Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3133312e3130302e3132382e302f32322d3234203d3e203532383636.roa
File:                     3133312e3130302e3132382e302f32322d3234203d3e203532383636.roa (raw, json)
Hash identifier:          Y5t7Rn8VlAhNAxcoxZTppDrIvoh77QFzbDs4RBdLhxc=
Subject key identifier:   3C:08:2D:61:FD:B1:9F:77:EE:39:64:BE:FA:15:FB:C4:0E:72:1E:4C
Certificate issuer:       /CN=DA7937B89F3B0861490B3DD6174BE1D51AD2A94C
Certificate serial:       42C72A0024C937BD9FE03105AC68AB71493EB489
Authority key identifier: DA:79:37:B8:9F:3B:08:61:49:0B:3D:D6:17:4B:E1:D5:1A:D2:A9:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3133312e3130302e3132382e302f32322d3234203d3e203532383636.roa
Signing time:             Wed 12 Jul 2023 20:59:43 +0000
ROA not before:           Wed 12 Jul 2023 20:54:43 +0000
ROA not after:            Wed 10 Jul 2024 20:59:43 +0000
asID:                     52866
IP address blocks:        131.100.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c7:2a:00:24:c9:37:bd:9f:e0:31:05:ac:68:ab:71:49:3e:b4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA7937B89F3B0861490B3DD6174BE1D51AD2A94C
        Validity
            Not Before: Jul 12 20:54:43 2023 GMT
            Not After : Jul 10 20:59:43 2024 GMT
        Subject: CN=3C082D61FDB19F77EE3964BEFA15FBC40E721E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c8:0c:93:5d:dd:ba:0e:e2:30:17:14:f7:1d:
                    be:3b:53:f4:b7:36:d0:43:77:e0:e4:e1:7e:1a:d5:
                    63:cc:92:dd:e2:c3:c7:80:fe:5e:dd:7b:c9:12:f5:
                    28:32:f5:95:d1:14:dc:37:b4:d6:34:60:02:05:21:
                    c9:7a:f4:50:26:8e:9f:4b:b7:8a:25:93:22:16:fd:
                    e1:82:92:c2:25:5a:95:73:bd:a3:20:0c:68:d3:6a:
                    d4:19:f0:26:90:de:18:d7:50:b9:40:49:36:a1:50:
                    9d:de:c1:cd:a0:44:cd:5a:ae:d7:1b:e0:01:cf:2e:
                    bd:86:bd:4e:8b:0e:37:b4:87:91:b2:ac:af:7a:63:
                    96:59:97:c9:cb:7e:a3:b0:ff:b8:5f:d1:9d:8a:df:
                    06:38:4d:39:09:7f:62:4e:17:95:cb:29:f8:4e:4f:
                    40:67:49:96:b8:64:2c:7d:82:1a:66:39:14:03:42:
                    db:bb:37:e1:63:ab:e8:07:f7:97:fb:76:e4:89:4f:
                    7c:5c:64:64:86:38:2e:89:59:23:33:05:d0:ef:8d:
                    97:7c:4e:ae:7c:b2:40:32:3a:7b:58:55:3c:e9:36:
                    84:89:7f:32:b6:85:39:db:1a:af:98:71:32:d7:06:
                    01:b5:de:22:6c:42:84:07:40:e7:e5:4e:bd:e0:ec:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:08:2D:61:FD:B1:9F:77:EE:39:64:BE:FA:15:FB:C4:0E:72:1E:4C
            X509v3 Authority Key Identifier:
                keyid:DA:79:37:B8:9F:3B:08:61:49:0B:3D:D6:17:4B:E1:D5:1A:D2:A9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3133312e3130302e3132382e302f32322d3234203d3e203532383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:27:d4:6d:b3:d3:d8:64:07:6e:b2:ec:c2:c5:52:0b:53:40:
         53:11:e6:2a:78:93:2b:5c:e7:29:33:91:d0:35:a5:e3:a5:79:
         17:5c:ea:29:10:9f:5f:7a:c1:31:ca:f8:39:b7:c6:2f:fb:27:
         47:fd:fd:48:c9:fb:57:4c:1f:82:a7:aa:ac:5c:f7:99:79:34:
         b2:f6:3e:29:28:42:25:a1:ba:ca:04:23:8a:84:34:0e:94:11:
         24:5a:c9:07:09:66:56:38:32:ff:8a:39:e6:8b:28:ea:59:9c:
         5e:f0:2a:7d:9e:b0:65:8d:fd:e3:30:11:af:07:06:fb:4a:e0:
         ae:92:33:30:59:e7:d5:49:b2:8a:0d:44:0d:b8:de:f7:56:29:
         7e:d1:70:cf:ff:90:3d:ff:90:a1:0a:ed:2f:3f:d3:d0:16:07:
         bc:8c:d9:cc:13:7f:9f:53:79:d7:b7:eb:b1:47:d8:8d:02:48:
         2f:43:fa:29:a2:c5:fa:74:12:19:d0:f8:e6:16:30:40:cf:3f:
         d8:f1:cd:63:27:3c:09:76:7d:d3:a4:93:3c:c3:5a:2e:0a:e5:
         fc:80:a7:66:8a:69:25:4a:9a:e3:d7:33:11:90:b3:de:a8:7d:
         64:e5:05:d1:61:64:6b:1e:38:8c:0f:30:9c:4d:cb:ab:3a:2d:
         d3:50:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org