Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137392e302f32342d3234203d3e20323634343931.roa
File:                     3133312e3235352e3137392e302f32342d3234203d3e20323634343931.roa (raw, json)
Hash identifier:          GjvU0CdoHVs5vFHKSHRhAtrijIw2jJHf0qi+sNF3JSE=
Subject key identifier:   6A:E7:AF:F7:0A:9E:82:67:87:F6:32:38:1B:C7:07:B1:DC:77:90:84
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       4475509D06B420C412F4A5A8093B0A73D843B352
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137392e302f32342d3234203d3e20323634343931.roa
Signing time:             Mon 07 Feb 2022 12:09:20 +0000
ROA not before:           Mon 07 Feb 2022 12:04:20 +0000
ROA not after:            Mon 06 Feb 2023 12:09:20 +0000
asID:                     264491
IP address blocks:        131.255.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:75:50:9d:06:b4:20:c4:12:f4:a5:a8:09:3b:0a:73:d8:43:b3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:20 2022 GMT
            Not After : Feb  6 12:09:20 2023 GMT
        Subject: CN=6AE7AFF70A9E826787F632381BC707B1DC779084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:bd:74:81:04:d4:32:95:3a:18:c1:3d:27:
                    98:fd:ae:9e:06:18:73:b8:a9:8f:c6:14:aa:4d:31:
                    e1:c4:8d:e9:94:72:04:45:cc:84:61:d0:e2:bc:3c:
                    a6:44:fc:d3:e9:34:2c:52:71:fc:fa:54:f4:57:ae:
                    4f:52:70:04:b5:50:ea:ec:31:87:45:1f:95:14:25:
                    8c:52:bf:8c:e9:81:78:08:42:e6:3e:32:a4:a1:9d:
                    87:c4:0c:fc:2f:f7:b0:b0:08:3d:64:4c:28:c8:b7:
                    fe:90:cf:31:c6:83:7b:de:a8:58:99:03:59:cc:c8:
                    96:3a:c0:89:37:d9:10:bc:2f:c8:63:4a:79:83:5a:
                    0e:56:4c:92:2a:ff:0d:22:7c:a2:b1:42:81:34:06:
                    9c:31:d7:6a:64:16:c4:13:ff:03:fb:03:ee:db:23:
                    bc:2a:4c:57:f0:9b:8d:16:6e:dd:5a:72:54:1e:6d:
                    93:42:e0:fc:e3:58:6a:f3:b8:7b:93:dc:f8:6e:77:
                    59:ba:33:ab:e1:09:28:d5:92:13:9d:b3:a2:b0:0b:
                    a8:bb:c4:db:50:07:65:54:8a:58:7a:e8:4f:8a:f5:
                    58:9d:6c:48:f1:c3:a1:03:a6:26:e9:68:c7:56:19:
                    67:43:ae:6c:20:ab:b7:de:ef:aa:90:3a:dd:90:a4:
                    ef:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E7:AF:F7:0A:9E:82:67:87:F6:32:38:1B:C7:07:B1:DC:77:90:84
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137392e302f32342d3234203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:ef:14:c3:04:8b:c8:ee:38:f0:76:9c:22:25:7c:60:02:12:
         97:b6:8e:7e:85:e2:81:ae:9c:c7:4b:cb:e2:eb:d8:7a:68:01:
         81:88:3d:19:37:d3:a3:8c:98:32:b8:11:b5:64:da:df:3b:75:
         89:fe:59:e9:07:50:4d:d9:d0:41:73:b2:9a:32:80:91:ae:50:
         55:50:59:92:a4:0b:be:90:39:8c:5f:c4:6a:19:29:54:31:33:
         c6:6a:49:5f:59:07:73:17:f9:9e:de:5d:24:85:a6:fb:9d:50:
         6a:a9:3c:54:7d:b6:d3:52:71:15:80:f6:65:1c:65:f5:d0:bf:
         66:91:1c:4f:db:16:af:89:1d:5d:7d:a3:6d:c7:46:a7:46:1b:
         a8:20:09:36:86:6f:d1:a1:6a:26:d2:12:67:ba:ee:f8:9a:88:
         3f:8e:90:61:a0:8e:a6:a4:1d:ed:4c:6a:b1:7c:2f:07:f6:f7:
         6b:29:ee:95:0d:37:30:d3:15:68:c6:60:94:36:cf:58:a5:0e:
         70:47:4a:5b:43:e2:63:65:e8:76:b9:4a:5d:76:ce:3e:06:e2:
         e6:a5:eb:a9:df:30:91:e6:34:7a:f8:5c:47:51:06:d7:7c:2f:
         4c:54:e4:30:ed:fb:6d:0a:8f:af:fc:47:f9:52:18:75:99:c7:
         85:93:2e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:03 2023 by rpki-client on console-ams.rpki-client.org