Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3133312e3235352e3137322e302f32322d3232203d3e20323632343931.roa
File:                     3133312e3235352e3137322e302f32322d3232203d3e20323632343931.roa (raw, json)
Hash identifier:          G1b5DJJUiXvuFZvSOZDp460mohx1EIeqPIPAj1wdtPA=
Subject key identifier:   E7:19:AF:31:84:B7:D2:F8:CE:CB:5B:F9:91:4E:9E:96:D9:16:F4:AA
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       06EB762F4DCC21C97DAFEBD8785EE320E56B5511
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3133312e3235352e3137322e302f32322d3232203d3e20323632343931.roa
Signing time:             Sat 26 Nov 2022 02:46:04 +0000
ROA not before:           Sat 26 Nov 2022 02:41:04 +0000
ROA not after:            Sat 25 Nov 2023 02:46:04 +0000
asID:                     262491
IP address blocks:        131.255.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:eb:76:2f:4d:cc:21:c9:7d:af:eb:d8:78:5e:e3:20:e5:6b:55:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Nov 26 02:41:04 2022 GMT
            Not After : Nov 25 02:46:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:80:5e:be:ee:fd:f5:55:9a:06:8c:5a:de:
                    8a:76:01:50:2f:6a:2b:b8:0d:0e:7a:07:65:d2:a6:
                    98:69:a6:ea:42:02:22:75:4f:aa:73:b5:b7:58:d7:
                    1c:f1:7d:84:f9:e9:79:78:e0:d6:a5:41:0b:01:68:
                    57:5d:a8:82:ee:d4:fc:db:4b:9b:0a:db:27:35:82:
                    3b:d1:ad:82:11:6d:20:c5:e3:94:b6:e3:84:e6:63:
                    74:cb:a4:9a:8e:8c:e4:ef:f6:c1:7c:59:b4:82:e0:
                    9c:93:17:46:64:44:b5:67:5e:7c:bc:c5:05:79:14:
                    63:a4:1a:28:5f:af:01:69:43:b4:0c:c3:09:42:70:
                    62:7e:11:b0:f3:80:b0:44:be:b7:37:17:6e:76:b4:
                    25:ed:dc:1e:ab:84:b3:84:b5:d8:42:a1:e7:5e:23:
                    5b:5e:12:f0:7a:12:bd:76:39:36:1c:89:ef:83:68:
                    60:f5:20:9b:fd:9d:bf:76:8e:83:cc:53:d7:56:04:
                    52:41:67:22:80:e6:8b:2f:a9:91:fc:9f:ba:22:df:
                    2d:cd:3b:9f:2b:6f:50:d4:fe:ee:14:9f:25:5b:34:
                    d6:a2:e4:38:eb:a1:ba:d3:65:19:37:09:41:55:72:
                    03:8e:c5:ea:84:f1:87:99:bf:a5:83:9e:5a:35:7c:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:19:AF:31:84:B7:D2:F8:CE:CB:5B:F9:91:4E:9E:96:D9:16:F4:AA
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3133312e3235352e3137322e302f32322d3232203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:19:50:06:a5:d2:25:82:a6:28:6a:c4:d9:f6:de:67:ab:9d:
         1c:12:e6:4b:e4:2e:0f:4e:3b:49:56:61:db:8f:a9:f1:19:e2:
         03:0d:6f:18:c4:7d:8c:e3:b6:5e:91:7e:92:05:c7:f7:81:61:
         25:17:a6:89:03:cf:e2:31:17:6d:7a:cf:89:3c:0c:5f:b2:10:
         85:da:ba:c1:92:eb:b9:cf:63:e0:7f:6c:b3:27:b8:fe:39:1c:
         f0:0f:80:58:b4:34:bc:34:f6:9b:a4:20:e5:6a:88:45:b2:a7:
         12:32:1d:c7:9d:c8:ea:da:07:77:cf:5b:28:48:84:32:73:8b:
         53:45:d8:d9:35:3c:eb:19:26:42:41:c6:52:10:08:f2:07:e5:
         3d:37:6b:7c:3e:45:e5:c8:b8:ee:b3:b2:4e:23:c6:4f:a8:b8:
         3c:f2:93:de:3d:ec:1d:32:05:54:95:2a:7c:03:df:c0:a3:24:
         00:a5:69:87:c7:36:95:72:d7:5f:79:3c:08:34:5d:dc:3e:fc:
         48:27:fc:93:fb:ea:ca:3f:fc:16:41:e9:05:b4:23:0c:70:0b:
         99:7d:25:d5:46:47:f5:2a:1f:46:55:f4:7e:d1:1f:0a:c6:75:
         7e:65:58:db:ff:17:79:be:3c:17:06:0d:a2:5b:89:c6:c0:e9:
         67:83:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:31 2023 by rpki-client on console-fra.rpki-client.org