Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa
File:                     3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa (raw, json)
Hash identifier:          SsobTwoWNSmvyoIt3C90ipfYX7o50WKnczWJQHKtqOc=
Subject key identifier:   75:B5:78:03:59:C4:2A:4E:71:C4:7B:42:9F:2F:BD:48:26:3E:FC:52
Certificate issuer:       /CN=A37F949C9D7092C43D6C2162D98F3EFFC398E477
Certificate serial:       263ED2166D693A705281A62EBCD5C0803E005DF2
Authority key identifier: A3:7F:94:9C:9D:70:92:C4:3D:6C:21:62:D9:8F:3E:FF:C3:98:E4:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A37F949C9D7092C43D6C2162D98F3EFFC398E477.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa
Signing time:             Fri 16 Feb 2024 23:40:13 +0000
ROA not before:           Fri 16 Feb 2024 23:35:13 +0000
ROA not after:            Fri 14 Feb 2025 23:40:13 +0000
asID:                     265928
IP address blocks:        131.196.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3e:d2:16:6d:69:3a:70:52:81:a6:2e:bc:d5:c0:80:3e:00:5d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A37F949C9D7092C43D6C2162D98F3EFFC398E477
        Validity
            Not Before: Feb 16 23:35:13 2024 GMT
            Not After : Feb 14 23:40:13 2025 GMT
        Subject: CN=75B5780359C42A4E71C47B429F2FBD48263EFC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:a2:bd:19:f4:6f:0a:5c:5a:c6:38:34:ae:
                    04:f9:ff:28:63:a8:46:36:12:a0:d2:f1:56:9e:ac:
                    41:13:fa:cc:41:04:b0:bf:d0:16:f4:3e:53:4a:37:
                    91:92:1c:82:bd:8b:c9:31:39:51:3e:c5:09:7b:be:
                    4f:ed:f3:c8:c1:85:c8:f6:c5:48:01:8f:b9:9a:51:
                    36:a6:70:9e:31:d0:54:59:1a:6f:1c:79:a0:5c:fc:
                    1a:f9:44:97:fc:74:e2:ff:b6:51:02:56:48:46:6a:
                    34:88:e7:16:1e:82:64:69:fa:27:8c:bf:3d:b4:1e:
                    b5:43:74:33:89:e0:20:1a:31:08:29:b3:2f:1e:7a:
                    bf:fd:e2:7f:27:2d:91:02:bb:b8:39:eb:39:a1:3e:
                    32:35:0e:00:4c:59:47:bf:f0:2b:8d:ce:e7:2f:a2:
                    e9:de:03:2d:94:7c:9f:2b:38:be:7b:52:bf:45:91:
                    ea:a8:b4:bc:5a:ab:7e:5e:ba:14:47:b1:d1:32:5c:
                    6e:a5:6c:d6:42:bc:31:5d:74:36:f0:78:8c:72:0a:
                    66:1f:68:58:8f:80:b0:b2:19:17:5c:4a:f9:1d:6e:
                    e1:c7:cb:5c:c7:cd:a3:38:4f:50:99:88:b4:a4:63:
                    55:21:0d:4b:76:48:5a:62:ac:0e:b8:a6:8d:80:10:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B5:78:03:59:C4:2A:4E:71:C4:7B:42:9F:2F:BD:48:26:3E:FC:52
            X509v3 Authority Key Identifier:
                keyid:A3:7F:94:9C:9D:70:92:C4:3D:6C:21:62:D9:8F:3E:FF:C3:98:E4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/A37F949C9D7092C43D6C2162D98F3EFFC398E477.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A37F949C9D7092C43D6C2162D98F3EFFC398E477.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:49:63:83:b0:16:3c:69:b3:8b:7c:bb:55:a8:62:8c:18:29:
         27:8c:84:01:79:33:96:91:82:a5:9d:6f:83:6b:f6:4f:e1:1f:
         1a:e5:e9:ea:03:77:7c:27:bc:3d:66:05:96:29:3a:a3:ce:19:
         2f:6f:01:8f:b5:c6:f1:66:71:8c:7e:70:68:f3:3a:60:c5:fe:
         ad:45:66:66:79:f6:7f:31:b8:5c:07:76:4c:f2:45:2a:0d:a0:
         bc:5a:b2:b0:3b:8e:f2:27:e9:c4:48:ee:bd:d0:73:35:f3:30:
         34:28:39:52:70:91:67:75:44:18:94:05:f5:6e:3c:e8:17:95:
         d7:2b:86:c9:57:a5:29:95:52:5d:b1:8d:08:f9:b9:2d:50:91:
         fa:5e:38:fa:b6:bc:3c:67:c0:aa:cc:cd:fe:80:fd:07:5b:40:
         85:fd:cc:a0:f3:25:ad:f6:69:f9:8d:fe:99:41:66:21:8a:7d:
         70:8a:0d:61:df:1a:d2:f6:97:ba:75:1c:39:30:2e:d3:ab:b5:
         38:9b:04:e0:df:c0:cb:51:ca:d2:21:2d:af:eb:c2:20:6d:c0:
         82:0d:a7:81:dc:73:f6:d6:fe:9b:45:97:f7:fc:25:c4:3e:51:
         50:6f:91:cd:b0:33:3c:fd:a2:c0:b5:af:18:03:87:16:39:88:
         fb:67:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:04 2024 by rpki-client on console-ams.rpki-client.org