Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232362e302f32332d3233203d3e20323633353232.roa
File:                     3133312e3130382e3232362e302f32332d3233203d3e20323633353232.roa (raw, json)
Hash identifier:          2nngWydMp3ZeC9jXZ4aoMil+nvAMEgT0A3pKiWBh0ao=
Subject key identifier:   09:62:07:AA:64:94:15:E3:EC:0F:FB:79:BC:C3:DD:3F:4F:73:A2:EC
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       7DC51E0A1CB4353804A663155EBBBAA229E47308
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232362e302f32332d3233203d3e20323633353232.roa
Signing time:             Wed 25 Oct 2023 01:00:42 +0000
ROA not before:           Wed 25 Oct 2023 00:55:42 +0000
ROA not after:            Wed 23 Oct 2024 01:00:42 +0000
asID:                     263522
IP address blocks:        131.108.226.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c5:1e:0a:1c:b4:35:38:04:a6:63:15:5e:bb:ba:a2:29:e4:73:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Oct 25 00:55:42 2023 GMT
            Not After : Oct 23 01:00:42 2024 GMT
        Subject: CN=096207AA649415E3EC0FFB79BCC3DD3F4F73A2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:ef:74:4f:8b:8c:9a:87:24:47:51:d1:68:
                    6b:2b:9c:42:ad:69:d9:79:1a:dd:f3:33:dc:34:9c:
                    4f:f0:87:4e:69:79:18:2f:73:c5:b7:b8:a7:40:5b:
                    7e:25:f2:01:d4:de:57:1c:b0:91:af:44:cf:26:44:
                    87:2b:52:ca:29:de:d3:f6:d8:28:45:db:c1:4f:ab:
                    fd:b1:1c:a3:4a:bd:3a:2e:6e:f8:aa:fe:b4:92:66:
                    37:b5:0b:f9:bf:da:16:73:5a:a2:ec:9a:1e:fe:05:
                    ac:9b:67:8f:e7:28:5e:b6:c2:ba:27:f4:5f:4d:95:
                    bb:a7:9d:d7:e9:f2:28:d8:40:82:b4:b3:c6:03:f5:
                    50:fb:c3:19:a7:07:e4:ea:b6:ea:a7:3f:d5:a6:e8:
                    ed:a5:45:9f:5e:7b:49:1a:05:39:6d:5f:8f:9b:50:
                    f9:27:61:83:a4:36:8a:c2:72:07:ac:04:fd:d0:df:
                    b3:13:7e:e5:d8:30:bb:f8:bc:64:cb:d7:70:0f:ec:
                    92:1b:91:f5:94:19:19:99:9c:d5:2b:7f:35:f2:c4:
                    0e:9b:33:b0:a2:c4:4b:87:0b:f0:83:9d:e0:01:d8:
                    6d:64:4b:69:cd:6d:b2:13:72:da:79:d3:95:bf:9d:
                    bf:3d:76:4b:d3:0c:34:27:4f:77:cd:cc:fc:96:36:
                    f3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:62:07:AA:64:94:15:E3:EC:0F:FB:79:BC:C3:DD:3F:4F:73:A2:EC
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232362e302f32332d3233203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:c2:6c:15:70:98:c2:e0:ab:f2:0e:d9:7d:92:cc:b9:92:bc:
         23:70:57:da:60:d0:33:22:2d:2f:e5:a7:d7:36:b5:fa:84:c1:
         c1:e0:66:8e:a5:44:eb:2c:00:aa:78:88:29:77:41:05:8d:9f:
         4e:aa:af:d6:9e:66:ac:22:63:e4:0b:1e:c5:07:be:e8:64:df:
         2c:80:2d:ca:eb:2c:e3:fc:f2:9d:39:22:88:96:fd:fa:69:93:
         82:6d:a6:27:bf:91:fe:00:71:ea:fa:b6:b3:d7:d0:e5:9f:74:
         1a:c4:d5:e8:31:4c:b0:6d:cf:d8:16:1a:71:f1:9b:08:7e:06:
         8e:21:2d:e6:77:ae:e7:e2:ff:f8:19:c7:9c:85:c8:84:15:cc:
         51:c1:a9:0f:a8:c5:08:19:0f:31:05:69:62:e4:c7:37:e3:c1:
         b3:f2:2e:08:23:30:3a:4b:92:45:2a:ca:95:47:ab:57:fe:52:
         d1:c9:44:d1:73:7f:d4:f2:32:0a:5e:27:ac:e8:71:71:56:20:
         b4:e7:d7:34:80:26:e6:10:29:28:b7:00:f6:49:e4:6b:5b:50:
         8a:aa:38:e5:fd:5e:ab:ee:1b:d0:a8:0b:f1:a2:0e:e8:bc:bf:
         e0:32:58:b4:ae:31:b5:f1:2c:0f:80:c9:23:bf:9b:32:a2:b2:
         db:cf:5d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org