Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232342e302f32322d3233203d3e20323633353232.roa
File:                     3133312e3130382e3232342e302f32322d3233203d3e20323633353232.roa (raw, json)
Hash identifier:          xrDonaWpWfV1SRvaZwD6eCVPpapolnboGbLzpi6hpEw=
Subject key identifier:   EB:6E:64:91:3C:75:44:00:E7:72:23:68:70:C8:D3:DF:20:5C:99:7D
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       3E9A0E753E7BE85236CD2D24096732E0DCA96CC5
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232342e302f32322d3233203d3e20323633353232.roa
Signing time:             Wed 25 Oct 2023 14:25:52 +0000
ROA not before:           Wed 25 Oct 2023 14:20:52 +0000
ROA not after:            Wed 23 Oct 2024 14:25:52 +0000
asID:                     263522
IP address blocks:        131.108.224.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9a:0e:75:3e:7b:e8:52:36:cd:2d:24:09:67:32:e0:dc:a9:6c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Oct 25 14:20:52 2023 GMT
            Not After : Oct 23 14:25:52 2024 GMT
        Subject: CN=EB6E64913C754400E772236870C8D3DF205C997D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:97:c0:95:7b:7f:ec:98:cb:5c:6f:bb:9b:22:
                    c1:03:42:da:41:6f:5c:f1:9e:8c:d2:49:d9:43:cf:
                    4d:cd:f5:72:e9:33:0d:b6:fd:16:1c:ce:ee:42:2d:
                    61:fd:c2:75:d2:c2:e2:8f:ed:87:9f:9c:9f:dc:18:
                    8c:5a:df:1c:aa:af:74:5e:6b:fc:15:4d:a0:77:b3:
                    2b:d1:e7:67:54:84:a4:a0:0f:e1:00:76:25:8f:8e:
                    b8:70:22:c7:a7:11:e2:e2:82:75:28:8f:a2:50:88:
                    8a:e0:ce:59:68:1f:f5:cf:a6:dd:3f:35:47:25:98:
                    e1:cd:67:99:db:53:2e:e9:fb:ae:07:1d:c3:43:62:
                    63:a0:78:5a:06:82:75:b9:62:fd:45:22:34:42:b8:
                    de:c1:f0:4c:61:01:62:5a:f7:ac:ba:f5:b7:0a:dd:
                    ae:f3:bc:bc:88:6a:6e:50:97:2e:03:c3:12:25:ac:
                    2e:f9:54:ce:1f:f6:93:8e:d4:6d:d5:4d:da:4e:81:
                    28:fa:9d:5d:06:d6:b5:ef:e0:7e:35:fe:57:1d:97:
                    f6:b6:13:76:0c:87:60:22:3b:74:e2:33:96:28:7b:
                    57:00:e8:6a:1a:c9:43:05:83:4a:8f:69:96:93:5b:
                    4f:e4:a8:a1:c8:76:95:ff:a9:4f:8a:58:56:e0:bd:
                    f8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6E:64:91:3C:75:44:00:E7:72:23:68:70:C8:D3:DF:20:5C:99:7D
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232342e302f32322d3233203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:04:e3:c1:bb:5f:4c:5a:0a:44:20:16:4b:bb:f1:5f:f3:0f:
         09:00:db:d9:f4:89:b4:ed:87:f2:4d:b3:0e:43:ac:f1:94:7e:
         7b:57:6a:3f:68:9e:4c:3f:af:a0:6d:58:0d:42:4f:16:00:1f:
         9d:97:28:37:ea:60:60:3a:6e:f2:c5:62:d8:21:6d:f3:5a:f7:
         af:98:f3:57:7f:02:f3:c2:14:64:92:d5:37:48:75:94:81:a8:
         73:a3:9f:48:b9:5a:d1:2d:2f:7f:96:ea:64:ab:9f:0e:9c:4e:
         0c:4e:01:22:1e:e2:41:62:87:5b:5c:4b:47:54:39:c3:17:c5:
         1b:6a:3d:3c:7d:a1:10:16:2f:fc:43:27:34:24:e2:1f:6c:5f:
         d4:1a:ed:c2:b6:4e:04:a3:2a:ff:a0:b1:4b:59:09:60:70:72:
         9a:45:ec:8c:48:2c:46:e6:b5:50:10:ae:5a:9b:d7:0e:ec:07:
         74:37:25:03:b9:3a:0b:7e:35:cd:1b:07:94:b4:d5:7a:7e:07:
         72:92:0b:9d:56:93:7a:32:0e:fd:0a:c1:fc:b6:93:68:6c:11:
         07:25:37:01:fd:28:bc:54:4c:ce:51:19:21:7a:06:01:c6:41:
         90:33:69:57:90:95:5d:38:e1:89:13:aa:a9:04:89:83:26:a4:
         c7:59:0d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org