Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/3133312e3136312e3136342e302f32322d3234203d3e203532393830.roa
File:                     3133312e3136312e3136342e302f32322d3234203d3e203532393830.roa (raw, json)
Hash identifier:          1Ip+pW5XiySlFnXofsSKg2NTElkC7oUyirX9K3DTfkc=
Subject key identifier:   3B:A9:31:B8:DB:30:EF:AA:C8:7C:0D:C3:FE:4D:D5:9B:41:4E:73:59
Certificate issuer:       /CN=D2D2D71D988525073935916EEBCA45B03AB78E14
Certificate serial:       1A2BF69F12F2CD2B437C91388EAB90BB4B6E2993
Authority key identifier: D2:D2:D7:1D:98:85:25:07:39:35:91:6E:EB:CA:45:B0:3A:B7:8E:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D2D71D988525073935916EEBCA45B03AB78E14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/3133312e3136312e3136342e302f32322d3234203d3e203532393830.roa
Signing time:             Mon 09 Jan 2023 18:00:00 +0000
ROA not before:           Mon 09 Jan 2023 17:55:00 +0000
ROA not after:            Tue 09 Jan 2024 18:00:00 +0000
asID:                     52980
IP address blocks:        131.161.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2b:f6:9f:12:f2:cd:2b:43:7c:91:38:8e:ab:90:bb:4b:6e:29:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D2D71D988525073935916EEBCA45B03AB78E14
        Validity
            Not Before: Jan  9 17:55:00 2023 GMT
            Not After : Jan  9 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:46:3a:62:ba:e9:e5:44:de:a3:f8:90:ef:
                    cc:54:20:42:04:39:82:e0:fa:bd:62:f9:60:dd:f7:
                    6d:04:0c:c1:db:82:ff:20:d1:0a:39:41:21:06:cb:
                    fd:1e:e6:d9:39:13:e6:47:fe:90:d4:1b:c4:fd:be:
                    e5:19:4e:cf:3b:60:e9:4e:4b:98:7b:e2:1b:31:e1:
                    4d:c6:ee:af:17:e0:7e:36:05:40:40:41:16:07:1c:
                    36:99:7e:24:25:d8:42:8f:3c:ec:e4:5e:ff:0d:de:
                    99:31:fa:98:6a:2e:a0:a3:5d:cd:5a:e9:32:90:17:
                    37:23:e3:45:4a:59:ba:0d:94:f9:12:43:bc:b7:8d:
                    7a:3b:c0:67:ec:f2:1f:72:8d:56:6e:1d:8a:e0:6c:
                    ca:f8:db:a6:4e:50:c8:e9:40:85:4d:e3:e1:6b:6f:
                    f1:c3:82:0e:b6:31:b1:a1:69:3a:4e:f7:2b:88:3d:
                    62:4e:3d:cb:3e:4b:c5:7b:63:ed:e4:2c:8d:50:b6:
                    12:41:17:28:28:b0:35:b0:96:23:89:1f:6a:8b:0d:
                    41:80:c3:a3:e7:9f:8f:82:0d:e1:c6:04:cd:07:7a:
                    c2:c7:18:0f:f5:54:a7:84:2a:8e:e8:1b:3a:f5:ef:
                    f6:7f:4f:51:c0:ec:b9:3c:9e:ff:fa:14:fe:12:e1:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A9:31:B8:DB:30:EF:AA:C8:7C:0D:C3:FE:4D:D5:9B:41:4E:73:59
            X509v3 Authority Key Identifier:
                keyid:D2:D2:D7:1D:98:85:25:07:39:35:91:6E:EB:CA:45:B0:3A:B7:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/D2D2D71D988525073935916EEBCA45B03AB78E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D2D71D988525073935916EEBCA45B03AB78E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/3133312e3136312e3136342e302f32322d3234203d3e203532393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:3b:56:89:3a:e4:d2:f2:4c:4d:76:7b:15:2f:9a:1e:b3:c3:
         28:0e:ca:f8:8b:b8:2a:ff:5a:b2:af:ea:99:e2:27:0e:bf:90:
         f9:39:e3:a3:a4:69:a9:b8:bc:4d:3d:fe:ab:e3:40:b7:3d:ba:
         b2:b2:d1:59:d9:7b:a9:83:37:50:16:39:b3:8a:14:94:ac:cd:
         3f:61:c7:02:89:4e:ad:d7:68:38:d7:66:d7:76:bb:64:da:77:
         a8:f2:57:35:27:72:42:36:28:b4:0d:8b:c9:10:b3:0e:62:a7:
         13:72:f3:86:08:b1:88:d2:93:36:e0:70:67:0e:3b:f3:74:e7:
         bc:3c:47:04:ea:17:df:cf:b4:52:5a:1b:da:44:4e:3e:a9:07:
         fb:fd:84:c3:6b:0a:35:f6:55:31:e1:7f:71:2e:d9:d3:a4:a0:
         92:db:a9:62:70:0a:7f:81:8d:33:5e:3d:ce:3e:35:db:89:6d:
         27:5b:c0:58:9f:78:d9:66:70:c7:2c:5f:f9:29:1b:15:56:f6:
         44:8d:08:ad:60:0b:d8:a3:04:b1:53:c9:18:6c:51:41:f6:c8:
         91:bd:b5:32:9d:31:98:48:f1:11:18:76:4d:55:d7:b6:c4:30:
         54:29:ea:b3:54:dd:7d:00:55:0c:90:be:3b:5b:4d:d5:41:b3:
         6f:c1:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org