Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138342e302f32322d3232203d3e20323635393330.roa
File:                     3133312e3139362e3138342e302f32322d3232203d3e20323635393330.roa (raw, json)
Hash identifier:          jnFj28I3b4kVmC6B52mLZDQKxgyq1Ad+fcbrA58uNbI=
Subject key identifier:   F7:FF:6D:62:9C:73:51:1B:60:25:FE:78:CC:D7:2D:45:14:CE:48:F5
Certificate issuer:       /CN=3233E2EDC348AC978221BFAE80C08A1A69277683
Certificate serial:       3144699DF3CD85200689E065F84A85C8D7D1D275
Authority key identifier: 32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138342e302f32322d3232203d3e20323635393330.roa
Signing time:             Mon 06 Mar 2023 19:07:14 +0000
ROA not before:           Mon 06 Mar 2023 19:02:14 +0000
ROA not after:            Mon 04 Mar 2024 19:07:14 +0000
asID:                     265930
IP address blocks:        131.196.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:44:69:9d:f3:cd:85:20:06:89:e0:65:f8:4a:85:c8:d7:d1:d2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3233E2EDC348AC978221BFAE80C08A1A69277683
        Validity
            Not Before: Mar  6 19:02:14 2023 GMT
            Not After : Mar  4 19:07:14 2024 GMT
        Subject: CN=F7FF6D629C73511B6025FE78CCD72D4514CE48F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:23:e7:57:a0:70:0f:f9:7d:c2:6e:06:b1:
                    b7:a2:fa:66:9d:0d:51:8c:be:4f:1b:73:95:17:81:
                    79:f3:fb:3c:12:da:67:74:f1:a2:e9:9d:c3:27:3d:
                    46:b6:f6:64:0d:79:f7:a0:9d:d0:f6:22:a1:6f:4f:
                    f6:01:f2:23:12:f7:16:91:37:c4:dd:34:fd:35:c5:
                    e1:32:92:81:f2:36:b9:d9:77:d1:b6:75:1e:6c:15:
                    d4:87:fb:57:d9:77:39:c7:c5:38:c7:db:b0:42:4c:
                    d9:0a:67:5a:c0:fc:e6:59:74:62:00:07:bd:26:c2:
                    80:02:05:4e:ee:74:14:89:b2:aa:44:dc:30:3d:e7:
                    b3:da:98:91:24:5d:f5:ee:f0:d0:45:86:dc:fd:a1:
                    49:d0:cc:59:d6:ad:b7:0b:cb:01:62:c4:86:87:99:
                    8b:79:2d:3b:c3:b7:3a:ee:82:00:bd:3f:a7:4f:6a:
                    fc:be:32:24:82:fe:7f:bd:56:41:71:27:ad:dd:f6:
                    ba:ca:1c:bc:22:f6:0f:78:b2:48:50:7f:97:b1:b9:
                    b9:89:50:b8:15:3d:72:2e:00:09:b8:fd:cb:10:cc:
                    f9:c8:07:c0:e8:04:ea:99:4f:d5:c8:aa:93:4c:e9:
                    f1:b6:29:75:75:b7:cc:3f:07:58:93:bd:da:23:bb:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FF:6D:62:9C:73:51:1B:60:25:FE:78:CC:D7:2D:45:14:CE:48:F5
            X509v3 Authority Key Identifier:
                keyid:32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3233E2EDC348AC978221BFAE80C08A1A69277683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138342e302f32322d3232203d3e20323635393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:29:f9:f0:d6:1d:ff:da:ec:2c:cc:35:89:a4:4b:bc:f3:7f:
         78:cc:ba:fd:ac:70:d3:1b:23:39:81:97:f3:85:e8:d5:9f:77:
         2d:86:6d:3e:6b:6f:5b:0d:16:a5:10:37:53:85:8f:91:e3:82:
         3d:d1:6e:4a:a4:a6:5d:a4:43:49:a6:d2:7b:90:c1:3f:1b:5a:
         2f:76:ab:e2:07:3c:21:97:6e:b9:05:52:7e:4c:65:02:82:2f:
         de:8f:19:16:06:79:c3:fb:1e:39:a6:59:9f:e0:37:94:6f:23:
         08:86:98:81:b8:dd:ab:4d:cd:25:29:1f:db:f8:12:a4:db:8a:
         a7:45:6c:7e:93:f6:69:79:61:a2:d4:25:ae:d5:6a:c3:20:ac:
         99:26:d2:94:0d:76:99:91:7a:9e:a1:c2:f8:f0:e0:f7:53:6a:
         f0:ab:d4:3f:25:2b:f5:50:0e:3c:3a:a6:d0:ed:d5:44:f3:e6:
         05:60:fb:fe:b3:3a:2d:be:b8:7f:05:1e:aa:bb:63:77:cf:31:
         5e:8b:fe:94:32:c9:b6:df:fa:75:f4:9d:7a:a0:0c:25:04:16:
         46:03:c1:c1:7e:77:ba:c3:b2:49:ce:e4:77:ae:b0:62:22:c4:
         62:ea:93:9b:73:c4:b7:93:07:20:29:63:d1:a1:52:68:29:04:
         b3:c3:40:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org