Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32342d3234203d3e20323730393436.roa
File:                     3133312e3130382e3135322e302f32342d3234203d3e20323730393436.roa (raw, json)
Hash identifier:          I6dgmPrJ+8eut97sMwo7kXkHkO74bNL1qh3HKoQWBy4=
Subject key identifier:   3C:C1:EB:88:FB:09:2B:55:6D:A2:7A:CC:D4:6B:A7:B3:A6:7D:25:3A
Certificate issuer:       /CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Certificate serial:       1AE7CFC4A3D304DB0664E743249CC82BE8A37A
Authority key identifier: 87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32342d3234203d3e20323730393436.roa
Signing time:             Sat 17 Feb 2024 05:23:53 +0000
ROA not before:           Sat 17 Feb 2024 05:18:53 +0000
ROA not after:            Sat 15 Feb 2025 05:23:53 +0000
asID:                     270946
IP address blocks:        131.108.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e7:cf:c4:a3:d3:04:db:06:64:e7:43:24:9c:c8:2b:e8:a3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
        Validity
            Not Before: Feb 17 05:18:53 2024 GMT
            Not After : Feb 15 05:23:53 2025 GMT
        Subject: CN=3CC1EB88FB092B556DA27ACCD46BA7B3A67D253A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:8e:1c:c6:6e:d5:5b:3a:9f:8e:11:91:24:
                    f0:55:65:2f:53:a2:76:4a:93:e7:6e:4d:67:30:4a:
                    05:9c:c2:5d:12:31:1e:3d:c5:0e:52:08:83:02:27:
                    56:73:07:57:60:bf:a3:9c:c8:43:6f:24:2b:ac:91:
                    5f:86:f1:59:d1:b9:04:92:16:06:cd:e8:9e:74:62:
                    97:6a:ae:10:45:69:cc:e9:df:d9:81:4f:1b:b0:71:
                    2e:c0:a9:69:a4:11:b6:32:9d:22:4c:6a:60:52:d9:
                    8c:a7:ee:9b:07:ce:61:04:09:74:81:e9:11:4b:a4:
                    de:74:2b:e1:30:ea:68:20:01:6f:2e:98:44:ae:f6:
                    0d:fa:68:34:46:83:b2:61:c5:3f:a1:03:0c:db:cb:
                    5c:5b:df:d3:a0:87:e8:3d:12:60:15:29:e7:6e:a8:
                    4d:b7:05:67:72:a1:0b:19:be:0b:7f:ac:e3:c7:6f:
                    f3:61:de:7a:d6:a8:e1:a5:e0:23:b8:95:5d:b4:30:
                    bc:9d:7a:5f:df:0b:50:59:91:bb:ad:1f:8e:4a:3d:
                    1c:9b:28:89:53:17:5b:e9:43:b4:8f:ba:16:af:4f:
                    f4:e2:ad:2b:86:11:98:2a:6c:c9:3c:b9:06:cf:35:
                    cf:c3:48:f0:f8:2f:03:b9:2c:d8:df:2f:ab:dd:3a:
                    22:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C1:EB:88:FB:09:2B:55:6D:A2:7A:CC:D4:6B:A7:B3:A6:7D:25:3A
            X509v3 Authority Key Identifier:
                keyid:87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32342d3234203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:84:d5:e0:1b:42:42:c1:21:c2:a9:2b:04:d3:3a:ad:8d:9e:
         a6:68:98:b3:eb:b3:7d:d1:06:13:9e:5a:50:9e:b3:c6:2f:e3:
         10:a7:c3:06:e1:43:68:a8:85:af:74:a6:46:58:a1:dc:56:13:
         34:1b:3b:b2:c8:eb:c5:1c:b8:27:ac:a9:38:63:ec:d9:f5:f3:
         51:b1:ae:ba:68:40:d4:0e:5a:bf:df:64:0a:08:ca:c5:5f:c2:
         6f:fa:17:f0:76:ad:53:0a:e5:bf:ae:4c:1d:8d:99:5c:84:96:
         16:b4:e9:b3:25:de:be:f0:4c:44:a1:17:c9:7d:b2:6a:12:9f:
         4b:50:f2:a7:ea:a9:76:81:8f:3e:97:15:3d:41:83:7f:60:50:
         8b:44:0e:66:d3:da:fb:c2:25:50:21:9b:29:d3:f8:0e:cd:fc:
         a6:f1:dd:05:84:af:82:e9:2c:31:ca:ac:22:68:73:b5:61:29:
         3e:a5:84:1f:ed:29:be:f9:d1:08:cd:b3:2b:2a:98:3f:f7:56:
         60:93:2e:5d:37:e4:3a:bd:a7:53:35:fe:a9:c2:35:ca:df:95:
         20:97:f3:b0:a6:d2:6d:87:26:28:97:12:22:3d:12:5a:26:5a:
         4f:49:6d:99:27:5c:b4:36:30:fd:90:ab:8e:df:5a:c3:c4:b7:
         a9:5f:a8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:12 2024 by rpki-client on console.sobornost.net