Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa
File:                     3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          YJA8mEnwkb8negKJG2W/jvLSK5Lm2/c+RXTwia1lWtg=
Subject key identifier:   86:E2:5A:1D:5C:BE:47:4A:8E:9D:77:02:CA:7C:7A:CE:2F:79:B7:6B
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       0EC089E1DBF352D2D42BA58E0C04D9E0DC46C760
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:12:15 +0000
ROA not before:           Thu 28 Dec 2023 17:07:15 +0000
ROA not after:            Thu 26 Dec 2024 17:12:15 +0000
asID:                     263522
IP address blocks:        131.108.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c0:89:e1:db:f3:52:d2:d4:2b:a5:8e:0c:04:d9:e0:dc:46:c7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:07:15 2023 GMT
            Not After : Dec 26 17:12:15 2024 GMT
        Subject: CN=86E25A1D5CBE474A8E9D7702CA7C7ACE2F79B76B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:da:87:d8:73:86:66:7a:b8:80:4a:1f:2a:
                    ae:06:64:9c:58:74:9e:d0:e7:42:5d:18:91:b5:ec:
                    cf:71:49:93:44:de:6a:9c:a1:27:e8:f0:5c:5c:56:
                    fa:97:1a:ff:fd:36:a3:d7:21:4a:51:ae:0f:3e:c8:
                    57:3f:d9:b4:2f:dc:58:cf:30:82:9f:d8:c6:da:6f:
                    49:c1:0e:cd:ae:69:21:72:d7:ea:27:c8:11:95:90:
                    37:98:f5:43:46:b5:d8:36:cb:b4:19:ea:8c:d0:3d:
                    25:68:c1:3f:bc:ef:ad:82:d7:17:02:fd:65:af:23:
                    1d:9d:66:3c:c0:3f:d6:ae:b5:da:46:5f:b1:c8:04:
                    c1:d6:20:67:91:b7:4d:f8:69:e9:34:7f:d6:ff:94:
                    ab:4a:22:28:8a:b5:36:82:a5:d1:31:9c:48:2e:7c:
                    a6:05:b4:ea:fa:6c:85:c5:3c:c1:75:3f:a2:47:09:
                    3d:23:56:cd:0c:d4:7b:62:20:3a:0f:c7:ce:17:41:
                    d1:5f:d0:97:10:23:df:50:e5:27:1b:78:a4:ce:da:
                    6b:9e:00:77:b5:1f:22:5c:98:b3:15:56:cc:59:63:
                    31:40:07:9c:4a:5d:a5:d6:6d:3f:53:84:06:f6:8c:
                    a6:5e:e8:c3:7a:16:5b:24:85:95:5f:ea:b5:9a:a5:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E2:5A:1D:5C:BE:47:4A:8E:9D:77:02:CA:7C:7A:CE:2F:79:B7:6B
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:69:96:33:6b:80:11:27:6b:0d:6a:75:44:be:7f:21:e7:
         46:fa:5b:bb:54:f4:5a:62:fd:d7:c5:50:f3:8f:ab:fd:e6:93:
         f1:5c:82:01:c8:01:da:4d:77:94:37:6e:03:ac:12:99:cd:43:
         0e:cc:c3:dd:db:48:28:4f:e1:38:ea:d7:0d:fa:0f:44:65:df:
         b6:17:f6:8c:92:ff:d4:14:26:44:b7:dd:1c:3b:68:0b:37:3f:
         40:5b:3c:f7:21:2f:d5:5a:ae:0f:df:ac:56:a0:54:d6:7e:59:
         1a:9b:b4:02:04:40:84:03:ce:d3:2b:3e:64:12:c2:c6:40:3c:
         fb:f7:cf:bb:89:b4:7b:86:50:f0:83:24:cd:25:fc:b1:34:bf:
         7d:c0:41:40:1a:d3:b5:5d:a4:c5:3a:a6:e2:73:e2:6a:de:7d:
         41:08:4e:ad:62:d8:dd:1e:1c:a5:0f:6f:9a:47:5e:41:e2:90:
         c4:e1:38:90:70:8b:02:00:46:76:35:1d:26:52:9f:63:8a:8b:
         75:c8:9f:02:2a:d5:56:94:5a:69:27:6c:86:78:bd:84:4f:81:
         39:1f:fd:8a:c8:19:cf:51:36:da:be:7b:c3:c0:b8:e5:6f:94:
         f6:7a:8d:1a:db:c5:91:3e:88:33:07:a9:41:8b:78:c9:b6:07:
         79:39:38:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org