Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/2/3133312e3139362e34342e302f32322d3332203d3e20323635393034.roa
File:                     3133312e3139362e34342e302f32322d3332203d3e20323635393034.roa (raw, json)
Hash identifier:          sbSA4NFw71onB+VpMqIcwGzKnwyBLh28naVrQ/WfGMk=
Subject key identifier:   AA:AB:C0:F3:E1:6B:BD:9A:C2:C2:95:35:3A:59:6B:8B:A0:66:38:6A
Certificate issuer:       /CN=5D014112E55329E00BD053B044CE480A03DE265E
Certificate serial:       161BC42268FB87BEE1C8ABC5D9785BCCF7CA286F
Authority key identifier: 5D:01:41:12:E5:53:29:E0:0B:D0:53:B0:44:CE:48:0A:03:DE:26:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D014112E55329E00BD053B044CE480A03DE265E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/2/3133312e3139362e34342e302f32322d3332203d3e20323635393034.roa
Signing time:             Thu 07 Dec 2023 14:53:57 +0000
ROA not before:           Thu 07 Dec 2023 14:48:57 +0000
ROA not after:            Thu 05 Dec 2024 14:53:57 +0000
asID:                     265904
IP address blocks:        131.196.44.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1b:c4:22:68:fb:87:be:e1:c8:ab:c5:d9:78:5b:cc:f7:ca:28:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D014112E55329E00BD053B044CE480A03DE265E
        Validity
            Not Before: Dec  7 14:48:57 2023 GMT
            Not After : Dec  5 14:53:57 2024 GMT
        Subject: CN=AAABC0F3E16BBD9AC2C295353A596B8BA066386A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:fa:24:2d:45:70:d6:0b:f0:86:2c:1a:83:
                    66:ff:5c:91:3b:ae:e7:30:24:45:67:8a:27:dd:8a:
                    06:a5:3b:e8:ff:39:18:d6:29:8b:fc:c0:2c:31:8b:
                    4a:55:86:8e:a9:72:01:c5:b3:cc:f4:2b:a4:f6:4a:
                    c5:00:03:5f:02:bf:0d:15:0a:4a:98:38:1c:72:55:
                    e9:f0:3f:29:3a:1b:88:21:2b:f8:42:fe:b2:c6:69:
                    e5:06:e7:10:37:74:31:f6:7c:4f:66:c1:84:b6:ba:
                    e2:88:fe:d9:76:e0:45:40:e7:5d:b9:6c:83:8d:aa:
                    02:f3:86:5f:d8:40:1f:10:38:47:5b:b7:85:69:4c:
                    32:de:72:00:73:35:54:09:de:70:29:b8:99:75:e7:
                    29:1e:1c:11:6e:d5:25:a0:7c:0e:38:7d:8a:5f:35:
                    ea:4f:d4:4d:76:06:fc:5c:2a:2e:63:92:90:8f:37:
                    f1:15:0f:aa:b8:9a:ff:ed:c3:e7:eb:ff:7b:cd:69:
                    dd:68:4b:ad:be:27:2e:e2:8f:46:ca:27:bb:2e:9c:
                    fa:91:a6:ec:71:ec:22:50:89:de:1e:5e:7c:98:be:
                    f4:37:dc:6e:a1:69:0b:e5:1c:dd:e2:b5:b6:b1:ab:
                    8b:36:38:e8:76:e8:57:1e:42:e2:d1:a2:7b:06:00:
                    da:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AB:C0:F3:E1:6B:BD:9A:C2:C2:95:35:3A:59:6B:8B:A0:66:38:6A
            X509v3 Authority Key Identifier:
                keyid:5D:01:41:12:E5:53:29:E0:0B:D0:53:B0:44:CE:48:0A:03:DE:26:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/2/5D014112E55329E00BD053B044CE480A03DE265E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D014112E55329E00BD053B044CE480A03DE265E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/2/3133312e3139362e34342e302f32322d3332203d3e20323635393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:07:bd:ba:cf:e7:60:d0:35:27:20:4e:14:17:40:35:28:0c:
         39:c3:bf:f0:3b:bd:b4:b4:5f:50:e8:ae:3f:ab:38:3d:a6:9d:
         c5:d0:83:04:cd:7e:e2:58:9d:08:53:3d:be:01:a2:4b:d2:93:
         eb:64:fd:a7:91:31:94:f0:eb:7d:bf:48:94:8c:1c:50:10:30:
         eb:e1:21:a6:d6:b7:15:c0:82:b5:5e:d6:c5:32:c4:55:9a:64:
         bd:59:92:70:b0:0e:3d:05:6d:2c:aa:43:5d:c9:98:29:d6:e5:
         e8:eb:2b:96:9a:91:d8:f0:6c:ae:c2:2c:17:bb:2c:41:df:c0:
         3a:f2:4d:14:b6:3c:d2:b0:23:75:6f:1f:93:59:06:04:46:69:
         1f:58:0a:cb:dc:8d:30:bf:d7:81:74:42:a5:8d:f0:78:f6:02:
         23:6d:c8:89:6d:38:b4:39:48:35:9a:20:6c:18:7b:f7:a6:a2:
         89:a1:a3:51:7e:96:06:2e:6d:f3:32:bd:9a:ea:9e:b1:21:75:
         80:86:02:da:76:9f:c4:6c:c4:b5:df:21:84:92:f9:cb:9b:ed:
         1f:00:fd:b2:1d:66:34:c8:1f:1d:50:69:5a:bc:6e:96:ea:ed:
         0b:0c:f2:e2:b2:86:2f:d1:a7:6a:fe:2c:be:cb:20:40:54:6d:
         8b:83:a4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org