Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/3133312e3232312e32302e302f32322d3234203d3e20323634343135.roa
File:                     3133312e3232312e32302e302f32322d3234203d3e20323634343135.roa (raw, json)
Hash identifier:          7fOO9lORmusz43QhyFFtEOMq/Eqpx4knUDxb2xn98Sc=
Subject key identifier:   CB:9B:04:E1:72:0F:38:C7:37:A6:BC:C1:12:83:17:14:98:15:60:6D
Certificate issuer:       /CN=932FD06E95E9079EDF40C5BB219C0F5BBA3791B3
Certificate serial:       7963610D59DA3F4A34138D0AB24910D4C9D2A94E
Authority key identifier: 93:2F:D0:6E:95:E9:07:9E:DF:40:C5:BB:21:9C:0F:5B:BA:37:91:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/932FD06E95E9079EDF40C5BB219C0F5BBA3791B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/3133312e3232312e32302e302f32322d3234203d3e20323634343135.roa
Signing time:             Sun 04 Sep 2022 16:00:00 +0000
ROA not before:           Sun 04 Sep 2022 15:55:00 +0000
ROA not after:            Mon 04 Sep 2023 16:00:00 +0000
asID:                     264415
IP address blocks:        131.221.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:63:61:0d:59:da:3f:4a:34:13:8d:0a:b2:49:10:d4:c9:d2:a9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932FD06E95E9079EDF40C5BB219C0F5BBA3791B3
        Validity
            Not Before: Sep  4 15:55:00 2022 GMT
            Not After : Sep  4 16:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:78:98:51:1a:29:dd:2b:9e:d4:1c:e2:06:
                    60:67:db:b7:e1:2d:13:8e:ef:e8:d3:c6:c4:34:ce:
                    cc:e5:a5:af:73:bc:1c:78:7b:ab:a8:78:20:c4:16:
                    a3:a3:d8:fa:e3:09:78:3c:7d:cb:12:52:91:a9:46:
                    ab:05:ee:24:09:7f:e5:e6:05:ef:ff:b8:20:e9:1c:
                    8e:32:7f:33:ad:aa:60:9a:1c:be:cb:f0:3f:46:70:
                    64:94:2b:9b:ec:08:cc:d0:59:ea:d3:0c:29:14:6a:
                    8a:a3:b6:5c:6f:9c:81:44:db:29:60:89:e2:85:6e:
                    6e:52:29:e4:5f:d5:00:64:8f:28:2e:85:28:f6:f3:
                    d4:38:d1:c9:84:9a:de:d8:45:89:75:14:7b:3f:d7:
                    62:36:93:c7:91:3f:0e:f6:85:8c:81:1a:91:d3:3d:
                    f9:77:61:ad:7b:2e:f3:bc:e2:98:8d:a8:10:f8:7d:
                    ea:6a:8c:30:ed:7b:3d:12:00:9d:ff:b7:c5:be:ab:
                    07:79:f8:ed:f6:d5:97:c5:33:1e:f6:0b:6c:46:41:
                    fa:a0:f1:d1:15:a9:02:73:58:4f:f8:cb:52:4c:c6:
                    c5:f8:68:00:86:ec:9d:cc:13:d4:95:59:f8:04:68:
                    76:6c:f2:13:a3:4a:35:c2:5b:f6:be:ba:98:4a:d1:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9B:04:E1:72:0F:38:C7:37:A6:BC:C1:12:83:17:14:98:15:60:6D
            X509v3 Authority Key Identifier:
                keyid:93:2F:D0:6E:95:E9:07:9E:DF:40:C5:BB:21:9C:0F:5B:BA:37:91:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/932FD06E95E9079EDF40C5BB219C0F5BBA3791B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/932FD06E95E9079EDF40C5BB219C0F5BBA3791B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/3133312e3232312e32302e302f32322d3234203d3e20323634343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:62:f2:32:5d:75:33:11:c4:0b:47:61:d2:19:d1:d7:e7:b9:
         a6:c6:48:d7:46:09:ef:5b:70:0a:c1:5c:c7:23:64:1a:44:7e:
         10:aa:6b:1b:71:3f:5e:2e:84:0b:58:0f:b1:94:33:f8:d9:78:
         a3:ef:a6:dc:ba:5c:69:c6:88:3b:5d:f0:9e:00:e3:f0:0e:1d:
         7a:b2:61:d2:b4:74:eb:34:20:1c:58:42:09:29:28:ef:22:60:
         79:ba:1a:b7:e2:5a:d1:9e:7d:10:6b:61:7d:63:c7:1e:c6:fb:
         3a:cb:a0:52:1d:9b:f3:9a:4c:c0:b1:f7:a0:8d:25:0a:4b:37:
         9b:b9:33:2d:d8:f3:d2:3f:4c:1b:50:1a:5d:0d:ff:6e:61:a1:
         da:21:6f:ac:80:ee:00:cc:42:87:f6:ab:aa:82:7a:94:22:5c:
         32:19:fd:ad:54:27:e1:1b:4d:a5:14:de:a7:d8:6d:a7:a2:66:
         d6:2b:88:b7:1d:43:1d:dd:59:a2:5e:8f:54:12:1e:29:2c:ff:
         ac:28:ac:81:c3:71:a8:20:b9:13:8f:a7:45:c5:b9:ee:8d:48:
         fc:e4:fd:7a:82:5a:ba:a7:93:f6:65:60:13:0e:a5:cd:b8:d2:
         7a:49:14:92:b5:69:ca:ef:5b:6a:77:b0:45:1d:90:bd:24:97:
         5f:04:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org