Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31362e302f32332d3233203d3e20323635383939.roa
File:                     3133312e3139362e31362e302f32332d3233203d3e20323635383939.roa (raw, json)
Hash identifier:          QQIkiuH4hTHwfjNAsCbkRIGSjE3MKHHynZDXxCcwrOk=
Subject key identifier:   9A:86:8D:B7:81:00:BF:10:4A:5C:C6:6B:21:E1:9D:5F:28:02:D4:CC
Certificate issuer:       /CN=2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62
Certificate serial:       36141CF2CDF0125D3E1EB9F49947E60B7DBD226E
Authority key identifier: 2B:85:A2:7C:4F:B6:48:CC:56:2C:2F:E2:B0:DE:A8:A5:75:5F:AB:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31362e302f32332d3233203d3e20323635383939.roa
Signing time:             Tue 20 Feb 2024 13:43:42 +0000
ROA not before:           Tue 20 Feb 2024 13:38:42 +0000
ROA not after:            Tue 18 Feb 2025 13:43:42 +0000
asID:                     265899
IP address blocks:        131.196.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:14:1c:f2:cd:f0:12:5d:3e:1e:b9:f4:99:47:e6:0b:7d:bd:22:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62
        Validity
            Not Before: Feb 20 13:38:42 2024 GMT
            Not After : Feb 18 13:43:42 2025 GMT
        Subject: CN=9A868DB78100BF104A5CC66B21E19D5F2802D4CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:6f:b7:09:22:71:06:91:32:54:d9:a2:bd:
                    24:10:78:6e:50:51:15:39:36:8f:67:e4:e5:b0:53:
                    f7:fc:65:52:07:fc:8b:bc:15:92:e4:32:22:cd:05:
                    6d:fe:4d:6d:ab:7f:b7:52:00:db:2b:1d:17:ce:f7:
                    a8:4c:c1:a2:14:a3:4f:1c:4b:0f:c6:f2:38:f1:c7:
                    c4:46:68:51:c8:55:dc:55:3a:6e:26:84:cc:2c:08:
                    90:c8:21:06:12:da:97:7b:e4:dc:70:1a:57:f8:01:
                    c7:b0:69:94:29:2d:0a:21:2a:ab:50:63:3c:ef:f3:
                    c3:e5:06:3c:4b:5e:10:a6:ee:6a:ac:dc:92:98:96:
                    6c:96:76:6d:b5:d3:e8:dc:3d:e4:45:43:e0:8b:71:
                    58:f1:37:44:e3:81:0b:6b:11:2e:88:ff:86:4b:53:
                    cd:4f:03:cc:bf:af:24:6f:45:1f:2e:45:bb:1c:2d:
                    94:27:81:a3:06:46:58:cf:54:bb:e6:32:c5:78:76:
                    b1:39:e3:94:76:ee:1a:90:95:80:85:87:8d:6b:6b:
                    0c:77:c9:91:50:db:be:ff:e6:08:ee:19:71:a2:d1:
                    cd:3a:6a:3a:06:32:57:ae:c2:e1:65:ae:94:3a:74:
                    e5:2d:30:92:60:95:b0:8b:20:42:55:58:fa:51:d8:
                    11:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:86:8D:B7:81:00:BF:10:4A:5C:C6:6B:21:E1:9D:5F:28:02:D4:CC
            X509v3 Authority Key Identifier:
                keyid:2B:85:A2:7C:4F:B6:48:CC:56:2C:2F:E2:B0:DE:A8:A5:75:5F:AB:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31362e302f32332d3233203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:af:57:2b:0c:c9:c9:b3:e7:41:a4:00:95:26:d7:47:b6:62:
         f0:ad:26:e5:4a:d7:fa:3c:36:73:ee:4a:82:c6:db:06:4c:7d:
         3a:cb:cb:56:9c:8a:97:57:53:2a:bd:78:bf:3e:61:00:89:65:
         22:a4:14:3a:ab:0e:25:92:6f:8a:ea:27:5f:bd:e1:cb:0b:b9:
         fe:f5:b6:e4:8b:e3:ad:e5:ab:0a:39:39:d7:c9:63:dd:07:b5:
         af:b2:e2:85:50:73:ce:e4:e7:dc:c2:ab:ff:cd:7c:ff:63:19:
         8f:90:76:95:31:ca:58:61:dd:9d:36:f1:d9:ec:00:54:6a:64:
         c9:f8:ae:5a:a7:4a:78:27:93:e0:41:31:1a:c4:84:1e:37:b7:
         3b:cc:50:83:8c:29:aa:62:3a:e8:69:08:5b:2f:a8:48:c7:1b:
         57:b1:51:02:cd:7b:66:cc:28:19:f5:49:95:90:48:b8:38:72:
         3f:dd:e9:f7:91:3b:07:a4:5a:b2:f1:59:9e:d2:ef:b7:94:08:
         89:5b:30:ac:a7:2d:9b:4f:bc:31:11:92:b5:30:a5:8e:01:e2:
         5a:ab:09:7a:eb:3a:7a:1e:75:7a:57:ad:8b:4b:ba:74:38:66:
         31:d6:bf:d7:9c:70:2f:f0:08:d8:79:6e:4d:4c:6f:d6:b0:8a:
         b4:75:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:58 2024 by rpki-client on console-ams.rpki-client.org