        Validity
            Not Before: Apr 10 13:27:14 2024 GMT
            Not After : Apr  9 13:32:14 2025 GMT
        Subject: CN=8E1FA7218FE44F10CA30F3F4AFCDB35453D34C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:c1:ac:a0:f5:c5:0e:ec:85:ec:05:08:5a:
                    f2:12:98:1b:35:1c:c9:0d:a9:83:e4:55:74:87:f5:
                    1d:cb:25:4b:6f:9d:96:aa:b7:3f:45:5b:96:5b:4c:
                    02:cd:15:69:79:8e:48:7e:a8:53:56:f4:b7:5b:52:
                    30:96:d6:5e:89:7e:ab:0b:56:18:1f:91:a3:03:1a:
                    31:9f:33:27:6b:48:50:f1:e5:71:38:40:db:14:04:
                    6e:ac:89:5a:ab:a2:2a:ba:64:04:33:c3:d2:ea:9b:
                    87:9c:26:78:fb:37:6f:ad:b5:25:8e:f4:d0:b5:44:
                    39:a0:8e:b1:f7:aa:24:8a:80:82:12:a0:29:06:60:
                    3f:7d:ec:a3:c8:35:21:ff:b9:c4:e9:20:85:65:91:
                    b2:b5:14:a6:bd:2c:e9:14:37:64:19:9b:11:5a:85:
                    76:bb:10:aa:09:8f:74:8a:ef:56:fd:4d:a8:f2:8c:
                    7f:33:a2:a5:1b:45:e4:a8:99:4d:54:73:75:3e:8c:
                    60:5d:83:70:43:13:5c:12:9e:3c:84:f4:74:c3:b4:
                    07:b3:f2:b9:a6:53:b4:0c:76:e7:9d:77:0e:8b:9c:
                    88:bc:d2:72:50:00:2a:cc:4c:ed:c9:4a:76:f7:8d:
                    6d:49:b4:73:de:a4:9d:ca:8a:de:c1:4b:a1:8d:bd:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1F:A7:21:8F:E4:4F:10:CA:30:F3:F4:AF:CD:B3:54:53:D3:4C:9B
            X509v3 Authority Key Identifier:
                keyid:CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32322d3234203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:3e:6e:84:71:58:c8:77:cc:4a:92:b3:6f:24:1b:01:dd:56:
         4a:c4:6e:5f:c5:c7:cd:e0:9b:05:86:10:5f:29:a9:44:9e:a5:
         a7:80:b1:28:bc:f7:4a:ab:bf:b9:c1:c6:05:a6:73:d7:9d:59:
         05:7e:ad:4b:ba:62:a0:ca:f6:da:d5:c9:7b:85:55:7b:c3:ba:
         84:4c:3a:b1:a9:f3:88:d1:ff:33:16:02:11:c1:fa:67:f6:4e:
         72:b5:c4:03:41:54:a1:bf:58:b8:ba:ff:d9:a2:3c:ce:1d:23:
         a3:b2:b2:39:e0:c6:0a:a7:71:2f:e4:36:91:04:e4:ee:30:1f:
         ce:d9:72:17:c0:b3:62:db:ed:0b:fb:aa:92:6c:0c:56:01:8f:
         f0:a7:24:46:69:53:85:2b:0e:b4:0b:61:d8:68:62:9c:c4:8d:
         89:17:15:ca:b4:5c:97:86:39:f7:3b:cb:c4:3a:e8:30:e3:fe:
         f9:40:a9:7f:42:ef:9b:d9:ab:1e:b6:08:12:1e:08:8b:80:e9:
         58:30:68:82:fe:16:ed:5a:ad:10:38:73:33:b5:ac:77:2f:8a:
         65:d9:35:e0:54:c2:96:dc:98:47:37:79:4b:40:66:e8:d6:64:
         9a:a1:3b:69:88:fa:eb:3d:b0:2c:26:33:f8:48:cf:fe:58:69:
         21:06:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org