Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3234382e302f32322d3234203d3e203631363638.roa
File:                     3133312e3130302e3234382e302f32322d3234203d3e203631363638.roa (raw, json)
Hash identifier:          oxTBlIkY7sO06FktzEUxyrh94j9dH+7tIm0pf/+phSY=
Subject key identifier:   19:B1:CD:26:42:5B:A5:12:A2:D5:F9:2D:32:73:9B:26:7E:8A:DD:CB
Certificate issuer:       /CN=B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362
Certificate serial:       20BD198065F58A34C5AA2E650544D37948B7EAD1
Authority key identifier: B3:4D:4D:8D:F9:2A:C0:4B:8C:CE:4E:CE:AE:BA:01:84:AD:E1:83:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3234382e302f32322d3234203d3e203631363638.roa
Signing time:             Mon 26 Sep 2022 21:43:56 +0000
ROA not before:           Mon 26 Sep 2022 21:38:56 +0000
ROA not after:            Mon 25 Sep 2023 21:43:56 +0000
asID:                     61668
IP address blocks:        131.100.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bd:19:80:65:f5:8a:34:c5:aa:2e:65:05:44:d3:79:48:b7:ea:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362
        Validity
            Not Before: Sep 26 21:38:56 2022 GMT
            Not After : Sep 25 21:43:56 2023 GMT
        Subject: CN=19B1CD26425BA512A2D5F92D32739B267E8ADDCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:9d:6f:d9:6d:de:d3:ac:d7:06:e5:8b:1d:
                    dd:44:0d:fb:e9:ef:b9:4e:12:21:15:4f:0e:2c:5a:
                    70:56:b8:68:2b:8b:70:57:df:be:91:fc:d2:03:ed:
                    2b:6f:4e:1c:cf:d9:7d:87:b8:b9:41:cb:f0:b8:39:
                    b1:78:71:c7:33:a4:7d:4e:11:5a:4e:66:c7:e8:90:
                    7c:24:3b:b6:d0:01:64:e3:93:38:94:45:de:9e:a2:
                    1f:7c:9f:7e:80:67:29:b9:21:38:df:f5:e6:ab:aa:
                    3e:94:aa:fe:74:d9:07:2c:4f:95:63:a3:1a:cc:0b:
                    b0:50:d5:da:57:dc:6e:13:c8:01:aa:16:ca:93:68:
                    ef:9f:b3:8d:89:47:34:92:f0:89:51:11:6a:d8:c5:
                    1d:b8:47:cc:be:41:d0:68:ba:ed:05:35:ea:e8:7a:
                    3f:72:e7:03:62:2a:c2:30:80:a2:51:84:1b:e7:e3:
                    7b:33:61:96:3a:13:5e:cb:0c:59:40:13:aa:e7:71:
                    52:e6:51:92:ff:15:64:49:1a:23:f5:75:ef:d0:aa:
                    a4:e8:c0:62:fc:d1:3a:f2:fc:cd:2a:9f:e3:77:2f:
                    b7:74:20:2c:51:a2:6b:cc:d5:c2:c0:9d:5b:28:1f:
                    b2:fe:7c:87:3f:fb:e8:f1:1b:27:cf:5e:43:38:b1:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B1:CD:26:42:5B:A5:12:A2:D5:F9:2D:32:73:9B:26:7E:8A:DD:CB
            X509v3 Authority Key Identifier:
                keyid:B3:4D:4D:8D:F9:2A:C0:4B:8C:CE:4E:CE:AE:BA:01:84:AD:E1:83:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3234382e302f32322d3234203d3e203631363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:d5:95:b2:c9:b4:7a:e1:8e:28:a5:11:9d:78:09:ea:85:6d:
         88:78:62:6b:c9:0d:54:02:59:f6:c4:ed:a0:93:aa:da:6f:de:
         17:af:d0:cb:9e:d4:58:12:d0:89:a7:45:ec:5a:09:24:b3:41:
         7a:11:32:29:a5:95:f0:87:19:52:37:d6:6c:f8:1e:80:2d:8a:
         63:29:24:b6:3d:a6:28:74:77:94:cb:df:5e:bd:52:c4:14:aa:
         ab:49:fd:fa:c7:f0:c7:2a:8a:3d:4a:1a:09:cc:99:af:fc:0e:
         70:ab:e6:94:3b:89:a1:15:0f:50:65:ce:1b:e5:63:34:d3:aa:
         31:cd:15:48:c5:1c:d9:93:95:ea:55:16:95:5c:bb:ba:e1:6a:
         47:e0:07:99:d2:18:c2:64:e8:ee:92:77:57:bb:c6:60:a5:2a:
         4e:4c:a9:3b:2d:db:a0:31:d6:33:63:25:5c:9e:5e:54:bc:12:
         fb:30:7a:6d:5c:98:c2:77:13:72:36:29:2f:19:9c:79:f9:69:
         25:9d:89:a1:55:db:d3:12:ff:54:72:16:a7:28:ee:5f:28:2c:
         ed:29:89:23:b5:f5:d3:7d:33:72:c9:46:21:94:db:3b:a4:05:
         cb:4c:0e:c9:ff:18:47:7c:4d:77:aa:66:af:1f:2e:28:fc:3d:
         80:d6:0d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org