Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/3133312e3139362e342e302f32322d3332203d3e20323635383930.roa
File:                     3133312e3139362e342e302f32322d3332203d3e20323635383930.roa (raw, json)
Hash identifier:          KgyfvvZ3hA6qyF5agoWhEtCseoyCu7lM1EdK/toDNaQ=
Subject key identifier:   14:A9:71:8F:25:5B:4D:21:79:EE:72:3A:10:0D:3E:CB:52:1B:73:73
Certificate issuer:       /CN=13E0E480CD71A0FDF89D8FB5CAB399744C305796
Certificate serial:       5F21614F0ECD6F1B5A58F386A0507A723683FA54
Authority key identifier: 13:E0:E4:80:CD:71:A0:FD:F8:9D:8F:B5:CA:B3:99:74:4C:30:57:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13E0E480CD71A0FDF89D8FB5CAB399744C305796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/3133312e3139362e342e302f32322d3332203d3e20323635383930.roa
Signing time:             Sat 23 Mar 2024 15:23:45 +0000
ROA not before:           Sat 23 Mar 2024 15:18:45 +0000
ROA not after:            Sat 22 Mar 2025 15:23:45 +0000
asID:                     265890
IP address blocks:        131.196.4.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:21:61:4f:0e:cd:6f:1b:5a:58:f3:86:a0:50:7a:72:36:83:fa:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13E0E480CD71A0FDF89D8FB5CAB399744C305796
        Validity
            Not Before: Mar 23 15:18:45 2024 GMT
            Not After : Mar 22 15:23:45 2025 GMT
        Subject: CN=14A9718F255B4D2179EE723A100D3ECB521B7373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:75:84:3b:6d:5f:b0:8a:77:c1:46:48:00:65:
                    08:49:63:8b:3f:af:15:b8:c2:3f:5e:58:8c:eb:da:
                    7d:08:7c:2f:98:8e:28:24:d2:af:1d:7d:3a:76:8b:
                    e4:24:e7:54:f7:c9:e5:7a:6e:a3:a6:c3:be:f6:e1:
                    b7:82:29:7e:6f:da:ff:6e:2f:74:15:6a:c2:ff:d8:
                    de:b0:83:bb:80:65:67:3e:8b:d8:35:f5:4c:71:32:
                    ab:2f:90:e5:9d:6f:3c:49:d7:f1:97:62:da:ab:73:
                    a2:07:87:70:06:e7:fd:e7:5c:b9:a0:d8:a2:26:cf:
                    44:00:00:bb:aa:ed:90:14:c3:9b:0e:70:2b:f9:1f:
                    5f:b3:18:d1:66:de:8d:5a:ac:5e:82:b8:c7:7d:bb:
                    64:96:90:54:35:7e:57:5b:21:ec:1c:d9:bf:94:3d:
                    16:63:b8:f7:2e:c2:cf:fb:99:6c:f9:52:75:7f:3d:
                    3b:7c:73:f2:58:0b:6a:cc:ec:3d:41:df:d2:a5:b1:
                    2c:e4:60:7e:f9:05:23:2a:a2:f1:1d:d6:7f:54:a0:
                    54:4b:09:49:4a:13:a8:35:85:11:d4:fd:29:d7:d6:
                    ca:57:e2:db:e6:ce:63:45:99:78:dd:14:98:70:b2:
                    d0:ae:74:2a:22:43:22:9d:3f:c8:0d:3e:f8:52:67:
                    91:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A9:71:8F:25:5B:4D:21:79:EE:72:3A:10:0D:3E:CB:52:1B:73:73
            X509v3 Authority Key Identifier:
                keyid:13:E0:E4:80:CD:71:A0:FD:F8:9D:8F:B5:CA:B3:99:74:4C:30:57:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/13E0E480CD71A0FDF89D8FB5CAB399744C305796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13E0E480CD71A0FDF89D8FB5CAB399744C305796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/3133312e3139362e342e302f32322d3332203d3e20323635383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:38:58:1f:56:af:c0:b4:f6:7f:3c:09:dd:e8:b8:5e:5e:
         89:6f:69:d3:f6:7c:e2:be:18:b6:b2:9e:5e:9d:d5:d5:d8:4a:
         bc:4b:c6:12:6e:3a:e9:d0:c3:b0:ef:ce:c3:76:5d:a2:9f:d0:
         3d:fa:89:36:99:f2:89:17:4d:23:e3:36:f4:5a:89:cd:ac:e0:
         ae:72:93:ea:42:7b:30:5c:c9:8c:b2:7a:cf:9b:89:22:a2:91:
         d2:e3:e8:f0:24:d1:3c:30:a6:3b:46:5b:2d:8f:29:25:54:27:
         9a:2c:12:6a:a6:8a:b4:e8:95:10:16:d2:a4:f1:89:a1:c7:8b:
         c6:bb:0c:d8:35:56:7e:dc:9f:24:a4:95:55:36:7a:5b:c1:53:
         a2:93:41:c9:ed:9b:99:c8:67:fa:60:d4:0d:8e:c1:7a:16:1a:
         eb:e6:47:a8:89:bd:5b:03:66:0c:bb:8c:a3:cf:b8:1e:b9:f7:
         b7:5d:5f:3d:20:58:3c:7f:b5:e0:ad:bc:d4:69:1e:39:fb:0d:
         53:10:99:14:d8:a3:2d:b4:c4:d4:0c:71:68:8a:2e:06:6a:33:
         b5:3a:4d:c6:3a:30:8c:dd:9e:b2:d0:d1:c0:0e:eb:a3:e2:96:
         06:80:73:d8:84:8a:fa:5c:08:91:fd:12:ec:16:60:a8:89:f5:
         0e:be:02:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org