Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/0/3133312e3130382e32382e302f32322d3234203d3e203631363539.roa
File:                     3133312e3130382e32382e302f32322d3234203d3e203631363539.roa (raw, json)
Hash identifier:          wPfGrppykcVVpnusF6/noRtIQGrTfAFbrywUoBTqip4=
Subject key identifier:   43:19:83:E6:8A:82:01:DE:0C:5E:29:07:80:12:7A:2A:AE:84:32:1C
Certificate issuer:       /CN=490DE9D487209F7FB1D8289E1D5AE81A1F208955
Certificate serial:       188F8B8593BD190C2C8EE6565B33A6A496E3EFEF
Authority key identifier: 49:0D:E9:D4:87:20:9F:7F:B1:D8:28:9E:1D:5A:E8:1A:1F:20:89:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/490DE9D487209F7FB1D8289E1D5AE81A1F208955.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/0/3133312e3130382e32382e302f32322d3234203d3e203631363539.roa
Signing time:             Tue 31 Oct 2023 19:01:20 +0000
ROA not before:           Tue 31 Oct 2023 18:56:20 +0000
ROA not after:            Tue 29 Oct 2024 19:01:20 +0000
asID:                     61659
IP address blocks:        131.108.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8f:8b:85:93:bd:19:0c:2c:8e:e6:56:5b:33:a6:a4:96:e3:ef:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490DE9D487209F7FB1D8289E1D5AE81A1F208955
        Validity
            Not Before: Oct 31 18:56:20 2023 GMT
            Not After : Oct 29 19:01:20 2024 GMT
        Subject: CN=431983E68A8201DE0C5E290780127A2AAE84321C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:31:84:8c:b6:33:ec:07:87:0e:b6:59:fe:
                    31:ea:fc:05:5c:8a:c9:40:2d:ef:2b:38:d9:c0:46:
                    3c:9d:2a:92:6b:95:69:14:8c:fd:b0:89:fb:b6:57:
                    4a:48:6f:0d:69:aa:8a:5c:5e:7d:90:92:8e:06:5f:
                    00:27:15:fc:b0:31:5e:17:20:89:44:28:cf:55:1a:
                    9b:72:cf:db:c3:ae:7b:58:fe:60:16:51:c7:1d:23:
                    84:fc:ad:a8:5c:f0:73:fe:a9:51:79:9c:99:57:37:
                    58:ad:ec:d9:cd:f2:0c:a8:12:24:93:91:cb:74:6d:
                    4e:f0:72:dd:3d:1e:9a:c7:9d:ef:95:85:43:9f:00:
                    8f:9c:bf:ba:2d:16:d3:68:32:fd:36:07:ed:50:1a:
                    dd:7b:05:d3:f0:96:b1:75:3e:ab:a5:72:46:80:61:
                    6a:90:f8:f7:cf:46:63:6f:36:10:83:9b:05:af:b5:
                    dd:4a:9e:93:43:f7:13:1b:fd:77:37:a4:f6:bf:c6:
                    0c:35:0e:27:58:db:50:47:19:f8:36:05:3e:77:65:
                    77:66:14:2c:5d:f7:77:37:9a:a0:d3:70:54:52:9a:
                    7e:c8:8d:ee:bb:30:db:0b:20:7b:39:07:4c:f0:e1:
                    99:e8:a7:28:67:87:1f:6e:8e:16:e1:ba:fd:15:70:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:19:83:E6:8A:82:01:DE:0C:5E:29:07:80:12:7A:2A:AE:84:32:1C
            X509v3 Authority Key Identifier:
                keyid:49:0D:E9:D4:87:20:9F:7F:B1:D8:28:9E:1D:5A:E8:1A:1F:20:89:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/0/490DE9D487209F7FB1D8289E1D5AE81A1F208955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/490DE9D487209F7FB1D8289E1D5AE81A1F208955.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/0/3133312e3130382e32382e302f32322d3234203d3e203631363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:bf:86:d1:a3:f1:8f:93:5d:26:41:5a:63:61:33:87:c5:7b:
         4f:e0:40:41:c0:90:ed:71:7b:c8:0d:d0:02:7f:7d:32:c0:97:
         6a:d2:12:d9:a3:ab:90:d1:b2:f6:bf:50:18:18:0c:e5:8b:13:
         fd:3e:03:38:6d:82:35:2b:5c:56:69:ee:e0:26:38:dc:bc:69:
         08:ed:9f:9d:83:64:45:98:68:4e:7f:c2:a5:a0:98:93:16:fd:
         c3:54:e0:f2:0a:49:e8:2a:d3:5d:12:b5:76:82:ce:6f:71:17:
         bc:1e:42:8a:b9:c4:bb:ae:6f:78:81:a3:30:e7:9e:c0:40:f1:
         b5:ff:1d:17:1a:01:09:ef:0b:18:6d:3f:e6:13:67:d1:1e:6d:
         2a:c6:d0:f0:fb:d7:72:41:a2:7b:1a:33:e7:e4:87:fa:17:29:
         f4:a8:29:9f:28:14:eb:32:c0:93:68:29:7a:72:43:33:ad:d4:
         5c:b2:ea:cc:f2:23:09:7b:40:ce:33:40:d6:fa:d6:ec:85:db:
         9b:cb:97:88:a9:af:49:e0:a1:97:85:03:c6:c8:50:a5:d9:59:
         a7:34:b9:93:84:76:75:78:8b:00:f6:21:b9:0f:e1:50:84:1f:
         44:70:b7:fa:bd:fb:fd:0c:20:e2:c2:60:54:fa:5a:ed:eb:26:
         82:c4:1b:21
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGI+LhZO9GQwsjuZWWzOmpJbj7+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkwREU5RDQ4NzIwOUY3RkIxRDgyODlFMUQ1QUU4MUEx
RjIwODk1NTAeFw0yMzEwMzExODU2MjBaFw0yNDEwMjkxOTAxMjBaMDMxMTAvBgNV
BAMTKDQzMTk4M0U2OEE4MjAxREUwQzVFMjkwNzgwMTI3QTJBQUU4NDMyMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aTGEjLYz7AeHDrZZ/jHq/AVc
islALe8rONnARjydKpJrlWkUjP2wifu2V0pIbw1pqopcXn2Qko4GXwAnFfywMV4X
IIlEKM9VGptyz9vDrntY/mAWUccdI4T8rahc8HP+qVF5nJlXN1it7NnN8gyoEiST
kct0bU7wct09HprHne+VhUOfAI+cv7otFtNoMv02B+1QGt17BdPwlrF1PqulckaA
YWqQ+PfPRmNvNhCDmwWvtd1KnpND9xMb/Xc3pPa/xgw1DidY21BHGfg2BT53ZXdm
FCxd93c3mqDTcFRSmn7Ije67MNsLIHs5B0zw4Znopyhnhx9ujhbhuv0VcCLJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQxmD5oqCAd4MXikHgBJ6Kq6EMhwwHwYDVR0j
BBgwFoAUSQ3p1Icgn3+x2CieHVroGh8giVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVA4WW52WWVyOGlrNk0zUExodDNxWFdjdVloUTViWllnVzVhTHN3UVhk
ZVkvMC80OTBERTlENDg3MjA5RjdGQjFEODI4OUUxRDVBRTgxQTFGMjA4OTU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5MERFOUQ0ODcyMDlGN0ZC
MUQ4Mjg5RTFENUFFODFBMUYyMDg5NTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQOFludlllcjhpazZNM1BMaHQzcVhXY3VZaFE1YlpZZ1c1YUxzd1FYZGVZLzAv
MzEzMzMxMmUzMTMwMzgyZTMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzYzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg2wcMA0GCSqGSIb3DQEBCwUAA4IBAQDav4bRo/GP
k10mQVpjYTOHxXtP4EBBwJDtcXvIDdACf30ywJdq0hLZo6uQ0bL2v1AYGAzlixP9
PgM4bYI1K1xWae7gJjjcvGkI7Z+dg2RFmGhOf8KloJiTFv3DVODyCknoKtNdErV2
gs5vcRe8HkKKucS7rm94gaMw557AQPG1/x0XGgEJ7wsYbT/mE2fRHm0qxtDw+9dy
QaJ7GjPn5If6Fyn0qCmfKBTrMsCTaCl6ckMzrdRcsurM8iMJe0DOM0DW+tbshdub
y5eIqa9J4KGXhQPGyFCl2VmnNLmThHZ1eIsA9iG5D+FQhB9EcLf6vfv9DCDiwmBU
+lrt6yaCxBsh
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org