Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          PRnS2CX7rrmXxJjY9K7DMVzPIcmhqp9VKRDsXSSWzKQ=
Subject key identifier:   16:6E:D0:25:07:D8:57:E1:B1:19:30:F8:2A:4A:53:36:77:EE:C9:61
Certificate issuer:       /CN=BD69382F79BA3D9D9A32A984942029C4341AB167
Certificate serial:       63B1B28F1E5E7EACC46F20B8BADF6B15F05EEF30
Authority key identifier: BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa
Signing time:             Thu 04 Apr 2024 20:23:42 +0000
ROA not before:           Thu 04 Apr 2024 20:18:42 +0000
ROA not after:            Thu 03 Apr 2025 20:23:42 +0000
asID:                     265919
IP address blocks:        131.196.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b1:b2:8f:1e:5e:7e:ac:c4:6f:20:b8:ba:df:6b:15:f0:5e:ef:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69382F79BA3D9D9A32A984942029C4341AB167
        Validity
            Not Before: Apr  4 20:18:42 2024 GMT
            Not After : Apr  3 20:23:42 2025 GMT
        Subject: CN=166ED02507D857E1B11930F82A4A533677EEC961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:1c:92:64:21:df:ac:2d:1a:6f:35:bf:03:
                    2b:a7:d1:43:3d:20:c2:90:e8:ee:7f:3e:c9:ec:5d:
                    56:0e:ee:07:2c:6c:ce:83:c6:64:2f:17:87:be:d2:
                    8a:b7:9f:6c:e5:25:b3:95:d6:05:5f:22:19:26:f8:
                    bd:83:b3:2b:c0:5d:ef:ee:83:6a:50:f0:c7:cb:d4:
                    65:10:1f:2d:7f:03:09:32:88:f2:81:08:6f:3f:c9:
                    99:3f:d2:f4:22:2a:e0:00:0b:20:81:6a:c4:9e:35:
                    60:26:7e:ec:9e:c9:55:18:61:b6:75:dc:35:3d:8d:
                    5c:00:13:d5:60:e6:26:56:49:0a:29:ae:af:20:e4:
                    a0:88:d7:db:cf:e9:46:4e:da:4c:a1:99:21:75:86:
                    18:9c:4a:ed:7a:10:34:14:7e:96:92:de:4d:2b:18:
                    b4:5a:cc:c2:d2:ed:19:44:02:68:b3:30:d0:bd:10:
                    e4:f7:d9:fb:b5:ca:13:56:05:76:5b:04:c8:b5:e2:
                    5b:80:25:04:56:7a:05:e3:e0:61:5e:7f:98:9e:41:
                    95:23:78:53:d5:7d:eb:4c:5c:9c:98:73:6e:a4:36:
                    4c:c4:76:30:28:d6:43:d2:d7:cc:4c:24:2f:cb:c1:
                    89:92:75:36:50:8a:a9:51:04:07:1d:e7:42:b8:81:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6E:D0:25:07:D8:57:E1:B1:19:30:F8:2A:4A:53:36:77:EE:C9:61
            X509v3 Authority Key Identifier:
                keyid:BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:28:21:e9:78:2f:b5:05:e2:88:d2:fa:4f:df:96:49:d7:c3:
         13:28:34:74:cf:96:33:bd:80:ca:1b:fa:da:83:e0:5c:16:36:
         ba:7d:bf:f7:eb:00:23:06:4f:83:90:23:4b:05:9c:2b:c4:68:
         d5:ac:46:7e:c9:f0:e8:ec:67:b1:07:cd:ec:c7:d5:3e:e6:d3:
         42:a3:ba:a1:d6:c5:66:e9:e9:9b:30:36:e5:3f:0b:ec:18:0c:
         a8:6a:cb:35:89:09:7c:ff:94:6c:d8:70:56:c7:df:03:5e:c5:
         05:8a:fa:02:5d:37:30:b1:68:a5:f5:4b:87:36:63:53:14:15:
         78:6a:ee:e4:70:45:d0:77:da:05:e7:4d:52:ed:ce:28:c7:fd:
         4d:7e:8f:95:ca:92:92:45:a1:b9:c3:4a:d3:6d:0b:f8:f5:bf:
         6e:02:74:78:f2:9c:5e:a9:f8:cd:06:94:8b:aa:d7:9d:cd:06:
         38:0d:ae:8c:d3:03:2e:e4:5c:c6:6f:9b:ac:32:a9:41:e4:43:
         95:99:58:64:bf:cc:78:67:4b:4a:1b:eb:ee:00:05:1d:1c:7d:
         f8:94:7e:dd:91:f5:b8:8d:f4:33:02:e7:fc:2a:0d:4d:21:40:
         f7:0a:7c:a9:7f:c7:96:dd:74:a0:71:f2:f4:81:02:3b:34:e3:
         6b:b9:55:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org