Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/1/3133312e3136312e37322e302f32322d3234203d3e20323632333535.roa
File:                     3133312e3136312e37322e302f32322d3234203d3e20323632333535.roa (raw, json)
Hash identifier:          hU5MlIQa5Jw9PkTgW25LEqozFstbj0JyZf0qmY7m5jA=
Subject key identifier:   8B:4C:88:BA:FB:63:40:D6:78:1C:C7:58:14:D7:0F:8C:05:EB:37:50
Certificate issuer:       /CN=BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615
Certificate serial:       7A67C448F1EDAFC9ECF39FD23F9B40484B72004E
Authority key identifier: BD:2C:AC:A4:44:36:57:3E:8C:2E:F9:5C:18:E1:CB:5F:E2:F0:F6:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/1/3133312e3136312e37322e302f32322d3234203d3e20323632333535.roa
Signing time:             Sat 18 May 2024 12:46:43 +0000
ROA not before:           Sat 18 May 2024 12:41:43 +0000
ROA not after:            Sat 17 May 2025 12:46:43 +0000
asID:                     262355
IP address blocks:        131.161.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:67:c4:48:f1:ed:af:c9:ec:f3:9f:d2:3f:9b:40:48:4b:72:00:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615
        Validity
            Not Before: May 18 12:41:43 2024 GMT
            Not After : May 17 12:46:43 2025 GMT
        Subject: CN=8B4C88BAFB6340D6781CC75814D70F8C05EB3750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:fb:c7:5f:6c:8e:5b:26:68:3e:5f:ea:9b:
                    60:75:1d:f8:05:8f:c3:fd:e2:f6:2e:21:30:53:19:
                    fe:16:4f:20:f6:10:59:96:02:0b:41:2b:4b:ee:23:
                    3f:47:16:11:5f:a7:93:90:b8:d2:09:be:b7:38:97:
                    28:21:95:98:56:4f:25:98:96:70:e3:aa:29:38:68:
                    5a:68:af:c9:7d:b6:e7:bd:4d:ef:07:46:5a:3d:c6:
                    88:ab:eb:67:79:58:61:23:1b:a7:c4:57:ac:15:30:
                    a6:6f:d9:f6:0f:7c:20:5f:0b:5e:7e:00:87:94:cb:
                    50:e3:62:d8:76:11:75:32:62:50:fc:d0:e9:7d:46:
                    3a:aa:89:7a:2e:38:8d:2a:01:5c:ed:39:8b:a8:82:
                    65:6c:44:4b:3e:77:5f:7c:49:3f:8c:fe:05:8f:df:
                    24:10:64:37:c3:c0:3b:2b:35:74:b0:d4:07:a1:5b:
                    a5:b3:2e:b1:f2:59:96:68:ee:9b:42:a0:5a:67:06:
                    fd:3e:64:20:bd:6a:f6:41:eb:ee:a6:7a:a8:33:55:
                    13:3e:c7:d8:cd:04:da:bc:0d:55:52:02:b0:32:e2:
                    fc:2b:99:04:7d:0f:ca:38:a4:a3:46:85:5a:42:10:
                    fc:89:ac:56:53:e6:4d:8d:6a:82:e5:88:f1:26:cb:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4C:88:BA:FB:63:40:D6:78:1C:C7:58:14:D7:0F:8C:05:EB:37:50
            X509v3 Authority Key Identifier:
                keyid:BD:2C:AC:A4:44:36:57:3E:8C:2E:F9:5C:18:E1:CB:5F:E2:F0:F6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/1/BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/1/3133312e3136312e37322e302f32322d3234203d3e20323632333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:8c:c8:6a:b4:99:02:45:e9:18:a9:d3:28:8b:61:38:91:2f:
         1e:e7:b6:16:47:d8:4f:c1:b1:1a:ae:a4:30:87:dd:7f:d9:d1:
         49:43:f6:8d:f1:f8:d9:51:54:ef:0d:06:04:8d:16:d6:25:ff:
         cc:86:63:9d:2d:81:ad:40:59:11:18:55:66:34:cc:2a:d4:be:
         32:da:c8:ed:f4:f5:3c:45:0a:9b:fc:12:00:22:b7:7c:14:e3:
         b0:3a:e9:1e:83:e7:57:ce:bd:8e:25:d1:13:f6:5e:d5:c8:5b:
         45:29:4f:de:3a:96:18:4f:79:3a:a9:b2:bb:ab:45:31:e7:fd:
         af:0c:99:7c:32:62:70:fa:0b:ff:ce:8c:4d:59:06:0a:4b:23:
         8a:eb:38:ee:cf:43:c1:88:5a:c7:ac:d9:8b:af:1e:10:0d:19:
         fb:40:db:73:2f:34:04:6a:9b:96:07:d8:53:28:0a:7e:50:cc:
         dc:04:0c:76:2f:59:6a:96:ff:dd:f6:0a:70:56:c7:79:ab:74:
         9d:fb:86:df:75:3c:c7:94:30:36:97:80:aa:6d:ba:8c:08:3b:
         12:e4:b3:8c:52:b2:b0:63:b3:4e:b4:84:cf:64:c8:60:37:c2:
         5c:99:e6:2f:0a:89:a1:2a:bb:7a:7e:72:33:e7:79:e9:03:4d:
         3f:a3:2e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org