Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3139362e37362e302f32322d3234203d3e203238323730.roa
File:                     3133312e3139362e37362e302f32322d3234203d3e203238323730.roa (raw, json)
Hash identifier:          AvqZ8MTOOumBYLHCeJ7kltB5TNCi5F+rbmhMfBvU9MQ=
Subject key identifier:   4E:5A:0D:87:47:6B:35:45:AD:AB:98:C5:72:04:21:DC:35:92:71:FD
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       77059A301BA91935E8C3400C21E428A933F25543
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3139362e37362e302f32322d3234203d3e203238323730.roa
Signing time:             Thu 22 Feb 2024 04:15:46 +0000
ROA not before:           Thu 22 Feb 2024 04:10:46 +0000
ROA not after:            Thu 20 Feb 2025 04:15:46 +0000
asID:                     28270
IP address blocks:        131.196.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:05:9a:30:1b:a9:19:35:e8:c3:40:0c:21:e4:28:a9:33:f2:55:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Feb 22 04:10:46 2024 GMT
            Not After : Feb 20 04:15:46 2025 GMT
        Subject: CN=4E5A0D87476B3545ADAB98C5720421DC359271FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:3f:ce:1c:77:f9:0e:ec:a9:de:ab:0d:91:
                    70:e1:83:d0:f0:a1:ee:30:12:b6:b6:3e:b1:21:8a:
                    74:7c:07:c1:1b:56:63:c0:cc:ef:50:34:e2:5d:38:
                    38:d5:47:78:e6:de:ce:6f:db:f6:bb:02:3d:ad:ed:
                    2e:1c:56:03:c6:0d:43:fc:d5:34:03:05:b1:31:e7:
                    79:4d:19:6f:52:98:4a:f5:78:2c:5a:a7:e5:75:02:
                    b1:bf:ae:6e:44:57:1b:0a:01:ae:81:96:47:5d:aa:
                    7f:a0:08:24:8b:53:f4:d3:b1:85:24:54:3a:5d:f7:
                    8c:d8:52:c7:d7:2b:4f:be:3e:fd:b9:11:60:b4:23:
                    93:28:c3:03:5e:f0:76:2c:ed:4b:f8:8c:7b:78:41:
                    13:cf:fb:19:5b:c7:1f:85:c2:27:8e:03:d2:c2:5e:
                    5c:eb:e9:ae:67:45:84:7f:51:a2:33:93:85:e8:7e:
                    e7:2f:60:9a:1e:8d:54:34:30:ec:e6:4a:9e:8a:b9:
                    dc:fd:d2:8d:5a:64:82:6c:59:b0:23:84:01:48:4d:
                    77:0c:ce:9f:a3:30:f2:b9:0e:8f:1b:c1:f3:a0:a9:
                    e9:49:20:70:9a:1e:cc:30:44:aa:ea:62:b3:fc:40:
                    54:70:30:79:c8:f0:0d:3a:d7:eb:10:9e:5e:27:a2:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5A:0D:87:47:6B:35:45:AD:AB:98:C5:72:04:21:DC:35:92:71:FD
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3139362e37362e302f32322d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:03:f7:15:2a:26:22:5d:f8:4d:fd:c5:dc:3b:96:3d:f6:95:
         64:cd:90:0d:37:5b:29:07:2d:86:d5:9c:c4:90:f3:2a:56:fe:
         5f:8d:fd:b0:5d:a9:7d:ba:4f:97:9f:49:f8:78:d2:e6:8a:ca:
         27:05:3c:91:7d:52:76:5d:83:2f:db:97:6f:76:33:15:99:cc:
         9d:6e:d3:d8:0b:b7:34:04:8f:20:59:61:15:2f:d1:a7:0b:74:
         d4:a8:1d:51:32:6f:c6:14:c5:3f:c9:0e:24:47:37:27:fb:a7:
         54:92:bc:3b:02:90:ae:6a:8e:0f:67:05:89:6c:74:ea:7e:96:
         2c:31:95:af:1b:66:b9:0b:40:a9:2a:a8:98:d4:93:1b:1a:bc:
         31:32:51:d8:e4:bb:2b:66:3b:1e:0d:85:99:a1:42:4b:7e:3d:
         00:21:51:d9:aa:f0:bc:51:85:4e:9f:b3:a0:e8:54:64:94:f1:
         c7:52:e8:4c:33:57:44:db:08:02:f1:d9:76:e9:7f:27:75:e0:
         55:f8:a1:00:6e:de:22:09:82:9e:14:8e:29:8e:dd:95:eb:87:
         67:d7:fb:53:87:5c:ad:48:89:bb:5c:e8:ef:8d:dc:86:41:6a:
         09:98:04:bf:bf:a1:0f:4d:39:54:11:3b:92:dd:62:fd:52:a5:
         ac:6c:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org