Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57TwXRQpKQZuFkjzW2UgfzQrDfisv9JdK7qjtgqzuJSz/0/3133312e3232312e3133302e302f32332d3233203d3e20323634343137.roa
File:                     3133312e3232312e3133302e302f32332d3233203d3e20323634343137.roa (raw, json)
Hash identifier:          EpLgszg/XBwyyNQORcqrlvBrADsb2gCrxu5IYfeOyEo=
Subject key identifier:   27:D6:21:0D:1C:F4:35:17:6C:E8:EB:47:A6:34:D4:7E:78:67:80:BE
Certificate issuer:       /CN=BB7D411A2A24735AFF8D04706DC75FBE58888F9C
Certificate serial:       11D971C567536A02DB59A2A3A47EA6B7F10A1203
Authority key identifier: BB:7D:41:1A:2A:24:73:5A:FF:8D:04:70:6D:C7:5F:BE:58:88:8F:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB7D411A2A24735AFF8D04706DC75FBE58888F9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57TwXRQpKQZuFkjzW2UgfzQrDfisv9JdK7qjtgqzuJSz/0/3133312e3232312e3133302e302f32332d3233203d3e20323634343137.roa
Signing time:             Thu 08 Sep 2022 17:08:57 +0000
ROA not before:           Thu 08 Sep 2022 17:03:57 +0000
ROA not after:            Thu 07 Sep 2023 17:08:57 +0000
asID:                     264417
IP address blocks:        131.221.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d9:71:c5:67:53:6a:02:db:59:a2:a3:a4:7e:a6:b7:f1:0a:12:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB7D411A2A24735AFF8D04706DC75FBE58888F9C
        Validity
            Not Before: Sep  8 17:03:57 2022 GMT
            Not After : Sep  7 17:08:57 2023 GMT
        Subject: CN=27D6210D1CF435176CE8EB47A634D47E786780BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:ad:7a:0e:9a:37:f2:93:e5:07:25:4f:fe:
                    27:6a:50:12:3a:04:31:06:8e:d4:19:dc:c6:e0:ff:
                    a0:89:1a:59:83:24:ae:31:14:b8:12:ff:31:65:6a:
                    2e:d7:64:e5:ee:50:af:c0:97:59:5b:1d:3e:45:44:
                    3f:be:ec:52:7f:ef:21:6a:d2:e2:8a:6c:37:67:82:
                    19:f2:e0:36:f9:15:8c:c4:64:64:b3:ca:09:fb:25:
                    88:2d:96:57:48:6e:60:bf:3f:0f:20:31:e8:f7:d8:
                    aa:e3:c8:4d:16:c0:ae:49:a2:3a:87:60:a9:e0:1d:
                    41:bf:83:c2:a6:64:44:f2:3c:cf:ec:38:65:14:b9:
                    eb:e7:e3:6f:39:d3:b7:e8:c4:47:5a:c2:95:0f:6c:
                    cb:15:05:36:59:27:02:b7:9f:9c:01:26:21:75:bc:
                    11:41:9a:e6:79:38:5e:53:f2:e4:b2:c5:1a:38:9e:
                    47:eb:e3:f5:d5:95:d6:ca:20:9c:dc:7e:08:2d:e9:
                    6f:3c:26:04:89:4f:3f:2f:cf:fd:c1:9e:37:82:81:
                    3a:8d:fa:2b:a0:1e:17:15:12:f0:ef:7b:61:03:90:
                    82:8e:c2:68:32:eb:a4:01:b6:03:d0:2a:66:0d:bc:
                    0e:69:25:87:6c:80:b2:e5:ac:c7:fe:61:3c:83:e1:
                    e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D6:21:0D:1C:F4:35:17:6C:E8:EB:47:A6:34:D4:7E:78:67:80:BE
            X509v3 Authority Key Identifier:
                keyid:BB:7D:41:1A:2A:24:73:5A:FF:8D:04:70:6D:C7:5F:BE:58:88:8F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57TwXRQpKQZuFkjzW2UgfzQrDfisv9JdK7qjtgqzuJSz/0/BB7D411A2A24735AFF8D04706DC75FBE58888F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB7D411A2A24735AFF8D04706DC75FBE58888F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57TwXRQpKQZuFkjzW2UgfzQrDfisv9JdK7qjtgqzuJSz/0/3133312e3232312e3133302e302f32332d3233203d3e20323634343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:30:55:ad:1c:02:7f:97:1c:29:c2:9b:7f:a2:79:80:8b:78:
         0c:9d:67:2b:da:b5:d6:ce:be:a1:21:09:41:90:97:e3:eb:08:
         ff:5c:56:2a:7a:a9:4f:f8:50:21:ac:04:97:28:bb:5a:4e:d6:
         73:73:44:42:db:53:5a:15:39:4d:7b:ec:db:ca:a8:6c:81:db:
         11:2e:70:51:d1:78:c3:dc:a2:41:92:17:1b:04:c9:0f:38:88:
         e0:68:31:30:16:37:a5:e2:3e:18:96:12:90:e1:78:2a:fd:74:
         4c:b9:c3:0a:43:f9:31:bb:1b:36:94:da:40:3f:11:c2:75:a6:
         76:fd:8b:f8:a2:ce:d1:11:3e:2a:f7:f5:50:a3:08:de:6a:d2:
         52:c0:77:f3:86:1b:42:c3:58:19:c1:bf:5e:6e:5f:a2:ed:6c:
         a7:c1:04:37:d2:f6:09:4e:bc:35:a3:7c:fb:d6:26:55:c3:b1:
         80:38:3b:8e:1e:e8:ec:8e:c2:d9:dd:89:90:8b:7a:14:a8:cf:
         b2:2e:83:1e:e3:86:bb:c6:82:80:e5:60:2d:10:ea:06:a1:bf:
         6c:d9:ff:c7:c3:54:e5:37:ca:66:ce:cb:63:3c:47:22:15:f5:
         22:81:7f:fd:51:8e:66:79:98:5e:1c:90:44:88:8b:bb:d9:dd:
         63:29:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org