Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/3133312e3130302e32342e302f32322d3234203d3e203533313037.roa
File:                     3133312e3130302e32342e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          Ij6tfM+nErrLXXAJaCgfAkO0MAWUUy7u+DxIgav8uw8=
Subject key identifier:   34:53:8A:53:1C:10:78:D9:5F:57:1B:87:45:03:1D:A1:EA:12:C9:E3
Certificate issuer:       /CN=EA8C27663AB4EE960A9C52C7193BD353B940D514
Certificate serial:       326DFC14473C67A01060D8FC2E6B9164B5A089AF
Authority key identifier: EA:8C:27:66:3A:B4:EE:96:0A:9C:52:C7:19:3B:D3:53:B9:40:D5:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/3133312e3130302e32342e302f32322d3234203d3e203533313037.roa
Signing time:             Tue 30 Jul 2024 21:36:24 +0000
ROA not before:           Tue 30 Jul 2024 21:31:24 +0000
ROA not after:            Tue 29 Jul 2025 21:36:24 +0000
asID:                     53107
IP address blocks:        131.100.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6d:fc:14:47:3c:67:a0:10:60:d8:fc:2e:6b:91:64:b5:a0:89:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8C27663AB4EE960A9C52C7193BD353B940D514
        Validity
            Not Before: Jul 30 21:31:24 2024 GMT
            Not After : Jul 29 21:36:24 2025 GMT
        Subject: CN=34538A531C1078D95F571B8745031DA1EA12C9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:79:b2:4c:d2:67:f9:fb:85:d2:ea:bf:c4:
                    33:e3:32:97:76:4a:61:f5:bd:0b:59:bb:c6:4c:93:
                    4a:8e:76:10:19:be:79:8d:d0:2c:95:64:59:b9:56:
                    bd:85:15:54:de:48:de:51:bf:ca:38:54:f3:40:0f:
                    ad:a9:0f:4b:01:df:1c:0c:93:2b:ef:57:c0:29:01:
                    fd:06:3b:37:ce:60:79:bd:95:b8:70:42:7f:dd:0e:
                    9b:8a:95:9a:9c:0a:21:54:3f:0d:d9:79:6d:b3:ad:
                    20:77:9a:f0:dd:20:c7:90:5d:bc:77:94:c3:f1:64:
                    ac:73:30:63:0d:3c:b5:53:81:f7:63:58:be:e4:c7:
                    64:23:b8:e3:52:f3:97:58:d7:41:7c:6e:a4:90:d6:
                    13:ce:09:38:17:34:de:50:86:87:0e:d4:96:5a:a7:
                    4e:fb:4e:c3:66:19:18:ad:9d:5b:43:c1:e4:c1:0d:
                    20:79:6a:1e:d7:81:90:c4:03:53:47:36:36:b4:27:
                    02:d4:ad:89:db:62:07:a6:c5:b9:d5:2e:b1:ff:73:
                    ce:88:a3:31:69:4f:47:a9:c6:54:49:e7:d5:84:56:
                    0f:dd:40:f8:92:3c:d4:ff:5f:a3:5f:43:da:be:77:
                    d0:33:a0:13:31:b9:ca:2a:b5:67:a1:78:39:db:20:
                    e4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:53:8A:53:1C:10:78:D9:5F:57:1B:87:45:03:1D:A1:EA:12:C9:E3
            X509v3 Authority Key Identifier:
                keyid:EA:8C:27:66:3A:B4:EE:96:0A:9C:52:C7:19:3B:D3:53:B9:40:D5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/3133312e3130302e32342e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:26:93:b1:11:59:0a:91:b8:10:f2:c2:0d:5f:06:c0:2c:99:
         27:81:20:26:bf:09:98:5e:1e:91:e5:7b:69:d1:90:26:4a:91:
         31:81:3d:44:4e:ab:a5:6d:d6:4e:a3:7f:e3:04:d7:51:bd:95:
         82:3e:eb:f4:a8:b7:88:1d:20:2f:94:d0:dc:47:17:27:a3:68:
         44:f9:11:82:7b:dd:a3:92:36:0b:94:f3:47:b3:ca:94:99:c5:
         b1:68:73:74:57:66:1a:96:07:0c:89:3c:dd:60:d7:ca:1e:2c:
         f3:38:2c:7e:dd:60:bd:91:c1:e2:1d:6f:1c:77:c0:7b:f3:91:
         96:fd:7f:f3:89:d0:9a:66:a3:69:7f:94:ce:f0:61:8b:66:b2:
         73:a2:9c:87:be:22:72:f6:62:71:d1:fc:a5:ff:c1:0a:04:e5:
         67:07:29:67:c3:db:d0:9c:0e:2e:34:89:cc:93:04:38:6e:a5:
         68:4b:84:1b:0f:9c:b9:97:1e:7f:7c:e9:c3:80:66:9b:ef:c9:
         11:f8:45:1c:2a:0b:8b:e6:c2:1e:1e:4a:29:b2:05:d1:c8:50:
         6f:2c:8b:6e:e2:ed:1a:8d:c7:0a:36:30:ac:20:11:2f:53:d5:
         13:ef:78:92:7d:9a:62:a3:6f:76:38:b1:f9:34:4f:d3:b9:85:
         cc:d7:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 09:40:49 2024 by rpki-client on console-ams.rpki-client.org