Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134392e302f32342d3234203d3e203631363333.roa
File:                     3133312e3130302e3134392e302f32342d3234203d3e203631363333.roa (raw, json)
Hash identifier:          RJKeOW8WCXkmevz5/y6AINyoyrz7AdlfDEqMlwnS5PI=
Subject key identifier:   E7:B9:B3:67:0C:52:CC:E3:3E:72:23:F4:0B:DF:0B:DD:22:FF:03:6E
Certificate issuer:       /CN=CDE7AD619ADE061F54FC38424291FA04B034E709
Certificate serial:       012D468B329B26B3D3B7137A25C401EA9104CB4E
Authority key identifier: CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134392e302f32342d3234203d3e203631363333.roa
Signing time:             Thu 15 Feb 2024 13:46:56 +0000
ROA not before:           Thu 15 Feb 2024 13:41:56 +0000
ROA not after:            Thu 13 Feb 2025 13:46:56 +0000
asID:                     61633
IP address blocks:        131.100.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2d:46:8b:32:9b:26:b3:d3:b7:13:7a:25:c4:01:ea:91:04:cb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE7AD619ADE061F54FC38424291FA04B034E709
        Validity
            Not Before: Feb 15 13:41:56 2024 GMT
            Not After : Feb 13 13:46:56 2025 GMT
        Subject: CN=E7B9B3670C52CCE33E7223F40BDF0BDD22FF036E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6b:ce:eb:b6:89:37:14:e2:24:5f:d7:e1:73:
                    33:13:92:a5:5d:e4:5d:37:ee:a8:13:0b:31:23:1a:
                    f0:ec:bb:fd:72:7d:c0:be:b5:b6:3e:86:83:37:97:
                    66:6d:7f:e2:13:45:43:9d:e8:42:72:26:bb:94:90:
                    41:49:5f:23:98:20:8f:08:cd:7a:41:8b:15:e8:1c:
                    43:b6:7d:49:5a:0a:94:98:54:06:08:bc:62:92:39:
                    7c:24:cd:3a:78:fe:7d:64:a0:81:a7:36:55:26:69:
                    99:0e:c6:49:3f:6d:2f:20:1f:f8:e6:84:15:12:ad:
                    75:dc:4e:4f:f3:8f:b2:de:07:b7:18:61:9e:19:5c:
                    6b:bb:c9:4c:e5:34:44:71:a2:1c:69:ee:c1:e7:fc:
                    2f:94:83:41:6d:35:ae:70:3d:3e:60:52:26:b3:ae:
                    27:e6:32:9a:b7:02:f0:12:24:42:63:95:d5:43:4e:
                    ef:51:d4:02:c7:fb:eb:05:7c:e6:f4:03:0f:39:d2:
                    a5:4b:58:5b:37:23:c3:b1:22:b9:67:0a:85:81:0a:
                    d5:b0:bc:19:2d:b8:03:5b:46:ea:02:8d:49:4f:e9:
                    bc:bd:3f:4e:a1:4e:29:a3:9a:a6:6b:e0:af:02:01:
                    79:78:ae:b7:61:9f:d6:99:43:d2:02:3e:97:f8:65:
                    ac:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B9:B3:67:0C:52:CC:E3:3E:72:23:F4:0B:DF:0B:DD:22:FF:03:6E
            X509v3 Authority Key Identifier:
                keyid:CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134392e302f32342d3234203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:cf:ce:2b:e6:44:75:ba:29:44:9e:ac:6d:be:12:5f:b6:74:
         04:3c:fc:7e:35:05:15:a4:36:22:40:00:3e:74:47:21:ea:b5:
         fa:9c:34:31:ec:97:7a:da:9f:8f:06:1a:63:2a:26:76:5f:4f:
         b5:aa:f9:56:82:a2:b0:19:fe:fc:90:a8:7b:6b:c6:c8:21:2d:
         ba:ea:b8:1c:7d:89:57:eb:d3:98:fd:e7:57:99:cd:58:f8:4a:
         fb:e6:d0:bb:6a:00:2f:ee:1f:82:2e:d8:49:ee:6e:c0:7c:11:
         8a:cc:ae:3f:a9:a8:e8:09:cc:19:d2:ab:8a:0b:74:92:f9:ad:
         08:49:3a:9a:02:bf:3d:84:76:1f:f8:c2:4d:dd:6d:23:54:1d:
         ce:fb:18:35:e2:f8:61:bd:ea:18:19:65:1a:7e:9f:0f:f9:49:
         af:41:fb:56:a8:f3:39:ee:90:20:b8:a3:9c:92:b5:5b:47:1e:
         76:76:44:82:db:58:84:f6:5c:0f:00:a7:56:24:d8:ad:3b:b9:
         dc:8e:b1:8a:b3:19:65:60:7b:86:c1:d1:9b:cb:af:2a:6f:be:
         ff:24:7d:66:db:98:f2:e7:d1:42:92:c4:ce:e9:91:51:dc:d9:
         23:ad:f0:d5:66:c0:38:df:29:59:e6:35:6c:51:ea:19:ab:0e:
         8e:01:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org