Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/3133312e3136312e382e302f32322d3332203d3e20323730383830.roa
File:                     3133312e3136312e382e302f32322d3332203d3e20323730383830.roa (raw, json)
Hash identifier:          bVtTLvLavx2f285yIlt3icUqRUTih3zq0z2+uv3A3Sc=
Subject key identifier:   96:95:8B:83:78:CA:9A:B2:CA:4B:54:9D:09:96:8F:EC:89:85:3C:90
Certificate issuer:       /CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
Certificate serial:       1C23014373A8BA5634A8A89524384DA335A30ED7
Authority key identifier: 87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/3133312e3136312e382e302f32322d3332203d3e20323730383830.roa
Signing time:             Mon 25 Sep 2023 17:19:19 +0000
ROA not before:           Mon 25 Sep 2023 17:14:19 +0000
ROA not after:            Mon 23 Sep 2024 17:19:19 +0000
asID:                     270880
IP address blocks:        131.161.8.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:23:01:43:73:a8:ba:56:34:a8:a8:95:24:38:4d:a3:35:a3:0e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
        Validity
            Not Before: Sep 25 17:14:19 2023 GMT
            Not After : Sep 23 17:19:19 2024 GMT
        Subject: CN=96958B8378CA9AB2CA4B549D09968FEC89853C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:6b:0e:7d:1c:9c:41:ea:55:56:28:e8:b6:
                    a4:2a:8e:93:7d:ae:99:d0:f3:2e:0a:90:d8:68:b2:
                    e4:e4:2c:7a:e1:97:ea:09:dc:14:f5:24:dc:a2:5b:
                    b5:35:0a:8e:75:5f:f6:26:e1:06:ad:de:d1:70:ef:
                    b5:85:c2:2c:7d:b5:bc:d5:a6:02:b5:3a:6d:e1:a2:
                    50:b8:13:40:ce:cf:d0:38:2a:83:6d:f0:2e:24:7b:
                    88:43:d5:1d:a5:ba:87:5a:ef:06:7b:b7:57:f3:8a:
                    01:f8:5f:0a:76:6c:d4:93:10:d2:49:bd:14:85:44:
                    65:d2:fe:1b:b9:87:fc:15:b2:c5:b3:de:51:ca:2c:
                    0b:4f:77:ad:06:4c:00:9d:30:98:ba:c1:3e:ce:9c:
                    0e:14:74:ef:3b:91:80:cb:06:14:3a:c9:42:14:82:
                    53:d8:25:34:58:35:42:71:9f:0b:c8:e3:cd:d5:2d:
                    23:fd:fd:b4:d8:1e:60:80:9d:f8:a0:08:de:fc:8f:
                    0e:dd:36:57:af:71:4a:f5:52:e2:e1:ac:7c:49:a9:
                    7a:0d:d9:f9:96:59:0f:b5:22:29:ae:76:3c:95:61:
                    45:6f:97:62:f0:08:38:a6:95:a1:79:b2:06:6f:ee:
                    eb:f2:a9:99:5f:f5:3f:4a:05:98:f9:47:c0:85:88:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:95:8B:83:78:CA:9A:B2:CA:4B:54:9D:09:96:8F:EC:89:85:3C:90
            X509v3 Authority Key Identifier:
                keyid:87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/3133312e3136312e382e302f32322d3332203d3e20323730383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:48:f2:70:04:69:7a:8b:d9:d8:9b:30:1e:dd:c3:51:1f:5c:
         d6:22:ac:df:44:2c:ed:1a:8d:d6:b2:af:26:fa:41:01:16:2d:
         0b:8c:25:fa:29:ff:41:5d:c1:8a:12:65:10:07:67:5e:9a:b8:
         a4:eb:c4:0d:40:61:59:79:ff:b9:b0:5b:1e:97:4a:89:b1:75:
         3a:ad:84:39:84:ad:ce:3a:e5:7b:ca:7c:a3:fc:c9:16:06:e4:
         9d:12:e0:92:30:cc:5e:44:5c:7e:3e:96:3b:01:64:33:f7:36:
         13:ef:15:3a:ce:1f:57:46:94:0c:4f:0f:65:3b:8c:90:a3:e6:
         bb:1e:da:c2:31:28:3a:b4:88:c6:36:53:e0:91:15:4a:58:09:
         38:08:7d:d1:85:0e:67:49:a1:c4:0c:e7:92:6f:ef:b9:22:44:
         62:68:7d:2d:e1:48:14:1a:49:de:7d:bb:48:69:4c:f4:f4:f8:
         9d:5c:a4:09:7c:f0:5e:5c:d2:24:25:4b:c1:9f:29:41:fa:47:
         00:73:46:c0:53:77:38:01:c4:01:be:09:e6:ae:cc:cb:db:84:
         0f:74:38:6c:43:92:c8:de:7c:05:ed:42:94:68:cb:69:7f:ea:
         70:98:6d:62:34:38:c6:6c:06:c7:ee:c1:fe:f1:aa:d4:5a:4d:
         e3:b9:f4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org