Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31382e302f32342d3234203d3e20323635383939.roa
File:                     3133312e3139362e31382e302f32342d3234203d3e20323635383939.roa (raw, json)
Hash identifier:          Bvg96Rx3Lz43q3aB9uR0CJiYJ3Ubh6iyQXs72yKbloY=
Subject key identifier:   F3:C2:14:32:62:72:50:65:63:F5:7D:67:2C:0D:36:AF:4A:47:38:D3
Certificate issuer:       /CN=2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62
Certificate serial:       6899ECF2FE9A75ADA3F6D157327B941475D5F02A
Authority key identifier: 2B:85:A2:7C:4F:B6:48:CC:56:2C:2F:E2:B0:DE:A8:A5:75:5F:AB:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31382e302f32342d3234203d3e20323635383939.roa
Signing time:             Tue 20 Feb 2024 13:43:43 +0000
ROA not before:           Tue 20 Feb 2024 13:38:43 +0000
ROA not after:            Tue 18 Feb 2025 13:43:43 +0000
asID:                     265899
IP address blocks:        131.196.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:99:ec:f2:fe:9a:75:ad:a3:f6:d1:57:32:7b:94:14:75:d5:f0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62
        Validity
            Not Before: Feb 20 13:38:43 2024 GMT
            Not After : Feb 18 13:43:43 2025 GMT
        Subject: CN=F3C214326272506563F57D672C0D36AF4A4738D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:16:10:6d:47:c0:a4:d7:5c:d7:8c:18:9f:
                    ab:6a:89:85:f2:43:17:82:5b:4d:9c:ab:2f:cb:d6:
                    22:4f:e3:3e:75:00:71:93:23:a1:6e:78:4b:6e:0c:
                    c2:76:fd:da:ed:a4:c1:e0:1d:71:b3:4f:1a:ae:00:
                    18:9d:85:2e:6d:74:11:28:28:8d:42:93:d9:c9:16:
                    5f:91:c7:1b:b5:96:da:ba:b6:da:80:b8:c3:3c:fc:
                    7e:b2:6b:ae:d7:2b:85:5c:a9:25:c6:ed:39:86:69:
                    30:d1:05:9b:c9:6c:b9:fa:88:ff:56:4f:a7:6a:0e:
                    64:ef:2c:d2:de:91:d2:2f:5a:42:a7:1d:83:18:66:
                    3f:54:9e:bb:a0:e5:f5:fe:e4:4b:0c:03:c9:1d:45:
                    5c:4e:a4:0b:07:67:42:50:c6:ee:a6:fb:cf:6d:a0:
                    be:79:ee:28:1b:03:62:46:f8:42:8c:2a:6f:ba:d7:
                    b4:68:9c:16:2f:39:0a:e2:0f:1c:37:0e:3f:df:af:
                    3b:7a:7a:83:ce:0c:8c:7e:a4:40:ab:77:24:84:4f:
                    df:a4:3c:b8:bd:2a:26:3e:ef:f3:1e:94:74:46:4f:
                    72:8d:48:98:73:2f:87:65:0f:63:a7:0d:22:62:c0:
                    e1:a4:37:1c:94:b8:a5:58:83:06:25:52:29:77:b3:
                    77:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C2:14:32:62:72:50:65:63:F5:7D:67:2C:0D:36:AF:4A:47:38:D3
            X509v3 Authority Key Identifier:
                keyid:2B:85:A2:7C:4F:B6:48:CC:56:2C:2F:E2:B0:DE:A8:A5:75:5F:AB:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31382e302f32342d3234203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:7d:96:0d:5c:1f:06:b1:05:73:ea:04:de:65:dc:5b:35:d8:
         e6:18:45:e5:82:25:a5:26:4f:80:d9:f8:36:02:eb:77:75:66:
         a7:13:dd:6f:28:ca:6b:6b:b7:e7:75:ed:7d:fd:81:04:97:a4:
         65:8b:4a:45:63:e3:63:21:f8:50:e6:ba:d5:19:5d:e8:c4:6d:
         cd:13:d2:ff:cd:68:77:c9:aa:38:7e:f7:36:aa:b4:b9:fe:20:
         ee:5c:16:51:32:01:07:8f:bb:7e:61:0d:57:ae:21:59:af:c2:
         a8:1c:2f:80:02:84:6a:ed:fa:f6:15:e8:c8:52:0d:ad:2e:b9:
         db:21:6e:10:26:74:c4:ca:6d:1a:2d:a8:93:6d:ee:b9:48:74:
         75:ae:32:83:5d:65:04:3e:5a:c7:0e:d1:0b:4e:87:dd:cc:27:
         14:73:86:ea:e5:ab:42:40:36:49:55:9f:f4:e7:68:de:d9:c8:
         87:d0:ae:3f:04:7d:cb:a8:19:91:41:7f:34:32:e2:76:ae:27:
         b0:5d:ea:f5:42:2a:8e:90:57:55:d4:84:23:57:23:28:c9:3b:
         25:c0:8e:1e:41:19:a3:df:d1:46:d5:91:d7:3c:ff:75:82:73:
         7a:25:57:2b:cd:b1:3d:01:69:94:38:a6:81:43:04:ef:aa:4f:
         25:c6:2d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:58 2024 by rpki-client on console-ams.rpki-client.org