Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138372e302f32342d3234203d3e20323635393330.roa
File:                     3133312e3139362e3138372e302f32342d3234203d3e20323635393330.roa (raw, json)
Hash identifier:          JNOCoaf66HxMCysiKpPEsb8Bhv6oBlsJDtbNpHxkiOo=
Subject key identifier:   2A:D4:F4:E5:4F:87:D3:73:DF:E2:60:EE:7A:FA:46:6E:1E:2D:42:91
Certificate issuer:       /CN=3233E2EDC348AC978221BFAE80C08A1A69277683
Certificate serial:       31FFF82316EDAA188E83DFB8770C6EE242B1124F
Authority key identifier: 32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138372e302f32342d3234203d3e20323635393330.roa
Signing time:             Mon 06 Mar 2023 19:07:23 +0000
ROA not before:           Mon 06 Mar 2023 19:02:23 +0000
ROA not after:            Mon 04 Mar 2024 19:07:23 +0000
asID:                     265930
IP address blocks:        131.196.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ff:f8:23:16:ed:aa:18:8e:83:df:b8:77:0c:6e:e2:42:b1:12:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3233E2EDC348AC978221BFAE80C08A1A69277683
        Validity
            Not Before: Mar  6 19:02:23 2023 GMT
            Not After : Mar  4 19:07:23 2024 GMT
        Subject: CN=2AD4F4E54F87D373DFE260EE7AFA466E1E2D4291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:aa:0c:2e:f1:7e:8d:bb:3b:6b:a6:52:f7:
                    53:7e:da:8d:6d:b1:fd:27:87:8a:1d:07:a2:c4:32:
                    20:4c:a4:99:2e:ed:d3:52:47:65:7f:23:57:24:29:
                    00:51:e7:c4:3f:f2:d5:0e:8e:00:ae:87:1f:cc:24:
                    f9:c9:63:64:19:41:be:1d:b6:c6:7b:b2:5b:50:64:
                    a3:ae:a9:2f:76:24:a2:67:ae:bd:5e:52:4d:74:ac:
                    2c:2f:df:a2:fb:21:2b:e3:ae:7c:58:bf:23:d5:8c:
                    51:16:26:cc:3c:13:02:6f:78:e2:bf:ef:51:54:65:
                    85:91:79:36:b3:1b:aa:59:c3:62:f2:26:ec:52:d0:
                    3d:bc:c9:74:a7:b8:d1:84:65:ca:10:6d:02:d9:4f:
                    a9:24:e9:29:3a:c3:ec:7c:b4:fc:b1:bd:be:08:58:
                    d7:18:ab:32:83:08:dc:9e:96:0e:07:00:35:a9:84:
                    96:ae:ce:66:68:08:b8:74:2b:49:52:9d:cb:cd:c0:
                    97:f0:c4:e7:ab:6c:7e:a5:66:b2:cd:30:95:42:04:
                    7a:68:d9:cc:5e:67:22:59:7d:76:cc:ea:ae:c6:8a:
                    d1:47:2e:32:36:9b:b2:a1:80:a5:c1:18:45:3f:75:
                    bd:73:9f:1f:b7:56:8d:26:9a:4f:ee:90:b2:78:97:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D4:F4:E5:4F:87:D3:73:DF:E2:60:EE:7A:FA:46:6E:1E:2D:42:91
            X509v3 Authority Key Identifier:
                keyid:32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3233E2EDC348AC978221BFAE80C08A1A69277683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138372e302f32342d3234203d3e20323635393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:8f:23:42:3a:9b:ed:88:20:dc:ea:fd:17:62:83:51:b8:78:
         87:5e:ac:59:ff:dd:ba:42:12:fa:2d:ed:c4:00:0e:40:53:92:
         ed:98:ce:ad:0d:1d:44:e9:23:06:71:12:12:75:8c:da:7b:da:
         31:be:1b:6d:3c:33:ef:f5:ea:40:8f:29:e9:f9:c0:78:5d:42:
         59:96:e1:e9:26:0a:3c:86:df:87:8d:e5:56:4f:aa:3d:2e:d7:
         dc:c3:bb:81:4a:a7:ea:4a:28:db:9b:00:89:24:92:1e:6c:73:
         a0:59:2d:14:54:d5:8b:43:31:df:dd:54:a4:d1:8d:01:53:1d:
         53:c2:86:99:35:4e:23:56:97:90:c5:80:c0:6b:64:cb:69:6b:
         de:67:5c:ae:3e:37:b5:00:8c:8a:dd:8c:ca:6e:fc:de:02:c2:
         40:9b:f6:d8:69:ad:78:5d:6f:30:5c:06:cf:83:e6:76:02:f8:
         ba:fd:6f:f1:c1:cc:a6:c2:b2:dd:83:95:ab:93:12:a0:1d:ec:
         e0:ef:14:66:ab:53:98:3b:df:0e:62:2a:4a:31:b5:7e:92:2d:
         f5:de:ce:23:0d:03:43:6a:45:e6:e4:33:bf:15:1a:78:fc:90:
         82:dc:41:29:72:d5:3c:2a:ef:63:fd:6b:36:47:e3:45:62:e7:
         ed:b8:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org