Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/3133312e3136312e382e302f32332d3233203d3e20323730383830.roa
File:                     3133312e3136312e382e302f32332d3233203d3e20323730383830.roa (raw, json)
Hash identifier:          /hwnBej5HGXgJb63yPmbojgX6BpiAe9TwrIBtCTN0zw=
Subject key identifier:   34:AD:CA:43:32:60:CA:56:E8:8F:33:0F:1A:10:67:B4:FC:96:EA:03
Certificate issuer:       /CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
Certificate serial:       1455FE0B6D34FCDC2974C8647BA5CF8E6B96CA8D
Authority key identifier: 87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/3133312e3136312e382e302f32332d3233203d3e20323730383830.roa
Signing time:             Mon 04 Dec 2023 19:48:18 +0000
ROA not before:           Mon 04 Dec 2023 19:43:18 +0000
ROA not after:            Mon 02 Dec 2024 19:48:18 +0000
asID:                     270880
IP address blocks:        131.161.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:55:fe:0b:6d:34:fc:dc:29:74:c8:64:7b:a5:cf:8e:6b:96:ca:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
        Validity
            Not Before: Dec  4 19:43:18 2023 GMT
            Not After : Dec  2 19:48:18 2024 GMT
        Subject: CN=34ADCA433260CA56E88F330F1A1067B4FC96EA03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:3e:32:bb:2d:e5:d6:10:10:5d:b1:3f:bd:
                    24:26:ac:65:81:9d:76:41:a0:66:a2:7a:67:18:b4:
                    83:82:e6:0d:ec:12:23:ec:01:7a:86:d4:22:a9:a4:
                    e2:38:44:b4:a5:98:8c:68:8f:6e:ed:11:3f:05:8b:
                    06:f9:3c:33:51:55:fe:4d:a3:52:f2:74:ee:94:e7:
                    bd:5b:86:d7:ba:af:5d:aa:74:02:2a:d0:8c:2d:65:
                    7b:c7:c4:1d:86:6b:74:fd:ef:9b:19:5a:d9:07:e8:
                    10:57:6a:83:66:c5:3c:26:f7:bc:87:f2:10:bd:5d:
                    b2:87:36:c7:40:40:c8:76:ec:0b:ad:96:5f:52:91:
                    07:8a:ba:98:19:91:5b:7a:fa:47:16:ac:72:4a:3c:
                    26:bf:eb:7b:b2:40:c2:f8:af:4d:1b:b5:67:3e:fa:
                    53:78:12:b3:30:32:17:63:13:16:bc:60:80:af:cd:
                    fe:12:2c:8f:70:f9:64:36:ec:83:2c:0d:af:96:81:
                    a7:50:5b:ef:13:3d:14:10:59:fc:24:3b:a2:64:27:
                    d0:f2:b9:85:45:c9:e9:e3:47:23:ad:11:82:1f:f7:
                    79:5e:06:ff:d0:aa:7c:35:94:84:f1:b1:e6:57:32:
                    81:db:6f:2c:a9:99:ab:7b:40:f5:76:75:13:14:f9:
                    7d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AD:CA:43:32:60:CA:56:E8:8F:33:0F:1A:10:67:B4:FC:96:EA:03
            X509v3 Authority Key Identifier:
                keyid:87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/3133312e3136312e382e302f32332d3233203d3e20323730383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:85:75:d5:05:56:c2:06:dd:9c:7c:95:1b:4c:ec:dd:fe:9a:
         68:15:f4:e7:33:8c:d1:0f:bb:c4:43:84:b2:4e:00:73:f2:d5:
         49:bd:17:92:35:43:30:67:08:92:09:d9:ed:3d:50:84:d3:de:
         3a:54:da:4d:40:fe:a8:2f:68:ba:0d:c8:b0:50:d2:f4:e5:85:
         fc:58:4e:5d:ae:04:0d:3f:01:7f:11:21:bd:0e:aa:7e:b0:a4:
         eb:00:11:27:fb:35:77:52:f0:2d:66:d6:6f:32:25:8a:ff:4b:
         e4:ee:9c:89:af:2e:a4:8a:d0:15:a5:3d:f1:2f:8f:da:4e:c1:
         c0:bc:7e:99:13:a9:5d:cc:0f:80:ab:04:91:60:5e:a9:19:df:
         c9:bf:eb:4b:c1:af:c4:60:ad:76:0e:1f:1b:e5:c3:d5:94:6a:
         a0:a1:dc:c5:4f:dc:98:32:6c:c3:05:f1:ce:fc:77:89:95:97:
         74:53:82:29:5c:96:28:39:6e:1e:51:f3:52:f7:7c:83:8a:6b:
         5f:3c:cb:ac:fc:76:37:c2:b5:ba:cf:8a:6a:82:d9:2b:d6:99:
         a7:96:a0:91:1c:62:0f:64:3c:26:12:9f:71:f5:82:41:d7:ed:
         fe:70:db:28:18:2c:db:9c:99:e3:09:9a:5f:b8:07:7c:5a:01:
         a3:54:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org