Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31382e302f32332d3233203d3e20323635383939.roa
File:                     3133312e3139362e31382e302f32332d3233203d3e20323635383939.roa (raw, json)
Hash identifier:          1OAtMcOLJvIt2TUB86Ohx625hsfi4hQpUTkjdWczaBM=
Subject key identifier:   B6:B7:2B:94:19:CD:5E:42:D4:94:FE:9D:EA:F6:18:AD:96:BA:3F:A3
Certificate issuer:       /CN=2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62
Certificate serial:       5DE45727F2BD8EC5ECA5DB6C92524459C5090187
Authority key identifier: 2B:85:A2:7C:4F:B6:48:CC:56:2C:2F:E2:B0:DE:A8:A5:75:5F:AB:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31382e302f32332d3233203d3e20323635383939.roa
Signing time:             Tue 20 Feb 2024 13:43:43 +0000
ROA not before:           Tue 20 Feb 2024 13:38:43 +0000
ROA not after:            Tue 18 Feb 2025 13:43:43 +0000
asID:                     265899
IP address blocks:        131.196.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e4:57:27:f2:bd:8e:c5:ec:a5:db:6c:92:52:44:59:c5:09:01:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62
        Validity
            Not Before: Feb 20 13:38:43 2024 GMT
            Not After : Feb 18 13:43:43 2025 GMT
        Subject: CN=B6B72B9419CD5E42D494FE9DEAF618AD96BA3FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:e6:74:a1:b0:4d:1c:2c:5a:be:b3:93:6e:
                    9f:ab:4a:e9:5f:bf:2d:62:84:6e:63:7a:71:c3:ee:
                    20:99:0f:e9:49:0f:24:5e:1a:1c:22:d1:72:74:96:
                    c3:15:3b:ec:2f:6b:9a:f0:ad:c4:72:3d:1f:6f:48:
                    04:65:04:ee:e0:a7:92:57:34:0d:b7:00:21:e5:1a:
                    a7:3b:7a:37:13:3a:cd:17:e9:42:ea:c4:f6:69:ed:
                    2a:8a:11:27:ee:84:65:98:10:31:5e:8e:a4:2a:1f:
                    74:1a:24:d8:35:e5:49:c6:fb:b6:2d:3e:ba:10:ed:
                    04:ec:a2:67:85:ae:aa:31:ab:94:8c:f0:b3:02:92:
                    a9:dc:d5:2e:58:28:7d:f1:8c:46:00:20:bc:f2:e3:
                    db:8e:92:6c:0c:72:ea:96:e8:e0:2b:cf:36:26:5c:
                    e1:56:6c:d5:d6:de:0f:f9:29:4c:97:12:09:9c:38:
                    c4:4e:b0:ca:33:ed:02:a0:28:9a:e1:11:41:b0:3b:
                    29:4b:49:ff:d3:8f:ae:d2:c3:8f:44:8f:57:c3:68:
                    d7:0c:27:93:d0:ab:01:cd:0e:df:1f:b6:d7:d4:03:
                    1f:c3:20:f7:66:55:b0:aa:0e:f4:64:0f:b8:6b:bb:
                    3f:62:44:d9:85:a0:30:a9:ac:3e:bc:55:f5:43:69:
                    4a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:2B:94:19:CD:5E:42:D4:94:FE:9D:EA:F6:18:AD:96:BA:3F:A3
            X509v3 Authority Key Identifier:
                keyid:2B:85:A2:7C:4F:B6:48:CC:56:2C:2F:E2:B0:DE:A8:A5:75:5F:AB:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31382e302f32332d3233203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:3b:8b:24:18:78:4f:00:f6:95:c9:d9:16:70:86:b1:4e:c3:
         a2:5e:7b:a5:55:65:c5:60:56:33:cd:23:86:9d:cd:50:86:83:
         b2:6a:4a:42:89:99:2b:f2:db:67:11:12:47:f3:1b:fc:cd:f2:
         80:af:a1:8a:a1:f5:77:75:7c:32:ae:cf:58:6a:d6:4f:72:f3:
         24:7d:61:bd:50:31:79:b4:94:96:48:ce:5c:c3:73:43:9d:73:
         91:7d:11:9c:a1:be:b5:b5:0e:e0:82:e3:b0:fa:f7:a3:30:41:
         e3:81:55:32:85:aa:a8:2f:99:da:1d:a7:06:88:d6:fc:c9:fa:
         8b:9e:2c:57:42:0a:d8:d4:6d:46:e6:91:73:c8:74:c1:19:ef:
         24:47:c9:49:d8:c4:4d:b1:da:ea:c2:67:48:ea:a8:99:84:94:
         8d:28:93:72:99:71:0b:c1:b8:4c:84:4e:49:54:f2:87:ef:f0:
         90:36:05:ea:1a:95:18:30:e3:95:f5:4f:f2:e6:e0:b5:af:ed:
         7f:01:98:a9:06:41:24:45:28:34:8e:c1:ea:9b:dd:67:47:60:
         f0:39:21:f8:ad:14:5b:66:00:53:d3:4c:0c:b6:f5:d9:3b:b9:
         ff:39:84:2e:3a:8c:06:60:69:ec:c2:ee:ef:e3:22:38:20:aa:
         16:35:9b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org