Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/3133312e3139362e32382e302f32322d3232203d3e20323731343130.roa
File:                     3133312e3139362e32382e302f32322d3232203d3e20323731343130.roa (raw, json)
Hash identifier:          k5BQMmq9ImR584jZRrjrACW0dt/hVvL9s3tsqi9AYiQ=
Subject key identifier:   53:1F:EB:59:10:0D:C7:93:A9:5F:6F:8E:73:23:E2:EC:95:F7:DA:EA
Certificate issuer:       /CN=50DE48A3BFC137A4D9A1AFB812475E21968193AB
Certificate serial:       39FBFA1D9AEBEA2A56C18E49D53535A000CC8AC9
Authority key identifier: 50:DE:48:A3:BF:C1:37:A4:D9:A1:AF:B8:12:47:5E:21:96:81:93:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE48A3BFC137A4D9A1AFB812475E21968193AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/3133312e3139362e32382e302f32322d3232203d3e20323731343130.roa
Signing time:             Mon 11 Mar 2024 16:11:40 +0000
ROA not before:           Mon 11 Mar 2024 16:06:40 +0000
ROA not after:            Mon 10 Mar 2025 16:11:40 +0000
asID:                     271410
IP address blocks:        131.196.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fb:fa:1d:9a:eb:ea:2a:56:c1:8e:49:d5:35:35:a0:00:cc:8a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50DE48A3BFC137A4D9A1AFB812475E21968193AB
        Validity
            Not Before: Mar 11 16:06:40 2024 GMT
            Not After : Mar 10 16:11:40 2025 GMT
        Subject: CN=531FEB59100DC793A95F6F8E7323E2EC95F7DAEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:d1:53:50:64:ec:d4:d4:74:1d:41:fc:3c:
                    0c:47:f7:bf:42:50:3d:86:ff:03:6c:e8:0c:fa:5f:
                    a9:1e:f4:17:b6:fd:38:c3:12:d6:60:d9:e7:f8:e4:
                    e2:0a:58:b8:71:db:b4:42:e4:18:e6:57:09:1e:59:
                    42:66:8c:6d:76:ad:fd:d6:d8:1c:fd:40:63:9e:7a:
                    2c:72:c6:e2:e7:20:e4:89:5d:88:67:ae:3e:80:cf:
                    0a:08:c0:70:02:30:cf:b0:9d:6d:55:5f:11:d2:48:
                    b4:1c:e5:22:92:37:d8:b9:9a:52:7b:f5:9a:9d:39:
                    61:b3:c9:9a:dd:18:ae:5a:37:2f:c8:7c:6c:d1:9e:
                    11:01:91:91:31:bb:e1:7e:69:25:fb:0e:d2:a5:43:
                    7d:0d:4d:65:d9:7b:23:c7:ba:fd:1e:3a:50:c4:4b:
                    3a:09:dd:73:20:f2:9d:34:b9:e6:dd:c1:2b:fc:7d:
                    4a:ca:bb:14:7d:7e:80:b1:b2:4f:f4:bd:43:4b:19:
                    7c:c8:d9:56:ad:1d:75:2b:a6:db:b5:92:d5:b6:a0:
                    54:e6:9b:7e:45:50:83:9e:47:3e:aa:ca:3f:b6:7e:
                    a9:dc:ba:a2:31:db:e7:20:be:93:e6:69:d5:e0:34:
                    4e:9c:7c:d1:d8:cc:07:e7:63:ee:1c:a3:0b:a1:9e:
                    46:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1F:EB:59:10:0D:C7:93:A9:5F:6F:8E:73:23:E2:EC:95:F7:DA:EA
            X509v3 Authority Key Identifier:
                keyid:50:DE:48:A3:BF:C1:37:A4:D9:A1:AF:B8:12:47:5E:21:96:81:93:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/50DE48A3BFC137A4D9A1AFB812475E21968193AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE48A3BFC137A4D9A1AFB812475E21968193AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/3133312e3139362e32382e302f32322d3232203d3e20323731343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:34:49:fd:cf:52:6b:ee:7c:d1:6f:0e:7a:57:24:37:4e:b5:
         53:e2:01:78:25:e2:e5:fe:a1:d7:53:9e:7e:48:8c:8b:42:19:
         67:27:c7:9a:16:5f:a2:94:44:6d:d9:93:0e:59:7e:20:89:90:
         ee:63:57:f9:70:a6:8d:21:f2:3d:9c:cc:9e:e7:0f:50:cc:6c:
         25:86:cf:a5:61:79:2e:63:74:bf:07:a5:e8:81:3c:93:65:3b:
         c6:48:bf:e6:f9:c0:61:3e:b7:d2:4a:bd:8a:55:df:61:ce:5c:
         02:cb:d3:08:51:e2:ff:6b:74:c2:57:d7:1f:95:31:54:53:96:
         38:bd:5b:5e:73:99:b3:73:3d:77:df:bf:2d:6d:1a:00:ad:e9:
         cb:40:7a:68:7f:c1:75:ee:a0:17:88:3d:2a:09:6e:51:80:6d:
         87:f9:b9:a8:a9:26:a0:b1:7b:7b:d2:15:fb:5f:5a:81:ee:88:
         24:f8:27:57:9c:f3:9b:73:32:2d:3e:c1:09:8d:c9:65:fe:9b:
         c1:89:f2:4d:cb:bc:7c:d7:6c:bb:11:b4:15:16:c5:53:61:30:
         f9:ef:14:8f:da:1b:2d:0d:74:3b:c3:11:ab:5d:31:18:e7:a2:
         f0:49:81:f6:80:8a:0f:44:24:fb:1d:69:81:bc:25:a6:82:5b:
         43:ba:67:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org