Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232342e302f32322d3332203d3e20323633353232.roa
File:                     3133312e3130382e3232342e302f32322d3332203d3e20323633353232.roa (raw, json)
Hash identifier:          uOkmr3vQ8S9n53MiDQ6PrPcG+jlORTgC+vwNBF+wK5o=
Subject key identifier:   9D:D0:F5:3B:B3:FB:8F:81:48:31:EF:E1:74:BA:A2:DE:1A:C6:E6:9B
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       1672DEB04549476A888E6859E8647B9E99CBFBFF
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232342e302f32322d3332203d3e20323633353232.roa
Signing time:             Thu 06 Apr 2023 22:30:57 +0000
ROA not before:           Thu 06 Apr 2023 22:25:57 +0000
ROA not after:            Thu 04 Apr 2024 22:30:57 +0000
asID:                     263522
IP address blocks:        131.108.224.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:72:de:b0:45:49:47:6a:88:8e:68:59:e8:64:7b:9e:99:cb:fb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Apr  6 22:25:57 2023 GMT
            Not After : Apr  4 22:30:57 2024 GMT
        Subject: CN=9DD0F53BB3FB8F814831EFE174BAA2DE1AC6E69B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:ce:31:0e:13:36:e8:c5:57:d5:03:8d:1f:
                    42:bf:e3:a0:ce:79:4c:7b:24:a0:1f:23:df:d8:24:
                    03:c2:8a:1c:af:53:65:4c:52:7f:c9:17:f1:cc:8f:
                    94:05:fa:d0:0d:45:f6:8d:54:49:a8:1b:03:c7:72:
                    ef:2f:b7:32:e3:b9:5b:05:6c:62:d8:b7:a7:b0:1e:
                    8e:ff:f8:29:6a:19:fa:a5:34:53:6b:58:51:78:2f:
                    ba:6c:bb:50:f8:a5:fa:5f:43:e6:e6:18:03:5d:00:
                    c1:03:5d:a9:6c:91:58:7e:f1:49:db:e7:24:a0:77:
                    f6:b5:2e:7e:30:51:c6:b7:63:44:58:cb:ca:0d:21:
                    17:8d:39:e3:bb:2a:88:9f:75:4e:29:b2:68:c0:be:
                    fd:9f:e8:1c:d4:d1:52:4d:4b:14:20:b4:d6:cf:7b:
                    56:9c:0a:0b:a5:7d:63:da:eb:d4:5d:c0:fd:58:ac:
                    e4:c6:fe:49:85:de:a7:c2:4a:e8:b3:4d:38:98:d2:
                    b9:4f:fa:1e:66:00:e4:b2:56:f6:db:fa:00:1f:9e:
                    c0:7a:44:8e:fd:5f:e9:79:47:90:2c:64:e4:f8:31:
                    3a:d8:95:de:4f:39:4c:77:53:21:c6:24:51:4d:ed:
                    e1:8e:de:4b:75:8f:72:8b:21:ea:55:55:10:b6:08:
                    b7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D0:F5:3B:B3:FB:8F:81:48:31:EF:E1:74:BA:A2:DE:1A:C6:E6:9B
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232342e302f32322d3332203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:ed:a0:f5:a7:e6:30:68:51:dd:5b:0b:36:b0:d3:46:5c:45:
         0a:fc:38:64:25:ae:38:ae:3b:d8:0b:44:dc:da:2f:dd:12:5b:
         af:8a:72:6e:92:e4:24:f8:6d:86:65:26:66:0a:67:60:53:11:
         3d:d0:48:31:fe:f9:e1:f7:03:5e:77:97:53:06:d0:4e:63:a6:
         a1:ea:30:38:47:86:d0:ae:03:55:84:f1:5f:34:78:d5:19:b4:
         d9:d7:79:7c:a2:14:7a:3d:2a:26:0e:7b:ee:ce:71:f8:85:18:
         09:a8:af:e4:0d:d9:54:79:8e:3e:a4:59:3c:70:53:bf:31:c9:
         de:25:6d:57:2b:35:e5:58:ae:f3:3e:61:43:84:98:a7:a4:b6:
         9c:83:d6:91:b5:6e:13:38:0b:e7:1c:b7:d4:19:f2:be:04:65:
         9e:40:cd:83:4f:dd:85:9d:8c:c3:da:09:1d:f4:42:b2:cb:fd:
         2c:8b:3c:2e:08:26:09:8b:0d:77:e2:ab:0a:31:04:57:c4:ba:
         8d:c2:e7:e6:41:4c:32:bb:d3:4a:17:97:34:1d:16:07:36:89:
         bf:c0:45:19:aa:2e:97:27:8e:1f:38:34:0d:42:8e:25:cf:93:
         03:0e:c9:7d:d8:1a:df:e3:93:3b:05:ad:64:31:12:47:0e:75:
         b8:d8:02:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org