Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa
File:                     3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa (raw, json)
Hash identifier:          9BToHyTLHtojS5sApSaeswRhR1+3i5HlysmHUl/68Zc=
Subject key identifier:   76:01:AF:46:DA:83:77:F2:E1:8B:0E:40:49:A0:A9:FC:85:45:B4:F4
Certificate issuer:       /CN=08EDA787E9DEE1DD42901F0A35C48977DEF4E693
Certificate serial:       57628D950862A46CAF997914DD1FA657550BFB26
Authority key identifier: 08:ED:A7:87:E9:DE:E1:DD:42:90:1F:0A:35:C4:89:77:DE:F4:E6:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08EDA787E9DEE1DD42901F0A35C48977DEF4E693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa
Signing time:             Wed 03 Apr 2024 20:56:18 +0000
ROA not before:           Wed 03 Apr 2024 20:51:18 +0000
ROA not after:            Wed 02 Apr 2025 20:56:18 +0000
asID:                     267560
IP address blocks:        181.191.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:62:8d:95:08:62:a4:6c:af:99:79:14:dd:1f:a6:57:55:0b:fb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08EDA787E9DEE1DD42901F0A35C48977DEF4E693
        Validity
            Not Before: Apr  3 20:51:18 2024 GMT
            Not After : Apr  2 20:56:18 2025 GMT
        Subject: CN=7601AF46DA8377F2E18B0E4049A0A9FC8545B4F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:a2:35:1a:27:8b:36:8b:c0:20:7d:8b:93:
                    c8:43:2c:e8:c0:77:9d:76:fe:4e:87:f8:be:f8:a3:
                    52:ee:a0:94:fc:44:bf:6d:f5:7e:74:85:1a:dc:40:
                    9a:92:68:81:65:3d:93:7f:dc:4b:6d:e1:5b:f9:99:
                    46:3c:14:31:8d:d0:21:5b:f8:41:a0:f8:4c:95:32:
                    16:69:2f:38:bd:d0:48:e9:15:86:32:e7:f9:5e:1e:
                    78:d7:3e:23:40:15:93:dd:6f:4f:83:28:7a:ae:da:
                    49:a4:dd:d3:7f:eb:ac:b6:93:20:f9:39:47:86:fd:
                    61:9b:17:cc:0b:51:37:30:c1:74:58:fd:92:16:53:
                    00:4a:1d:d1:9d:d5:e3:a5:14:67:c5:6a:54:18:ec:
                    07:c6:03:14:61:b1:b8:33:d9:f2:22:fd:64:f1:08:
                    db:05:4d:70:85:17:32:67:b1:38:8d:b7:46:83:e1:
                    0e:68:a9:58:9a:e3:84:16:7a:2e:0a:23:b2:e1:19:
                    9e:c8:4c:26:d6:06:91:af:d3:79:6c:8c:86:29:74:
                    db:1c:53:89:67:5c:3f:c6:a5:de:ee:48:ce:fc:66:
                    b4:20:e9:87:1e:6e:d1:e3:4a:2e:a3:41:50:e6:1e:
                    64:88:a5:ac:5d:56:63:36:eb:3c:eb:46:9c:09:97:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:01:AF:46:DA:83:77:F2:E1:8B:0E:40:49:A0:A9:FC:85:45:B4:F4
            X509v3 Authority Key Identifier:
                keyid:08:ED:A7:87:E9:DE:E1:DD:42:90:1F:0A:35:C4:89:77:DE:F4:E6:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/08EDA787E9DEE1DD42901F0A35C48977DEF4E693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08EDA787E9DEE1DD42901F0A35C48977DEF4E693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a4:87:8b:20:18:e6:8c:2c:88:6e:cf:8c:cb:cf:f6:3f:dd:
         6d:0c:25:1b:51:0c:46:3e:d4:f5:b3:f1:fd:ba:fd:16:ae:9d:
         74:6f:73:29:7b:04:12:6d:7b:a8:09:ba:84:cd:a2:57:e9:2a:
         f1:08:50:93:a6:69:43:b7:65:ab:cb:8f:fe:2f:a2:14:c8:9b:
         11:d6:a3:f5:a5:ce:8d:a1:d2:27:ad:8e:62:e1:be:92:97:23:
         2e:d0:bf:0a:b4:39:cb:48:ee:e9:64:8d:ce:07:84:e3:48:d7:
         d4:bb:ba:46:83:66:f0:6d:e7:9e:30:99:6b:cb:47:df:eb:dc:
         1a:19:1c:ce:df:ba:a2:1a:af:fc:db:6c:cf:f8:6a:48:c1:ba:
         7e:33:49:d6:35:27:cf:e1:29:c3:07:73:04:c9:ce:a5:cb:f9:
         bb:77:6c:6d:95:a6:cb:c4:c2:e3:cd:ec:a1:fb:12:d8:45:88:
         f4:e9:f9:0f:56:c8:d0:d7:fa:de:95:30:f6:b8:43:67:3f:d3:
         31:db:ea:58:73:9c:4b:6d:88:b5:a1:76:2e:8e:9a:ea:29:64:
         43:7f:0f:9d:b1:e6:6d:4a:bb:5a:60:a0:cd:5c:18:ee:8b:5c:
         61:41:49:bc:d6:c8:d3:d5:e1:58:bb:49:fb:14:4d:c4:81:ff:
         70:fa:b4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org