Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/3133312e3235352e3133312e302f32342d3332203d3e20323731363538.roa
File:                     3133312e3235352e3133312e302f32342d3332203d3e20323731363538.roa (raw, json)
Hash identifier:          SVVK4bGaaqUGzerM26xih23PS5bfry8/WVd0wTByzlY=
Subject key identifier:   E1:54:E2:D4:88:64:35:A9:2E:B1:87:87:B8:5E:7B:33:89:E7:75:EF
Certificate issuer:       /CN=98716993F5885BA4377ED210D21A8A2D0CE43192
Certificate serial:       5C228E42B78997739826CF022A516A2BF21CBB0E
Authority key identifier: 98:71:69:93:F5:88:5B:A4:37:7E:D2:10:D2:1A:8A:2D:0C:E4:31:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98716993F5885BA4377ED210D21A8A2D0CE43192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/3133312e3235352e3133312e302f32342d3332203d3e20323731363538.roa
Signing time:             Fri 16 Feb 2024 15:10:30 +0000
ROA not before:           Fri 16 Feb 2024 15:05:30 +0000
ROA not after:            Fri 14 Feb 2025 15:10:30 +0000
asID:                     271658
IP address blocks:        131.255.131.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:22:8e:42:b7:89:97:73:98:26:cf:02:2a:51:6a:2b:f2:1c:bb:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98716993F5885BA4377ED210D21A8A2D0CE43192
        Validity
            Not Before: Feb 16 15:05:30 2024 GMT
            Not After : Feb 14 15:10:30 2025 GMT
        Subject: CN=E154E2D4886435A92EB18787B85E7B3389E775EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:e9:cf:2f:35:a2:e4:20:ee:6d:c1:b8:1e:
                    42:84:1c:46:02:e7:47:1a:67:e8:98:67:16:80:57:
                    97:54:bd:fe:a8:f7:fe:1d:27:d8:d3:f9:1d:a1:d8:
                    bd:ef:ea:27:5f:8e:6c:1e:23:94:20:71:6d:c0:7b:
                    f5:c6:b2:84:0a:f8:45:11:34:26:38:de:37:07:9d:
                    e4:07:08:0d:3b:9b:8c:b4:a2:4d:8c:67:85:4d:51:
                    53:38:49:8e:73:c4:4f:c9:c6:05:20:8d:53:7a:98:
                    f7:c3:f2:83:9c:b0:ff:9d:08:a3:35:39:65:fb:e6:
                    ac:bf:4e:b2:dd:cc:9f:7d:bd:41:94:0d:91:14:51:
                    e9:89:7f:40:b3:f6:2c:0c:00:b4:0d:3e:47:17:fb:
                    54:19:d1:7b:ba:90:39:15:07:57:5e:3a:20:51:34:
                    ca:26:44:db:e0:40:fc:87:72:5f:44:06:86:be:cc:
                    e4:05:6a:4c:3e:d9:7b:dd:65:c5:80:d1:09:5e:44:
                    dd:ed:77:9b:14:5a:a0:9f:89:d6:54:1a:86:c4:41:
                    c0:bd:8b:98:6a:06:66:a6:35:3c:14:e7:b7:c1:da:
                    12:7e:39:06:31:3b:30:3b:eb:a3:3a:4d:dc:8d:46:
                    42:2a:5a:11:fb:ce:4c:4f:2f:6f:5c:cc:18:cd:1e:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:54:E2:D4:88:64:35:A9:2E:B1:87:87:B8:5E:7B:33:89:E7:75:EF
            X509v3 Authority Key Identifier:
                keyid:98:71:69:93:F5:88:5B:A4:37:7E:D2:10:D2:1A:8A:2D:0C:E4:31:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/98716993F5885BA4377ED210D21A8A2D0CE43192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98716993F5885BA4377ED210D21A8A2D0CE43192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/3133312e3235352e3133312e302f32342d3332203d3e20323731363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e0:f2:81:1e:7b:40:46:91:d1:9d:12:92:ed:b1:99:59:55:
         68:e0:17:f6:e1:e4:2f:dc:fe:84:97:32:f3:ac:80:06:e8:06:
         a4:f8:12:88:35:4f:3b:b0:f1:a4:6c:37:cd:be:c1:2e:ec:0d:
         c4:07:1e:70:f0:5b:4b:12:79:f3:3a:33:07:1e:73:03:b6:04:
         bc:7a:08:c3:1a:41:15:3f:5e:5b:06:b9:8d:bf:b9:25:79:91:
         69:09:a5:46:e9:a4:ba:9a:2c:02:90:b5:53:63:d9:07:9e:1f:
         8b:cc:27:80:fe:dd:d5:bf:93:1f:a7:27:bf:e1:0d:95:4c:5f:
         67:e8:6d:56:e5:3b:8c:a4:04:7e:0d:91:95:3d:8c:ad:c6:e5:
         67:58:96:ca:62:c9:32:db:94:f3:28:23:0d:30:88:70:78:60:
         01:32:73:07:0e:56:8d:58:51:db:94:be:2c:6c:a6:32:45:33:
         77:34:a7:b9:3f:08:d9:a7:f7:64:c4:0b:c3:66:d5:08:13:57:
         0f:a9:65:2a:01:78:6e:0c:0c:db:53:0b:93:b7:62:63:06:5f:
         42:d2:fd:d4:6f:62:b1:5f:bd:dc:ca:2c:4d:3b:f4:52:db:d3:
         4a:a8:df:be:57:31:3b:bb:af:ad:2f:92:2d:94:32:6f:d7:ba:
         ad:0c:a3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org