Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/3133312e3235352e34382e302f32322d3332203d3e20323632373737.roa
File:                     3133312e3235352e34382e302f32322d3332203d3e20323632373737.roa (raw, json)
Hash identifier:          h9ixSz9MxOyQwa8y+0pe7x2TLgxSksgZerrHWjIAwpQ=
Subject key identifier:   82:35:17:49:2D:1E:FF:EE:F4:E0:E5:22:70:D0:2B:28:68:DB:50:36
Certificate issuer:       /CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
Certificate serial:       3A661E986427E0FE581763B89C319E6007001E47
Authority key identifier: 03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/3133312e3235352e34382e302f32322d3332203d3e20323632373737.roa
Signing time:             Mon 22 May 2023 16:33:57 +0000
ROA not before:           Mon 22 May 2023 16:28:57 +0000
ROA not after:            Mon 20 May 2024 16:33:57 +0000
asID:                     262777
IP address blocks:        131.255.48.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:66:1e:98:64:27:e0:fe:58:17:63:b8:9c:31:9e:60:07:00:1e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
        Validity
            Not Before: May 22 16:28:57 2023 GMT
            Not After : May 20 16:33:57 2024 GMT
        Subject: CN=823517492D1EFFEEF4E0E52270D02B2868DB5036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:75:7a:1a:2f:3b:44:cc:49:67:60:b8:f3:
                    dd:0d:ef:b2:1e:18:c4:f1:ea:f3:b5:1c:0e:92:96:
                    60:b7:c5:74:ff:89:d1:29:cc:f4:d4:b0:f0:47:17:
                    7a:ad:63:54:4b:74:b3:74:3b:df:b8:2b:05:02:3f:
                    2e:25:a5:c6:3e:25:49:c9:1d:e5:57:81:89:ed:99:
                    74:ac:16:f3:87:58:bf:7d:bd:a7:36:9c:4c:d2:8a:
                    1f:2c:57:f9:d7:dd:fe:ba:5e:8b:2e:12:fc:64:79:
                    6e:0f:60:de:12:a3:86:f0:e7:03:4a:e3:89:96:e0:
                    25:e7:dc:fe:84:0a:47:c4:64:9e:4a:4a:1b:77:69:
                    a2:84:ce:b2:26:b0:bb:54:43:71:a8:83:fc:88:2a:
                    b1:34:31:79:9f:b9:07:c3:bb:f3:b3:0c:57:27:f4:
                    ee:91:b8:e9:22:a6:81:f6:d5:20:9f:eb:67:9f:4e:
                    59:81:94:72:05:2d:57:0a:fa:a9:76:19:a1:62:3f:
                    8f:52:ae:24:e4:21:f1:70:c2:f1:63:52:db:5a:be:
                    cd:42:ab:e7:5e:17:34:a2:89:3e:09:5a:59:81:0b:
                    e3:ac:a5:5e:db:af:74:64:67:6b:2d:b3:92:6e:c6:
                    94:ce:c7:8d:f1:ac:a1:50:57:d3:7c:ad:ed:80:3f:
                    63:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:35:17:49:2D:1E:FF:EE:F4:E0:E5:22:70:D0:2B:28:68:DB:50:36
            X509v3 Authority Key Identifier:
                keyid:03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/03EC8988694A8AF5CA30CF11A817D548CF1FA024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/3133312e3235352e34382e302f32322d3332203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:ad:aa:15:44:d0:56:8d:7b:7f:dc:92:da:63:85:2d:df:62:
         d1:bc:c0:78:5f:c5:de:94:c7:1b:5a:d2:bb:24:82:90:20:bc:
         ac:d1:26:2b:e1:cb:08:e3:f0:bd:50:a6:16:53:2c:05:32:a0:
         9c:5b:35:19:41:e9:c8:cd:f3:2e:da:83:74:51:a2:de:28:97:
         1a:fe:fa:98:f7:1a:e8:68:4c:ff:c1:93:61:81:3c:73:be:45:
         75:96:3f:f0:7c:d1:9f:fa:cf:22:3f:d0:8b:1f:e0:4a:3f:32:
         32:db:27:29:e9:2d:22:e9:c4:61:f2:92:d0:e1:7b:6f:f7:76:
         20:fb:4e:79:a4:d6:f8:9a:9f:95:f7:18:51:4d:20:6c:fe:79:
         ea:6b:99:d9:0d:c2:da:74:9b:21:42:09:ae:20:fc:39:2b:2b:
         10:1c:88:37:e2:18:fa:24:63:34:16:31:0b:b6:84:42:22:b3:
         b9:16:fe:a7:b1:b9:20:04:61:40:ce:42:17:cf:13:d5:9c:5a:
         2d:49:12:8d:11:65:28:c8:b0:a9:af:b5:c7:da:08:cc:45:3e:
         7f:bc:33:90:77:11:0a:17:ea:d2:28:02:e5:a9:bf:71:98:a7:
         5c:b2:9d:9c:c0:13:88:98:2c:85:a8:04:11:7b:53:69:f3:c6:
         f7:6c:64:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org