Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa
File:                     3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa (raw, json)
Hash identifier:          py+rrMsLa0Dchfy1NhgcEpDIqRvBCd+cy43UYTjN+gQ=
Subject key identifier:   90:E3:B3:A5:EA:9B:AA:6E:BA:68:C2:36:61:FD:DE:49:6C:4D:7B:C1
Certificate issuer:       /CN=F0A91B48CC984B1956E0C296E2876B54F91800B5
Certificate serial:       72F0142790C95DF406FBB7762FABCB09BB9DF470
Authority key identifier: F0:A9:1B:48:CC:98:4B:19:56:E0:C2:96:E2:87:6B:54:F9:18:00:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A91B48CC984B1956E0C296E2876B54F91800B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa
Signing time:             Thu 04 Apr 2024 14:40:53 +0000
ROA not before:           Thu 04 Apr 2024 14:35:53 +0000
ROA not after:            Thu 03 Apr 2025 14:40:53 +0000
asID:                     264367
IP address blocks:        131.108.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f0:14:27:90:c9:5d:f4:06:fb:b7:76:2f:ab:cb:09:bb:9d:f4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0A91B48CC984B1956E0C296E2876B54F91800B5
        Validity
            Not Before: Apr  4 14:35:53 2024 GMT
            Not After : Apr  3 14:40:53 2025 GMT
        Subject: CN=90E3B3A5EA9BAA6EBA68C23661FDDE496C4D7BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:7b:5c:06:e8:e2:a9:b3:67:ca:3e:ea:8e:
                    e1:4f:36:70:6a:07:dc:d6:37:4a:7c:50:68:87:12:
                    4e:bf:b8:c8:65:54:72:8a:39:29:43:eb:65:56:65:
                    36:a4:09:26:b9:67:ca:e7:ab:c1:19:9f:ec:52:c7:
                    b3:3f:7f:cc:4c:8c:bc:9b:3f:78:5e:ac:54:a8:c3:
                    b3:e0:06:f3:59:bc:8d:f9:46:4d:3c:76:80:5c:d0:
                    73:a1:40:bc:3f:03:9c:9e:7e:fd:ef:ec:9e:af:4f:
                    d0:87:78:3b:a6:67:86:99:08:a2:a0:aa:93:65:3d:
                    2a:80:14:36:ed:11:b9:db:ee:3e:63:af:56:2d:59:
                    db:fd:d4:2b:8c:51:81:de:1d:56:bf:53:76:e7:08:
                    e0:11:09:40:47:a2:7b:ac:0d:9a:a6:a9:73:55:21:
                    df:a3:26:1c:18:e5:82:d8:66:6e:70:6e:a1:51:72:
                    df:88:11:71:c3:ea:bd:99:23:7d:e2:03:2f:c8:67:
                    35:52:a0:54:6a:78:89:66:b4:d1:a5:55:5b:37:4b:
                    3c:0a:2a:ec:02:96:fd:2c:f3:47:55:3d:0f:a4:6d:
                    67:74:cd:5c:8a:fc:10:24:5f:26:09:29:ed:39:ec:
                    74:6f:36:25:27:54:d9:fd:db:d0:8b:aa:80:5b:32:
                    e9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E3:B3:A5:EA:9B:AA:6E:BA:68:C2:36:61:FD:DE:49:6C:4D:7B:C1
            X509v3 Authority Key Identifier:
                keyid:F0:A9:1B:48:CC:98:4B:19:56:E0:C2:96:E2:87:6B:54:F9:18:00:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/F0A91B48CC984B1956E0C296E2876B54F91800B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A91B48CC984B1956E0C296E2876B54F91800B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:6f:75:b8:7a:ec:d3:2f:dc:ab:95:ab:88:a3:94:98:4d:92:
         21:50:c4:85:39:25:52:1c:b5:29:3d:b1:f1:b8:20:e4:c9:66:
         23:2e:83:09:a0:f3:b1:33:ad:f2:20:c0:01:a6:c5:40:d9:8b:
         64:cd:d4:d4:e7:07:2a:b6:dc:f3:00:6f:8e:94:e2:be:69:ad:
         22:60:5b:d9:4b:ac:a8:09:cb:a7:28:28:8c:85:f5:d7:04:ef:
         27:af:0e:7c:30:59:65:a8:00:16:63:f2:fc:bd:1f:41:92:f8:
         9e:a2:85:69:cd:bd:ae:44:cb:fa:be:84:5b:95:fd:99:a2:ab:
         eb:9c:1b:99:6f:a9:97:30:8c:63:0d:53:67:42:9b:0a:4f:70:
         aa:1d:8e:cd:c3:27:ea:05:9e:5a:dd:2d:36:8f:e0:84:4a:7b:
         b0:9c:8a:4f:4f:b4:0e:02:e4:52:f4:ae:82:f7:13:b4:2a:da:
         ee:b1:d0:d9:78:a0:16:9c:00:68:87:24:f9:16:ac:17:53:65:
         cb:cc:c3:b0:33:58:99:9f:e9:43:aa:5c:22:24:3e:57:66:29:
         f8:8c:49:0e:c7:1e:21:23:e6:b8:4c:87:0e:f2:a4:66:dc:fb:
         f2:c1:d5:dd:36:a4:23:62:de:0d:94:bc:07:50:54:6a:51:68:
         17:95:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 09:05:59 2024 by rpki-client on console-ams.rpki-client.org