Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/0/3133312e3136312e3234382e302f32342d3234203d3e20323730373133.roa
File:                     3133312e3136312e3234382e302f32342d3234203d3e20323730373133.roa (raw, json)
Hash identifier:          JyX6pOUQNN85xJPe0ceNclbwgPPwHYLUaOGarhEHHXk=
Subject key identifier:   88:D5:2D:26:F0:23:60:06:A1:AD:14:80:3D:A1:1C:84:DA:AE:02:8E
Certificate issuer:       /CN=2999B96DB8D72DDF0F04D7BD30F77D09BB2A3818
Certificate serial:       0DC79E4B7630A28288ED6427F3093CFCF7177C72
Authority key identifier: 29:99:B9:6D:B8:D7:2D:DF:0F:04:D7:BD:30:F7:7D:09:BB:2A:38:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2999B96DB8D72DDF0F04D7BD30F77D09BB2A3818.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/0/3133312e3136312e3234382e302f32342d3234203d3e20323730373133.roa
Signing time:             Mon 08 Jan 2024 18:57:31 +0000
ROA not before:           Mon 08 Jan 2024 18:52:31 +0000
ROA not after:            Mon 06 Jan 2025 18:57:31 +0000
asID:                     270713
IP address blocks:        131.161.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c7:9e:4b:76:30:a2:82:88:ed:64:27:f3:09:3c:fc:f7:17:7c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2999B96DB8D72DDF0F04D7BD30F77D09BB2A3818
        Validity
            Not Before: Jan  8 18:52:31 2024 GMT
            Not After : Jan  6 18:57:31 2025 GMT
        Subject: CN=88D52D26F0236006A1AD14803DA11C84DAAE028E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:8c:07:65:d2:70:04:39:18:b2:2f:03:19:
                    cf:e8:ec:06:9a:ed:a6:a0:d1:05:3f:f6:a7:4f:4f:
                    ee:9b:05:3f:d0:b7:74:14:44:27:09:a4:bc:c5:07:
                    ec:0c:97:92:2a:7d:2f:3b:74:70:ed:76:d3:2d:cc:
                    8a:3d:77:f8:02:24:80:ea:c4:fd:25:cd:7d:e5:49:
                    63:b9:bc:ea:ea:00:18:8d:ae:84:a7:9f:c6:fd:7f:
                    31:f1:43:9d:4c:d6:f4:15:28:e4:98:fd:85:0b:ac:
                    da:7c:d5:99:be:31:8d:5d:45:e8:36:f3:3b:85:ab:
                    31:cb:6f:8c:51:e9:f4:f7:73:04:61:23:03:ca:af:
                    77:99:61:17:ba:d7:74:3a:e0:57:53:69:68:0b:af:
                    56:48:92:5f:96:b1:15:dc:8c:4a:8c:c3:c2:6f:a2:
                    3b:36:9f:7a:bf:eb:2a:3c:9a:8a:84:ca:b9:24:7c:
                    ea:d3:72:18:e3:c2:ff:58:6b:d2:ed:13:0f:e4:bb:
                    06:0b:c8:e4:bc:96:18:15:2f:a4:d1:9f:26:a0:dd:
                    5a:35:4a:42:ff:33:66:fb:d8:5a:63:c5:20:94:f2:
                    3c:0c:aa:84:6b:b0:5e:e4:6b:53:6a:ab:23:2f:4f:
                    76:ef:37:10:8e:fe:0d:91:38:2c:f2:77:42:18:8b:
                    70:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D5:2D:26:F0:23:60:06:A1:AD:14:80:3D:A1:1C:84:DA:AE:02:8E
            X509v3 Authority Key Identifier:
                keyid:29:99:B9:6D:B8:D7:2D:DF:0F:04:D7:BD:30:F7:7D:09:BB:2A:38:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/0/2999B96DB8D72DDF0F04D7BD30F77D09BB2A3818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2999B96DB8D72DDF0F04D7BD30F77D09BB2A3818.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/0/3133312e3136312e3234382e302f32342d3234203d3e20323730373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:a7:65:67:62:b6:e3:31:0c:cc:5b:cd:e1:07:75:e5:6b:61:
         9d:ea:28:95:de:49:30:3a:6b:07:29:f9:d5:f5:ca:ff:1d:70:
         e3:aa:6a:0a:00:59:e2:3e:2d:d3:9a:6d:8e:b5:fc:12:7a:55:
         7d:c3:d5:bc:42:d6:58:f5:20:56:84:b4:9d:74:c4:9b:e3:06:
         82:a7:91:8b:05:10:a7:0b:a5:38:80:39:bf:9f:0b:4f:35:6e:
         c3:b5:ac:25:6a:0e:ad:48:e9:6c:04:48:0f:e6:25:94:c7:48:
         b9:c0:f8:57:00:26:34:b4:f4:76:a6:d1:97:b5:9b:19:a6:77:
         74:3c:76:cb:91:30:c2:90:bb:7b:53:4b:8e:b5:dd:fe:eb:90:
         06:9d:b3:2b:1e:75:05:d5:20:59:fe:c8:b9:7c:a3:88:9e:25:
         24:ba:38:4d:bc:b3:44:0b:cb:80:84:82:33:5f:91:83:b5:7a:
         ad:aa:ba:3f:20:62:1a:af:f8:d9:6d:4b:f2:a0:24:e8:6c:7a:
         06:0a:d3:ee:5f:ac:f9:86:d3:f6:53:a1:40:ee:ae:12:05:32:
         08:af:d4:ef:89:73:2a:4f:9a:42:c0:05:a5:98:64:c5:71:4a:
         72:ab:12:1c:a3:aa:ec:7e:0b:8a:ab:16:50:c6:3d:fb:d7:89:
         65:0c:e0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org