Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/3133312e3232312e3234382e302f32322d3234203d3e20323634343431.roa
File:                     3133312e3232312e3234382e302f32322d3234203d3e20323634343431.roa (raw, json)
Hash identifier:          q85pO5zabtG6QS6jyqniC1o6EW40SjlqQKBPQzVwhpw=
Subject key identifier:   87:91:B4:04:63:02:3C:E9:95:54:26:F6:9D:72:11:AF:A9:97:7B:D5
Certificate issuer:       /CN=2719F43965E7EDB5C5356E533B3BF2F2A5B79A14
Certificate serial:       452DBB6179100CA33CA9D5045908DC755F176E25
Authority key identifier: 27:19:F4:39:65:E7:ED:B5:C5:35:6E:53:3B:3B:F2:F2:A5:B7:9A:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2719F43965E7EDB5C5356E533B3BF2F2A5B79A14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/3133312e3232312e3234382e302f32322d3234203d3e20323634343431.roa
Signing time:             Tue 22 Aug 2023 19:50:22 +0000
ROA not before:           Tue 22 Aug 2023 19:45:22 +0000
ROA not after:            Tue 20 Aug 2024 19:50:22 +0000
asID:                     264441
IP address blocks:        131.221.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2d:bb:61:79:10:0c:a3:3c:a9:d5:04:59:08:dc:75:5f:17:6e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719F43965E7EDB5C5356E533B3BF2F2A5B79A14
        Validity
            Not Before: Aug 22 19:45:22 2023 GMT
            Not After : Aug 20 19:50:22 2024 GMT
        Subject: CN=8791B40463023CE9955426F69D7211AFA9977BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:a2:d5:5c:54:2b:f1:6e:1d:c9:ea:81:2d:
                    9c:bb:0e:5e:3f:3f:f5:0d:25:03:cf:bb:61:c6:ae:
                    e8:48:05:21:c8:40:5e:0d:56:4d:58:fc:f9:f1:29:
                    51:29:c3:6e:00:bd:37:7e:a0:65:8a:56:77:d0:d4:
                    eb:ae:26:17:49:96:29:1a:77:45:48:94:44:b1:26:
                    b6:e1:f8:9d:27:a3:c6:ef:46:b3:36:2c:ff:dc:86:
                    16:1d:a4:9c:64:53:d3:8f:c6:ac:e5:46:88:7b:4f:
                    21:2c:e8:86:92:37:db:61:88:56:ec:f3:77:c2:96:
                    ea:6f:c3:c6:89:1a:37:d0:9a:95:61:eb:06:05:a9:
                    2e:18:3e:c7:74:ac:0e:65:04:3d:56:5e:5f:57:6c:
                    5b:13:30:2f:3e:0a:09:02:bf:3a:88:98:56:cf:67:
                    87:2a:92:a4:e5:18:bf:28:65:e4:30:01:7e:5d:88:
                    85:1d:02:05:60:18:3f:e9:0a:42:d3:07:64:fc:44:
                    b2:e5:1b:3d:5b:4a:94:7d:35:c7:68:ad:aa:2f:5a:
                    b0:d7:d0:10:eb:ac:73:5b:4a:27:c0:8d:5e:08:29:
                    3b:09:64:2d:72:39:74:29:58:6e:42:4d:19:cd:3f:
                    d2:e6:4d:cd:4b:e9:2a:3a:82:23:4b:a2:1c:fd:42:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:91:B4:04:63:02:3C:E9:95:54:26:F6:9D:72:11:AF:A9:97:7B:D5
            X509v3 Authority Key Identifier:
                keyid:27:19:F4:39:65:E7:ED:B5:C5:35:6E:53:3B:3B:F2:F2:A5:B7:9A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/2719F43965E7EDB5C5356E533B3BF2F2A5B79A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2719F43965E7EDB5C5356E533B3BF2F2A5B79A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/3133312e3232312e3234382e302f32322d3234203d3e20323634343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:c4:4d:43:ae:13:6c:19:95:05:96:ee:ba:2a:83:ca:fa:74:
         a7:3c:70:0a:f5:44:95:97:15:29:6b:2d:5d:9e:21:81:29:b4:
         63:4b:90:79:0a:dd:29:a6:9c:ce:94:f8:3e:ca:74:65:55:0d:
         81:ae:b1:87:d8:b8:e2:64:c7:b3:d0:87:8e:ac:26:bd:c8:06:
         48:4a:20:0e:7a:d6:6b:34:34:15:bf:a9:24:15:ad:b0:f9:c6:
         3b:47:c7:f0:36:ad:a0:aa:52:1d:80:cb:19:44:60:d7:c2:b1:
         46:3a:aa:ad:e1:b8:2c:3d:4d:96:a5:26:e0:f2:8b:70:11:68:
         51:c5:a9:34:aa:95:5b:33:c9:da:ca:d5:84:4e:ec:d8:cb:34:
         fc:0b:42:2e:db:69:80:31:73:ee:ac:32:c9:9f:77:c2:d9:fa:
         87:4e:00:3c:4c:83:b7:48:f9:12:bf:60:67:8c:1f:41:b4:7d:
         a7:93:d7:89:06:d7:7b:bd:bd:64:fc:94:d5:b5:1f:87:78:32:
         30:da:83:a4:80:0b:c7:4c:04:b4:3a:72:45:c3:19:55:9f:dd:
         30:8a:d7:b2:7f:a1:ca:d8:5a:82:7e:2d:82:42:57:43:d9:23:
         e7:68:0d:b3:5f:e8:f3:56:c6:de:47:23:aa:4d:a2:28:02:41:
         91:71:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org