Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          kUb/W+qG0j56jmzA92s3sYag9nXEF8VIZSNv5priUv8=
Subject key identifier:   F7:1D:FE:E6:68:5D:F9:61:33:DA:6F:05:E6:E0:4E:BB:1D:62:6A:9B
Certificate issuer:       /CN=BD69382F79BA3D9D9A32A984942029C4341AB167
Certificate serial:       605A86BEE8AD558448E088B0CDEFA744E4B2B79F
Authority key identifier: BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa
Signing time:             Thu 04 Apr 2024 20:23:40 +0000
ROA not before:           Thu 04 Apr 2024 20:18:40 +0000
ROA not after:            Thu 03 Apr 2025 20:23:40 +0000
asID:                     265919
IP address blocks:        131.196.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5a:86:be:e8:ad:55:84:48:e0:88:b0:cd:ef:a7:44:e4:b2:b7:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69382F79BA3D9D9A32A984942029C4341AB167
        Validity
            Not Before: Apr  4 20:18:40 2024 GMT
            Not After : Apr  3 20:23:40 2025 GMT
        Subject: CN=F71DFEE6685DF96133DA6F05E6E04EBB1D626A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:b0:eb:5a:8f:9c:04:4f:a8:4d:a6:64:c7:
                    38:46:ef:71:b6:bf:ce:97:ef:98:8d:88:77:d9:60:
                    af:c9:d8:69:2b:b0:ce:92:7b:0d:a8:f9:eb:29:90:
                    13:8d:3c:da:45:3b:06:75:d1:28:b3:fb:a7:03:7b:
                    a1:16:76:c9:34:89:d3:0d:40:09:6d:ac:aa:75:9c:
                    f4:39:9b:c3:5e:91:b1:93:98:a7:67:9f:af:45:a9:
                    a8:30:34:da:57:6a:20:87:f2:0f:d4:ea:20:a1:6c:
                    2a:80:fe:42:a9:62:bb:8f:e5:9d:eb:8e:57:f4:43:
                    b7:01:18:2e:e0:98:77:32:2b:d8:e5:38:b1:1b:1f:
                    82:ff:f3:72:8f:fc:32:1c:17:11:e2:65:8f:3f:35:
                    80:74:3b:1f:3b:48:22:41:5c:e3:9c:3f:57:01:db:
                    eb:b2:0c:14:b2:98:bc:ae:9b:f3:a2:2a:27:6b:cc:
                    4b:18:0d:dc:ab:d3:48:13:7e:60:46:08:ec:08:93:
                    24:6f:37:65:ca:33:1e:8f:ad:c4:36:97:8d:08:da:
                    05:fc:0b:7d:81:ee:1e:e9:29:ec:86:68:3a:52:20:
                    2a:b4:7e:6c:37:1a:7a:c6:a2:b7:6a:bf:3a:ee:3d:
                    24:0d:7e:35:d7:c9:37:10:03:39:94:7f:a4:5e:dd:
                    95:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1D:FE:E6:68:5D:F9:61:33:DA:6F:05:E6:E0:4E:BB:1D:62:6A:9B
            X509v3 Authority Key Identifier:
                keyid:BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:02:34:ec:04:47:89:71:2a:e2:6f:fe:47:61:5f:84:66:5c:
         6c:4d:cd:dd:a2:fc:db:32:ca:ea:e6:8e:b6:f6:6f:c2:80:85:
         06:aa:c3:3b:15:97:28:76:c2:33:2c:e4:be:98:d8:92:2a:b6:
         fb:73:04:a7:f0:86:3f:d6:76:e4:17:d3:a4:5c:35:8e:f6:f7:
         1b:c3:a9:d7:d2:80:ab:6c:84:fd:69:d5:89:69:50:eb:5f:58:
         32:36:0f:3f:bf:18:6f:38:07:9f:2a:6a:ff:13:b5:66:79:ea:
         de:2b:d0:64:36:df:c3:a0:04:fe:5d:59:47:de:54:54:2f:15:
         98:17:9f:e7:2b:0b:c7:a3:66:71:23:0f:c7:18:ef:8c:a5:5d:
         97:29:1d:35:50:31:cb:9f:96:d4:06:e2:18:53:eb:99:73:83:
         de:5a:9e:59:57:3d:ae:e7:4f:94:76:49:3d:f5:b0:0a:ce:73:
         a2:94:da:ca:e5:60:4a:fd:64:59:6e:1e:95:88:00:15:c0:14:
         52:6a:39:29:8d:a4:ff:b2:ec:5f:77:72:90:10:1d:ef:32:30:
         ff:b4:f1:76:c0:4b:20:7f:c5:ce:ca:9d:4c:21:b0:b6:25:10:
         57:2d:a8:0f:ff:18:ee:af:28:f6:63:0c:60:5e:ad:34:56:7f:
         66:38:ba:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org