Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136382e302f32322d3232203d3e20323634343337.roa
File:                     3133312e3232312e3136382e302f32322d3232203d3e20323634343337.roa (raw, json)
Hash identifier:          ZPshKvi9X4nCY/lmAPQKuHNh5U5DR5M10UDrKfI1HjU=
Subject key identifier:   12:E0:14:B4:FF:0B:F5:7F:84:8D:CA:60:E9:85:E2:10:66:50:CC:64
Certificate issuer:       /CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Certificate serial:       7F6123733BC082148555BBF46630C7CFC32C9CD7
Authority key identifier: 4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136382e302f32322d3232203d3e20323634343337.roa
Signing time:             Thu 21 Sep 2023 11:25:36 +0000
ROA not before:           Thu 21 Sep 2023 11:20:36 +0000
ROA not after:            Thu 19 Sep 2024 11:25:36 +0000
asID:                     264437
IP address blocks:        131.221.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:61:23:73:3b:c0:82:14:85:55:bb:f4:66:30:c7:cf:c3:2c:9c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
        Validity
            Not Before: Sep 21 11:20:36 2023 GMT
            Not After : Sep 19 11:25:36 2024 GMT
        Subject: CN=12E014B4FF0BF57F848DCA60E985E2106650CC64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:8b:18:fe:8d:a0:a8:09:ae:81:5c:54:f3:
                    c8:7f:b5:97:39:fc:50:23:66:92:8c:9c:39:70:36:
                    cd:dd:a3:76:15:d7:9f:16:e7:11:05:fa:15:1a:9c:
                    5c:d9:00:7b:59:6e:8e:f0:b7:3c:d7:16:62:77:55:
                    72:eb:78:a1:66:32:4c:8d:69:15:a3:9e:58:fc:63:
                    ef:74:f2:a4:5a:b1:d4:80:7f:8b:cc:86:bf:95:d9:
                    5b:70:80:9d:7d:0a:0d:07:5e:43:b7:ca:18:bd:32:
                    78:5d:2e:bf:27:a9:12:c5:27:5a:5a:4b:79:08:fd:
                    61:74:a3:46:2c:42:1e:e8:e2:8c:69:7a:67:1e:73:
                    a4:88:74:d9:b7:07:75:d9:36:ba:3e:56:c8:78:ea:
                    82:8f:ff:28:89:ce:97:e6:fd:9c:b8:df:73:b0:0a:
                    b5:4d:8a:6b:6e:e9:d4:20:f1:8e:74:47:fd:6f:1f:
                    d8:94:08:b3:65:6a:c8:5b:f8:5c:95:85:71:1b:3c:
                    a8:51:fb:36:c5:48:b8:69:45:af:51:ad:ab:22:72:
                    59:b1:2e:a0:d4:06:ae:59:a3:b8:df:5e:42:33:94:
                    78:f7:71:ea:fa:3d:22:ed:5a:5a:bb:64:fd:2b:d1:
                    f1:b1:9d:c2:67:19:e7:f8:de:6f:dd:de:82:fb:50:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E0:14:B4:FF:0B:F5:7F:84:8D:CA:60:E9:85:E2:10:66:50:CC:64
            X509v3 Authority Key Identifier:
                keyid:4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136382e302f32322d3232203d3e20323634343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:9e:5b:d8:14:d8:2b:07:f7:2c:54:c7:dd:92:54:2b:dd:48:
         f8:b1:cd:17:b7:fa:4e:4c:c3:fc:43:6e:00:98:f7:63:2c:d5:
         e2:b7:3a:ec:5d:ee:1c:42:66:7c:f9:36:9d:b6:33:a7:9f:48:
         dc:e9:ba:bc:b4:b3:99:8a:59:e8:af:60:5d:15:ea:4a:85:7d:
         f5:e6:07:1d:9e:59:bc:6e:08:8b:a2:30:25:d0:2d:c3:86:07:
         39:ee:f1:43:1e:d5:3d:d2:b6:63:04:b9:77:af:ee:fa:b6:c9:
         da:f0:83:6a:27:1d:59:3f:c7:03:e3:74:65:26:fb:6d:dc:dd:
         4c:ff:c3:9e:d6:60:4e:45:88:82:1b:cb:1b:5a:6c:39:ac:54:
         48:6c:58:99:20:d3:5e:b0:35:3a:cc:92:d5:d8:33:bf:12:b5:
         92:5b:4a:a0:4f:3c:fd:68:93:4c:07:67:d8:bb:28:1f:5c:4a:
         fb:75:ae:82:51:9c:17:25:4a:7f:61:b4:d3:52:3c:2e:b5:a5:
         8b:64:28:53:c4:92:2a:a5:6f:0c:8c:f3:4e:6a:61:96:c9:bc:
         c8:89:4c:b8:11:d8:a5:d0:57:34:58:64:b5:bb:3b:a5:b0:34:
         cd:51:2f:87:63:41:64:0a:26:09:2e:41:19:8c:c3:1c:8b:42:
         c2:87:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org