Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa
File:                     3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa (raw, json)
Hash identifier:          DnFblIX3+9i0WjN3O/+VrT2VgNgjMl6Kwkdk6xP9/pM=
Subject key identifier:   EC:99:37:11:97:4D:19:BE:67:2F:C2:D9:AF:79:11:B9:AC:EF:EE:CC
Certificate issuer:       /CN=7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229
Certificate serial:       68DC23A38DF9ACA458B436BDB42C6B5B2F8A17CE
Authority key identifier: 7A:7B:FD:21:EA:E2:D0:E0:F9:46:4F:A2:63:AC:6E:47:AC:D7:C2:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa
Signing time:             Fri 22 Mar 2024 19:05:35 +0000
ROA not before:           Fri 22 Mar 2024 19:00:35 +0000
ROA not after:            Fri 21 Mar 2025 19:05:35 +0000
asID:                     264404
IP address blocks:        131.161.228.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:dc:23:a3:8d:f9:ac:a4:58:b4:36:bd:b4:2c:6b:5b:2f:8a:17:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229
        Validity
            Not Before: Mar 22 19:00:35 2024 GMT
            Not After : Mar 21 19:05:35 2025 GMT
        Subject: CN=EC993711974D19BE672FC2D9AF7911B9ACEFEECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7a:96:b8:df:fa:b4:cc:23:93:df:48:f2:77:
                    b3:d9:f9:d8:28:a6:1b:0c:d0:fe:af:18:5e:7f:2b:
                    1d:7a:fd:78:be:30:8f:67:df:06:ec:b2:19:91:c1:
                    18:ff:be:02:af:b5:b1:59:a1:6e:e1:d2:c9:fe:02:
                    40:c4:98:71:d6:d7:8e:67:9c:17:dc:9c:c9:2b:87:
                    1a:6d:f6:70:cf:c0:00:c9:10:da:a4:3e:ab:ec:31:
                    73:2b:bd:40:51:4d:0e:e3:b4:53:4d:3d:05:af:41:
                    1b:a8:cb:69:0b:e5:9c:26:3a:23:b1:e4:23:07:09:
                    7b:88:d2:f1:bd:d0:3f:e5:cd:6b:f4:4c:66:d7:0e:
                    dd:e1:3a:c4:1d:59:41:e5:3e:1b:1d:22:e8:e8:c3:
                    93:39:c1:c2:d3:bb:49:18:50:ac:73:36:50:64:15:
                    d9:dd:15:aa:58:3c:45:77:6c:76:f0:d7:6d:73:af:
                    75:dc:6f:d2:57:54:0e:0b:22:cb:3b:24:8a:ae:c4:
                    72:db:b5:b4:75:db:01:71:95:cb:dd:47:d8:14:be:
                    21:2c:88:33:31:07:3d:21:78:ef:eb:52:f0:81:85:
                    6c:ad:81:28:28:c3:35:bd:2b:af:41:24:bf:5a:d6:
                    59:35:9a:74:40:80:fa:4d:9d:5c:3d:14:ec:92:5a:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:99:37:11:97:4D:19:BE:67:2F:C2:D9:AF:79:11:B9:AC:EF:EE:CC
            X509v3 Authority Key Identifier:
                keyid:7A:7B:FD:21:EA:E2:D0:E0:F9:46:4F:A2:63:AC:6E:47:AC:D7:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:52:4a:a3:93:03:82:54:7c:d9:93:76:53:9b:6d:5a:75:2c:
         74:58:b6:5b:56:4c:b1:a8:dc:a8:e5:ad:2b:c6:92:fe:53:2c:
         b8:32:bc:36:b1:f7:a6:86:9c:38:ba:f5:e6:bf:13:6c:cd:91:
         71:21:34:4e:b6:41:c4:f4:8e:3b:18:e5:0e:9c:0c:7e:60:7d:
         74:3b:75:72:9d:9e:b9:bb:07:1f:10:30:17:c8:88:41:d7:7e:
         9b:93:79:ee:d3:cd:e0:03:99:51:52:f2:01:9a:3c:84:e0:e2:
         86:a5:d2:22:d8:37:ec:c9:90:2b:4d:95:c6:68:f0:91:17:90:
         4c:79:47:25:96:80:13:e4:6c:af:3f:b8:43:7b:fd:30:86:02:
         f2:c4:89:ab:44:c9:62:72:b0:9e:bc:6f:54:7d:f9:ad:3e:ae:
         8a:ec:7d:e8:c6:e6:55:2e:b0:b2:be:29:ac:de:65:54:7a:72:
         42:10:16:b9:6b:57:ba:2f:ac:96:c7:40:14:56:8b:d6:83:25:
         e6:a8:8a:83:32:b7:79:00:01:c8:b4:43:68:26:3e:cd:c8:94:
         8e:80:a1:ad:92:74:a7:72:5a:df:42:ec:ac:30:f6:32:03:ca:
         52:88:6f:9f:28:cb:b7:dc:d4:ef:14:3d:b6:23:c8:cc:b2:ce:
         36:20:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org