Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57TwXRQpKQZuFkjzW2UgfzQrDfisv9JdK7qjtgqzuJSz/0/3133312e3232312e3132382e302f32322d3232203d3e20323634343137.roa
File:                     3133312e3232312e3132382e302f32322d3232203d3e20323634343137.roa (raw, json)
Hash identifier:          R8EGcmzVoEd42e/bwxZsq4plfFvL/XfwGuLaVOhDhZg=
Subject key identifier:   37:40:14:16:F2:99:AD:70:94:D0:29:28:FC:7E:A0:5A:24:83:FF:83
Certificate issuer:       /CN=BB7D411A2A24735AFF8D04706DC75FBE58888F9C
Certificate serial:       14593B4F88F6A5E38F2F82979470DD3389E7774E
Authority key identifier: BB:7D:41:1A:2A:24:73:5A:FF:8D:04:70:6D:C7:5F:BE:58:88:8F:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB7D411A2A24735AFF8D04706DC75FBE58888F9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57TwXRQpKQZuFkjzW2UgfzQrDfisv9JdK7qjtgqzuJSz/0/3133312e3232312e3132382e302f32322d3232203d3e20323634343137.roa
Signing time:             Thu 08 Sep 2022 17:08:43 +0000
ROA not before:           Thu 08 Sep 2022 17:03:43 +0000
ROA not after:            Thu 07 Sep 2023 17:08:43 +0000
asID:                     264417
IP address blocks:        131.221.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:59:3b:4f:88:f6:a5:e3:8f:2f:82:97:94:70:dd:33:89:e7:77:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB7D411A2A24735AFF8D04706DC75FBE58888F9C
        Validity
            Not Before: Sep  8 17:03:43 2022 GMT
            Not After : Sep  7 17:08:43 2023 GMT
        Subject: CN=37401416F299AD7094D02928FC7EA05A2483FF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:34:81:17:47:bc:e5:cb:d5:fb:a5:53:15:0f:
                    3f:37:e9:a1:dc:cd:c1:3f:1d:6c:ee:04:c6:c4:d1:
                    77:e9:f8:15:07:01:f9:72:bc:20:8c:61:ce:76:67:
                    7a:5c:b4:e5:a9:40:dc:72:71:72:a0:ff:64:a3:60:
                    24:97:24:a1:1a:49:10:5f:37:62:dd:37:44:00:c9:
                    13:d0:b4:43:a2:fd:5a:bb:c8:02:de:28:9a:9d:38:
                    06:5f:8a:27:99:e6:29:4c:09:82:96:c2:28:1c:f5:
                    e9:72:4e:04:84:b7:c1:ed:c9:11:6c:dd:01:1c:16:
                    a0:4e:25:cd:4d:17:38:f6:ee:75:68:35:8a:85:91:
                    9a:b3:ec:83:9e:d0:4d:5b:21:66:b4:a9:66:d2:ac:
                    3e:45:cf:30:68:fa:fc:c3:0c:78:f7:b3:ba:11:a5:
                    8e:05:e6:0e:11:53:52:d9:47:20:f2:a4:b5:81:20:
                    c7:a6:97:d4:42:df:d6:34:95:ae:f3:56:1f:8d:a2:
                    a2:68:37:be:61:e5:5f:cd:5b:ac:fb:da:34:fa:97:
                    bb:5b:80:b5:6c:22:c7:17:b9:0e:b4:7e:63:67:85:
                    0c:0b:66:00:65:14:c6:20:03:ec:f9:c2:cd:d1:d4:
                    44:3a:89:36:ec:0b:21:79:60:1a:6c:1a:c9:da:3f:
                    95:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:40:14:16:F2:99:AD:70:94:D0:29:28:FC:7E:A0:5A:24:83:FF:83
            X509v3 Authority Key Identifier:
                keyid:BB:7D:41:1A:2A:24:73:5A:FF:8D:04:70:6D:C7:5F:BE:58:88:8F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57TwXRQpKQZuFkjzW2UgfzQrDfisv9JdK7qjtgqzuJSz/0/BB7D411A2A24735AFF8D04706DC75FBE58888F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB7D411A2A24735AFF8D04706DC75FBE58888F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57TwXRQpKQZuFkjzW2UgfzQrDfisv9JdK7qjtgqzuJSz/0/3133312e3232312e3132382e302f32322d3232203d3e20323634343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:0b:c6:21:63:8a:8b:9a:62:cd:a0:96:8a:c4:f9:b2:f7:a8:
         63:d6:5a:2f:55:a8:58:27:1e:30:d4:99:44:30:9d:ef:34:8d:
         1d:4e:e1:45:2a:82:f6:f2:05:f1:e1:8b:ad:0a:17:b4:59:52:
         9c:42:5e:b9:4a:6c:5c:5e:8a:97:e8:5e:95:4b:09:f4:17:3a:
         8d:f2:83:23:57:a7:a3:dd:83:76:cb:d2:6c:e2:06:10:fd:d5:
         80:6c:24:10:0c:ce:b3:11:f6:91:df:89:74:b9:b6:f7:57:1f:
         fb:a1:ad:08:aa:f3:0d:ad:8b:97:63:69:ae:e1:b9:ee:22:a2:
         a5:c8:45:a7:ee:64:de:07:fe:bf:07:5b:da:90:71:4d:ff:09:
         53:5f:fd:8a:3f:84:44:5f:eb:2a:3c:50:b9:60:1c:e7:02:69:
         af:bb:23:98:37:01:6f:8f:93:d0:64:a2:aa:05:77:df:72:20:
         aa:9c:ed:dc:8d:0e:3e:ea:a3:a8:77:e5:bd:b1:ea:e0:1e:46:
         50:52:24:92:c6:7b:84:e9:57:cb:09:57:ba:08:03:fb:ca:4a:
         ed:0e:88:68:f0:74:2c:a9:30:5e:04:38:ac:d9:9d:8a:90:c2:
         16:59:f4:8f:0c:9c:45:f7:fc:68:80:04:f9:36:3f:54:f5:ef:
         c8:08:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org