Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3133312e3130382e3137322e302f32322d3232203d3e20323634333836.roa
File:                     3133312e3130382e3137322e302f32322d3232203d3e20323634333836.roa (raw, json)
Hash identifier:          /VsakQRlEeG7GLaKZDxzBi2z3ODcEG7a1xtBVVgPQ5w=
Subject key identifier:   71:3C:BD:88:AC:7D:70:1F:77:27:07:C9:23:EF:57:53:88:2A:9E:28
Certificate issuer:       /CN=7CAEA8972637476DBD3EB95073B9755AF312D410
Certificate serial:       031065FB945314A9D1954C5725A738A532961468
Authority key identifier: 7C:AE:A8:97:26:37:47:6D:BD:3E:B9:50:73:B9:75:5A:F3:12:D4:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAEA8972637476DBD3EB95073B9755AF312D410.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3133312e3130382e3137322e302f32322d3232203d3e20323634333836.roa
Signing time:             Tue 12 Mar 2024 17:38:36 +0000
ROA not before:           Tue 12 Mar 2024 17:33:36 +0000
ROA not after:            Tue 11 Mar 2025 17:38:36 +0000
asID:                     264386
IP address blocks:        131.108.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:10:65:fb:94:53:14:a9:d1:95:4c:57:25:a7:38:a5:32:96:14:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAEA8972637476DBD3EB95073B9755AF312D410
        Validity
            Not Before: Mar 12 17:33:36 2024 GMT
            Not After : Mar 11 17:38:36 2025 GMT
        Subject: CN=713CBD88AC7D701F772707C923EF5753882A9E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:92:ba:56:8c:9f:bb:82:32:02:ff:f4:fa:58:
                    ec:5f:57:d7:ae:ca:04:d7:27:88:ce:f1:c3:97:bd:
                    70:59:55:3a:41:a9:02:48:1b:b8:6d:b3:6e:9b:74:
                    9f:f5:a6:8f:1d:fe:44:08:4e:be:da:c9:65:91:96:
                    48:2e:51:57:12:65:8d:72:14:44:9b:5b:19:cb:bb:
                    24:00:7b:48:09:06:6e:85:a9:bf:f4:20:25:1e:83:
                    e6:d3:b3:29:76:52:35:f3:8a:aa:89:c1:11:d5:09:
                    0f:fb:0f:6a:63:39:09:5e:15:d1:2c:76:5b:69:f0:
                    5a:f1:30:a7:8f:6d:ce:75:8e:a5:a1:58:3b:c0:7e:
                    53:ac:c5:1c:88:2e:96:cb:f4:70:d4:2a:12:f7:60:
                    19:70:0d:fa:f7:2f:50:69:e7:bd:84:6a:de:0b:3f:
                    c4:34:cb:7c:fa:22:61:02:f9:fc:81:84:bf:9b:6b:
                    8c:95:5a:fe:e6:dc:71:00:f5:bb:ed:bd:87:fa:66:
                    29:f3:39:42:cd:c0:98:2a:d7:1a:be:50:f2:2b:81:
                    28:03:4b:30:03:c3:f5:aa:81:63:31:09:b1:85:35:
                    de:e9:38:06:e3:6a:c8:b3:05:6c:4f:ca:0c:51:3d:
                    eb:60:98:e2:79:41:d5:f8:98:52:cd:32:f3:36:fc:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3C:BD:88:AC:7D:70:1F:77:27:07:C9:23:EF:57:53:88:2A:9E:28
            X509v3 Authority Key Identifier:
                keyid:7C:AE:A8:97:26:37:47:6D:BD:3E:B9:50:73:B9:75:5A:F3:12:D4:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/7CAEA8972637476DBD3EB95073B9755AF312D410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAEA8972637476DBD3EB95073B9755AF312D410.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3133312e3130382e3137322e302f32322d3232203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:db:e7:e9:45:b5:b6:d0:f5:9e:b4:65:0b:d6:f7:31:fc:ac:
         76:b7:98:ef:38:42:0d:4f:dd:4d:ab:d4:2c:d7:52:87:50:71:
         04:94:20:ce:41:a4:e8:fd:5f:06:ef:d8:27:1b:d0:78:1e:f4:
         ec:64:54:56:9e:95:92:84:de:3b:ce:92:c7:63:fd:d5:82:18:
         fe:2d:6c:9e:12:81:ca:3f:c0:30:32:f3:7e:c2:cd:29:45:7c:
         53:16:b0:ed:8e:dc:00:a2:18:11:c7:21:02:23:61:96:a8:29:
         66:55:54:b9:25:68:10:fa:fd:15:51:ed:72:a4:7b:98:37:df:
         1f:14:b4:50:86:89:65:74:db:de:2f:15:ab:f8:b0:75:62:a4:
         dd:96:92:6d:e3:0a:b9:91:01:c2:ec:a6:65:af:5f:aa:a0:9e:
         ec:d1:23:a0:12:e6:f2:62:4c:06:44:1e:49:21:33:8a:e5:0c:
         0d:35:7c:4d:71:29:ba:a5:cd:aa:5e:f0:ec:67:52:6c:a1:58:
         50:48:0d:01:34:62:d0:32:ca:ad:40:29:3f:c3:ed:28:f6:81:
         97:e7:1b:ed:37:ce:76:5c:69:4e:bb:de:42:c0:7e:91:50:66:
         76:2b:5f:9b:2f:47:c7:24:9a:b1:0b:b7:81:ec:85:74:1f:38:
         79:78:c6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org