Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/0/3133312e302e39362e302f32322d3234203d3e20323633363439.roa
File:                     3133312e302e39362e302f32322d3234203d3e20323633363439.roa (raw, json)
Hash identifier:          AW+/l+IH+H+nlpwdKyfuClcSZNkA31lrMjmKGuAvvV8=
Subject key identifier:   60:4D:56:CC:8E:2A:5B:14:BA:66:AB:B5:28:6A:7B:DD:AD:02:79:89
Certificate issuer:       /CN=E6E20F39149B8A982191C8965AE44694A186B567
Certificate serial:       111A244C708F6A29614A208175C731166C139818
Authority key identifier: E6:E2:0F:39:14:9B:8A:98:21:91:C8:96:5A:E4:46:94:A1:86:B5:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6E20F39149B8A982191C8965AE44694A186B567.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/0/3133312e302e39362e302f32322d3234203d3e20323633363439.roa
Signing time:             Wed 21 Feb 2024 23:15:47 +0000
ROA not before:           Wed 21 Feb 2024 23:10:47 +0000
ROA not after:            Wed 19 Feb 2025 23:15:47 +0000
asID:                     263649
IP address blocks:        131.0.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1a:24:4c:70:8f:6a:29:61:4a:20:81:75:c7:31:16:6c:13:98:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E20F39149B8A982191C8965AE44694A186B567
        Validity
            Not Before: Feb 21 23:10:47 2024 GMT
            Not After : Feb 19 23:15:47 2025 GMT
        Subject: CN=604D56CC8E2A5B14BA66ABB5286A7BDDAD027989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:05:fb:a8:9f:27:0b:fe:f6:2a:1f:8e:26:c9:
                    74:a4:0e:9c:a3:ac:7f:81:26:c0:fa:4c:2d:76:5b:
                    8e:77:8a:87:63:eb:fb:c3:3c:94:77:13:e5:53:1e:
                    4b:61:ed:68:65:e1:4a:1c:da:8f:78:0d:b2:cc:a9:
                    22:a4:1b:17:ac:20:f4:02:ac:93:1b:db:5a:de:49:
                    c5:24:92:d0:a9:5e:5e:b0:6f:0a:81:20:7d:33:fc:
                    46:b4:11:4b:7e:ea:b8:eb:ee:81:d1:3d:e6:77:bc:
                    7f:3a:cb:a3:00:40:98:1b:ad:c3:bc:a8:6c:80:9e:
                    32:87:bf:20:dd:cd:2f:9b:c6:27:0d:5a:c4:be:9c:
                    b7:36:b2:cc:2c:a5:e9:c0:9d:0f:6b:9e:c1:40:9a:
                    11:ae:12:a5:3a:0e:5e:91:e3:6a:cd:81:f8:05:f8:
                    9a:28:94:87:ac:28:42:bf:9d:d9:b2:51:07:24:6b:
                    bd:84:e9:22:ec:8a:ba:f7:e8:bc:ff:e7:ff:b9:a3:
                    ff:23:5a:a6:c9:26:a1:14:87:1d:36:f0:36:74:59:
                    11:9e:00:30:a0:38:4e:33:1e:c4:88:d4:40:c1:8c:
                    69:66:6a:97:26:cb:48:81:ff:2e:ef:c0:78:09:08:
                    93:fc:bc:6c:ea:a1:94:e8:be:e9:d7:60:8e:91:55:
                    cd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4D:56:CC:8E:2A:5B:14:BA:66:AB:B5:28:6A:7B:DD:AD:02:79:89
            X509v3 Authority Key Identifier:
                keyid:E6:E2:0F:39:14:9B:8A:98:21:91:C8:96:5A:E4:46:94:A1:86:B5:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/0/E6E20F39149B8A982191C8965AE44694A186B567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6E20F39149B8A982191C8965AE44694A186B567.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/0/3133312e302e39362e302f32322d3234203d3e20323633363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:3a:b2:ac:c7:b4:6b:47:b9:e4:61:78:9e:90:5b:21:7d:06:
         36:ee:c5:4e:c4:c8:b6:c5:da:ee:dd:07:78:37:15:8c:52:83:
         f9:b6:ee:8b:df:db:68:13:32:f3:d3:82:e5:31:5e:0d:32:0d:
         62:3c:61:79:5c:f4:f5:7f:f5:ca:b7:f6:ea:af:02:1a:d4:c1:
         ef:73:78:94:ee:9c:97:95:5d:33:9f:21:d5:b4:a3:54:1e:d5:
         1e:d9:35:c1:45:5d:e1:91:78:1e:37:48:11:56:45:18:54:65:
         a1:7e:bf:9b:27:43:96:33:bb:51:31:dd:b5:c3:57:32:26:58:
         10:48:a5:f0:e4:90:a2:ad:e2:a9:d8:55:e8:57:03:92:b9:7d:
         4d:16:f2:a8:98:f5:2d:b7:96:12:09:73:27:be:8b:94:70:8a:
         6a:9a:d3:a1:db:ac:f8:20:3c:e3:fb:00:6e:30:3e:1f:d4:ee:
         b7:f5:46:da:ff:be:c8:b4:bc:d1:75:b0:8f:68:e5:51:5c:ac:
         c2:5b:cc:62:4f:2e:c8:b1:39:d2:dc:66:2c:60:46:48:75:71:
         41:1b:34:59:fb:01:fe:8e:fb:d5:90:fc:71:a8:f6:6e:4c:e4:
         56:8f:36:09:c1:b0:51:5d:92:c0:03:dc:3e:c2:32:6a:13:f6:
         84:63:8c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org