Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5G7bbsLf2KKF3YqtCSEtGdfBMwZyBH8MX1NiGSKfbPj1/0/3133312e3232312e3235322e302f32322d3234203d3e203532393030.roa
File:                     3133312e3232312e3235322e302f32322d3234203d3e203532393030.roa (raw, json)
Hash identifier:          20iSk8pa2RlTPp0dVXMzH8yHuFgB9TA1ispATUpWg0o=
Subject key identifier:   04:F6:8C:E1:AB:91:E3:91:21:ED:40:65:BB:1D:4E:97:10:35:1C:C6
Certificate issuer:       /CN=94B74DE4C2A175B5C0C534858586F16D8BB4851D
Certificate serial:       07C7A5F958F61C729CA45B86A57FE1582B402976
Authority key identifier: 94:B7:4D:E4:C2:A1:75:B5:C0:C5:34:85:85:86:F1:6D:8B:B4:85:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94B74DE4C2A175B5C0C534858586F16D8BB4851D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5G7bbsLf2KKF3YqtCSEtGdfBMwZyBH8MX1NiGSKfbPj1/0/3133312e3232312e3235322e302f32322d3234203d3e203532393030.roa
Signing time:             Thu 22 Feb 2024 16:57:05 +0000
ROA not before:           Thu 22 Feb 2024 16:52:05 +0000
ROA not after:            Thu 20 Feb 2025 16:57:05 +0000
asID:                     52900
IP address blocks:        131.221.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c7:a5:f9:58:f6:1c:72:9c:a4:5b:86:a5:7f:e1:58:2b:40:29:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B74DE4C2A175B5C0C534858586F16D8BB4851D
        Validity
            Not Before: Feb 22 16:52:05 2024 GMT
            Not After : Feb 20 16:57:05 2025 GMT
        Subject: CN=04F68CE1AB91E39121ED4065BB1D4E9710351CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b7:3c:e9:a6:79:0a:a9:c4:89:8f:5d:19:c6:
                    db:8d:02:e4:cf:b2:bf:19:1d:4e:87:3b:74:5c:82:
                    6f:b0:a2:33:21:75:c5:94:ee:f3:4a:c8:02:a4:69:
                    d2:35:01:f5:9b:ab:a7:93:95:8c:75:c2:2b:30:58:
                    f7:a2:c4:98:90:3a:f5:98:3b:b4:da:e2:1f:62:5d:
                    b1:7e:b7:c0:bb:24:45:e8:c3:3d:4a:a7:c5:60:00:
                    d6:9a:29:99:f4:ef:40:e4:08:df:74:2c:52:f0:81:
                    c6:73:18:13:ef:d1:89:95:69:45:ca:f0:10:e6:49:
                    4f:99:c4:9e:2f:3b:06:13:60:f0:21:1d:6b:d7:7e:
                    f6:22:de:17:5b:0e:f7:5d:cb:a2:75:34:5d:cc:57:
                    9f:e8:60:67:9a:f6:b8:f9:28:0d:c2:bf:20:a6:50:
                    ba:f8:86:be:45:07:38:90:7d:ff:e2:18:8d:ee:d8:
                    85:fd:ee:28:6a:25:d8:0a:26:ef:c2:ce:2f:57:ba:
                    a6:6a:fe:d2:2f:39:f0:f3:92:10:8b:70:13:b1:46:
                    be:71:ad:0a:a9:ff:58:c7:6f:d1:d7:fe:55:87:59:
                    1a:98:8f:d3:18:5b:d4:8f:9b:e9:58:30:41:6b:f3:
                    5d:87:96:89:9a:68:6c:80:3c:d6:a5:5c:68:a6:4f:
                    34:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F6:8C:E1:AB:91:E3:91:21:ED:40:65:BB:1D:4E:97:10:35:1C:C6
            X509v3 Authority Key Identifier:
                keyid:94:B7:4D:E4:C2:A1:75:B5:C0:C5:34:85:85:86:F1:6D:8B:B4:85:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5G7bbsLf2KKF3YqtCSEtGdfBMwZyBH8MX1NiGSKfbPj1/0/94B74DE4C2A175B5C0C534858586F16D8BB4851D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94B74DE4C2A175B5C0C534858586F16D8BB4851D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5G7bbsLf2KKF3YqtCSEtGdfBMwZyBH8MX1NiGSKfbPj1/0/3133312e3232312e3235322e302f32322d3234203d3e203532393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:a4:72:04:00:3a:f1:e7:71:60:fb:5b:30:a0:40:97:c1:a8:
         95:bf:10:6c:b2:a4:e7:eb:bc:a0:29:8c:9d:f3:68:4a:a9:a7:
         c0:11:be:7d:64:73:c1:eb:d9:d8:17:89:cd:3c:f7:50:11:d6:
         60:18:29:92:d6:fb:4a:95:9d:58:17:c7:82:26:e4:13:55:d1:
         93:fd:1a:0e:2e:1c:88:63:f9:33:33:98:3d:90:2f:ec:1c:df:
         ca:e4:27:ba:f2:70:58:3a:c2:8a:5e:82:74:6f:d1:85:55:09:
         89:7b:a3:6e:03:0e:c3:1c:42:c7:78:bd:06:5d:3b:d4:10:4a:
         43:9e:18:1f:64:4c:ce:01:55:86:e9:79:0d:3e:b6:50:5d:b5:
         c7:57:73:e1:56:11:fc:15:3d:4e:61:ad:78:c5:c3:db:93:56:
         53:69:d5:12:f7:2a:ea:b3:16:28:7b:6d:b8:f2:41:75:d4:87:
         22:f9:81:b9:b9:90:1f:05:32:31:9e:2b:c5:ca:62:28:db:02:
         66:ee:47:d8:90:6e:d9:38:c8:aa:c3:51:cf:c5:c5:a1:32:02:
         00:51:0e:00:17:80:3e:97:c9:52:9f:5f:cd:20:3b:dd:bc:6c:
         5a:20:c0:78:20:ee:dc:ce:d6:c2:93:62:b9:8b:9a:25:71:17:
         15:56:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org