Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136382e302f32332d3233203d3e20323634343337.roa
File:                     3133312e3232312e3136382e302f32332d3233203d3e20323634343337.roa (raw, json)
Hash identifier:          uSteiL6YO379+1ru0kTaxlYz+zClJppG2UWPkM2n/H8=
Subject key identifier:   2C:0D:C5:6B:E6:D9:73:EE:CE:F2:A2:36:B9:DD:EE:1B:D6:2E:C1:51
Certificate issuer:       /CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Certificate serial:       3F367513C1A4F4C410027047F9A525035B023FC4
Authority key identifier: 4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136382e302f32332d3233203d3e20323634343337.roa
Signing time:             Thu 21 Sep 2023 11:25:36 +0000
ROA not before:           Thu 21 Sep 2023 11:20:36 +0000
ROA not after:            Thu 19 Sep 2024 11:25:36 +0000
asID:                     264437
IP address blocks:        131.221.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:36:75:13:c1:a4:f4:c4:10:02:70:47:f9:a5:25:03:5b:02:3f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
        Validity
            Not Before: Sep 21 11:20:36 2023 GMT
            Not After : Sep 19 11:25:36 2024 GMT
        Subject: CN=2C0DC56BE6D973EECEF2A236B9DDEE1BD62EC151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:fe:7e:ff:36:3a:f7:fe:59:e2:18:d5:cd:
                    2f:50:a7:06:0c:60:81:93:b6:23:fd:83:e1:92:6d:
                    44:43:d0:8e:32:84:b6:03:5d:7f:7b:c4:9c:d9:45:
                    e9:ee:87:df:df:fb:f6:70:cd:61:31:7d:e5:83:0d:
                    68:4c:07:20:7a:96:2e:c2:21:e7:29:83:fe:84:bf:
                    1a:ef:af:dd:65:f3:f9:1a:e3:a8:e6:16:ba:67:30:
                    77:f6:9a:72:e3:fb:92:f5:10:27:58:4d:36:3c:ab:
                    3b:ee:c1:e6:af:d0:e5:b7:a6:85:76:61:8b:da:6b:
                    ab:98:1e:6a:96:0f:18:e8:a1:21:bd:f5:fd:70:36:
                    45:89:76:f6:69:d6:92:88:00:ae:e3:21:87:ea:92:
                    2f:75:93:ec:06:2b:f6:8c:37:68:9f:f6:53:e4:45:
                    90:28:8e:19:04:b1:de:98:8e:51:e2:7b:40:83:a9:
                    f6:c8:7f:2d:3a:3f:10:7f:be:1d:42:9d:29:6e:91:
                    98:31:e5:5c:74:80:f6:33:c5:25:46:e5:0c:38:5a:
                    d5:7b:2b:a6:01:ae:5c:45:88:f3:13:9d:a6:85:db:
                    c0:fc:09:9f:15:60:29:7f:46:30:74:bf:03:83:f5:
                    15:ce:24:8c:d4:47:f9:73:01:89:12:ce:3f:07:03:
                    68:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0D:C5:6B:E6:D9:73:EE:CE:F2:A2:36:B9:DD:EE:1B:D6:2E:C1:51
            X509v3 Authority Key Identifier:
                keyid:4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136382e302f32332d3233203d3e20323634343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:c5:19:b4:74:37:35:5c:44:dd:6c:c4:3a:f2:d3:4f:fc:3b:
         90:21:80:44:3d:44:4a:56:e3:cb:25:fb:42:f6:c0:30:14:a3:
         f1:b2:27:37:ea:ac:dd:11:f5:51:80:1c:58:49:94:e4:03:15:
         1f:eb:92:e3:c0:01:4f:00:84:4d:e4:fb:e7:bd:79:69:ee:29:
         bc:2a:a3:15:40:90:f2:03:4d:ee:08:bf:8c:e6:f8:a8:9b:f9:
         84:f9:1b:d7:dc:71:86:56:0d:2a:25:9a:98:18:c3:91:68:cb:
         24:29:0f:8b:a7:57:f9:f9:53:3c:2b:5d:44:0b:ed:0d:52:14:
         d1:2d:51:6e:98:e8:83:60:95:84:bb:10:ba:7f:a0:dc:a4:bc:
         f2:4f:86:4f:e6:b4:52:08:d0:23:6b:e6:84:03:f0:13:6c:e6:
         dc:08:c7:2e:80:82:d0:ca:cc:fb:5d:55:bc:d1:49:91:3b:36:
         b8:a1:75:62:6e:72:5b:3e:30:9d:7d:87:7a:be:d2:96:9c:08:
         26:9a:10:ac:44:5c:fa:42:d6:7e:9c:70:a2:27:0a:dd:de:ee:
         c2:c7:d2:03:d9:2a:e7:9a:dc:ad:0a:78:d3:e9:be:56:dd:e3:
         20:47:b2:96:fa:0e:92:9b:22:05:c9:0b:43:41:ea:ad:31:9c:
         d4:89:71:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org