Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3234203d3e20323731373234.roa
File:                     3133312e3232312e36382e302f32322d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          Hc7/kYVQ5577kexiumNAT8JpY5Jf0KkjinuyGasjNE4=
Subject key identifier:   72:94:9B:96:54:51:5D:53:C0:7B:91:78:E3:C0:29:B3:70:68:41:3C
Certificate issuer:       /CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
Certificate serial:       0927F8333398FBA66BBC78BA6D3FCA447FA24FC7
Authority key identifier: E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3234203d3e20323731373234.roa
Signing time:             Tue 28 Feb 2023 12:42:25 +0000
ROA not before:           Tue 28 Feb 2023 12:37:25 +0000
ROA not after:            Tue 27 Feb 2024 12:42:25 +0000
asID:                     271724
IP address blocks:        131.221.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:27:f8:33:33:98:fb:a6:6b:bc:78:ba:6d:3f:ca:44:7f:a2:4f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
        Validity
            Not Before: Feb 28 12:37:25 2023 GMT
            Not After : Feb 27 12:42:25 2024 GMT
        Subject: CN=72949B9654515D53C07B9178E3C029B37068413C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:04:b1:83:15:b7:5d:14:78:24:b7:87:10:86:
                    e6:15:6b:97:1a:b7:8c:04:65:3f:07:7a:5e:04:f6:
                    47:09:86:01:51:5d:24:9a:7a:18:f8:a1:c4:37:a3:
                    29:8d:3f:d7:63:6f:53:34:c9:28:32:b2:99:04:d3:
                    cc:13:66:d5:d0:16:3f:a8:0c:d6:8e:30:1c:4f:cb:
                    b1:5f:80:06:3d:15:3d:6f:cb:ff:2e:3e:31:d0:4f:
                    0a:41:97:39:15:71:c1:bd:a2:49:da:a9:e9:ab:7a:
                    68:fa:89:1a:87:c7:c9:b0:a9:ff:76:e9:b7:7b:1e:
                    9e:81:69:1c:d4:7c:86:f0:ab:14:22:80:d1:d7:13:
                    d5:98:75:04:fe:c7:78:34:7c:29:fa:f5:ab:36:4f:
                    d5:53:b8:0a:8f:31:43:24:38:83:fb:4c:4b:b9:3a:
                    36:f1:d5:d1:92:17:c1:e4:78:64:e1:69:9a:14:2f:
                    18:0e:b6:94:86:45:1e:d5:8f:14:25:f3:e8:f7:42:
                    92:80:06:c3:4d:1b:ca:2f:4b:54:6f:85:e2:01:bd:
                    5d:05:37:ab:54:c8:f6:18:07:52:db:07:65:1c:d3:
                    b6:ea:01:80:0b:3f:c8:31:60:db:87:c2:6f:59:58:
                    4d:2c:9b:6b:01:cd:66:10:00:49:19:61:e1:87:46:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:94:9B:96:54:51:5D:53:C0:7B:91:78:E3:C0:29:B3:70:68:41:3C
            X509v3 Authority Key Identifier:
                keyid:E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:1f:b0:eb:5a:8b:fc:57:ac:7b:e9:d8:cc:81:ee:d7:4f:f4:
         81:84:73:a0:5b:cc:ec:e7:29:57:11:de:ee:37:ad:08:6e:2f:
         11:9e:b6:1c:92:86:66:0f:2f:63:ca:04:93:29:01:35:2d:83:
         c7:dc:fd:60:b9:83:3b:c1:5e:ab:87:38:83:c2:8b:14:29:46:
         22:2a:92:52:2f:4c:3c:00:c1:72:0c:3f:d9:33:00:51:d4:b1:
         4a:9d:d9:5e:55:99:3d:c5:27:b3:80:dd:a6:a3:49:91:84:4f:
         86:d5:ee:19:37:b8:3d:9f:81:86:b3:8b:ca:fc:8b:76:d0:4a:
         32:9d:b8:a4:5e:08:4f:5f:f7:27:a0:27:66:18:ff:98:e2:29:
         1d:c5:76:cb:f2:37:0a:18:1f:ee:81:2e:15:f2:81:ff:a0:16:
         d4:74:5b:1f:2c:de:0c:17:fd:06:bc:49:c0:17:48:bb:e7:19:
         0b:75:9c:1b:64:27:36:8a:73:dd:c3:74:b3:92:55:d6:8d:fb:
         cb:58:a1:79:48:15:2e:07:21:4c:73:f5:5e:82:f9:59:4a:30:
         dc:bc:c9:20:7b:64:da:46:2a:e6:b3:50:fe:22:15:2c:7f:b1:
         d6:ea:4a:59:00:dc:e2:54:b2:50:0f:22:94:59:ab:28:e1:fc:
         34:29:8f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org