Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232372e302f32342d3234203d3e20323633353232.roa
File:                     3133312e3130382e3232372e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          rxevAqsFireEZpdoAlgsEYkZEJpk5j4fs3VISCaccLw=
Subject key identifier:   CF:39:25:17:D6:BC:F0:C1:52:E6:3A:81:C8:82:21:57:2B:66:42:26
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       6E03994269414C54A87E8F1A3297793F26334105
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232372e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:12:45 +0000
ROA not before:           Thu 28 Dec 2023 17:07:45 +0000
ROA not after:            Thu 26 Dec 2024 17:12:45 +0000
asID:                     263522
IP address blocks:        131.108.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:03:99:42:69:41:4c:54:a8:7e:8f:1a:32:97:79:3f:26:33:41:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:07:45 2023 GMT
            Not After : Dec 26 17:12:45 2024 GMT
        Subject: CN=CF392517D6BCF0C152E63A81C88221572B664226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:e2:0b:3a:ba:f3:17:c5:b1:1c:1b:56:7c:
                    42:14:0f:23:9b:fa:79:e4:c3:44:2e:2f:21:c5:72:
                    e4:81:5d:4e:48:70:2a:0e:07:cd:8e:5f:32:06:2e:
                    e5:eb:a3:cb:3a:a5:a1:d7:98:87:e9:15:f4:97:06:
                    d6:6d:4e:37:82:6a:81:7e:a1:97:af:c7:45:0f:58:
                    1b:01:49:79:dc:bf:d7:e1:2c:16:29:81:02:87:f2:
                    28:89:e9:4c:36:2a:e7:aa:a9:7c:ff:f9:df:36:9d:
                    96:28:3e:0e:e0:be:cc:4c:99:29:75:29:2c:a3:04:
                    fa:22:d7:18:2b:2b:78:7a:ae:e6:73:73:84:a4:12:
                    d8:d9:8e:bf:f6:64:86:c6:f9:b8:44:66:16:dd:d6:
                    05:f7:4c:71:7e:a1:5b:7b:b5:9d:31:7f:06:14:5e:
                    05:18:c9:77:9d:4f:62:98:6e:b3:71:c0:2b:d4:c5:
                    27:08:46:97:61:a9:0e:4e:b8:7d:e2:38:a7:0a:a6:
                    39:e1:9c:02:24:69:73:76:35:ab:28:b4:5a:9a:a8:
                    09:b8:3a:cd:25:b7:73:d4:89:ef:a2:75:8c:ce:3d:
                    48:21:97:7c:2e:9d:6c:fe:1e:11:f7:51:5f:b2:95:
                    38:92:f0:fc:a6:2b:c7:2c:8e:b6:0f:e3:c2:5b:d7:
                    8d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:39:25:17:D6:BC:F0:C1:52:E6:3A:81:C8:82:21:57:2B:66:42:26
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232372e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f0:82:46:f0:31:3e:e3:dc:a1:cd:f9:9f:50:e2:55:98:a7:
         2c:e7:69:db:0f:49:7b:87:1b:6b:88:4d:23:ac:8f:fe:73:c0:
         81:95:e0:1f:b5:72:8b:34:c8:54:e0:c9:e6:a7:93:75:39:98:
         1c:56:4f:98:ff:5f:bc:d1:de:2a:b0:d1:1f:41:ca:ad:e0:3e:
         c9:ae:a6:36:20:9d:6c:35:94:d5:a0:eb:42:1b:d1:2c:0e:41:
         91:d0:69:dd:2b:2f:03:1e:5a:ef:e9:69:3b:60:e6:03:9f:d8:
         03:73:e1:25:68:b8:67:1f:51:65:76:3b:51:f7:bc:4f:84:77:
         ac:86:32:6f:8a:1d:e6:a1:a9:72:fa:54:78:11:45:b1:24:a2:
         b2:55:d9:13:4c:f4:1d:58:d4:23:e6:07:ae:75:9b:27:dd:52:
         93:30:4d:f2:69:68:73:c1:24:20:1d:3a:76:7d:45:b0:93:33:
         ba:07:ee:fa:78:37:5d:52:41:82:5c:a1:db:b7:30:7d:79:2e:
         56:a1:6c:47:3b:85:93:38:e8:cf:4e:35:d4:18:40:9a:d7:9d:
         70:79:4b:72:0c:2a:ae:96:96:9e:4f:a1:46:7a:c0:11:86:db:
         f1:ba:f5:76:85:74:ec:9f:b3:28:46:c7:ba:c3:6c:c2:1b:e1:
         b5:c9:1a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org