Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa
File:                     3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa (raw, json)
Hash identifier:          4TmFmQvtFUSTbSKu7jgtrUvqgkDXiR5pHk7BKDccyWQ=
Subject key identifier:   1A:26:28:5A:BC:37:F9:2A:F1:E9:46:FD:5C:36:B2:0B:5D:B7:1D:C8
Certificate issuer:       /CN=35EEC59508A5401DDACC50AEE85763BE780448EC
Certificate serial:       71177411EC2B44E8BE7AF754A0604E366C7466EE
Authority key identifier: 35:EE:C5:95:08:A5:40:1D:DA:CC:50:AE:E8:57:63:BE:78:04:48:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35EEC59508A5401DDACC50AEE85763BE780448EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa
Signing time:             Sat 01 Jul 2023 10:52:29 +0000
ROA not before:           Sat 01 Jul 2023 10:47:29 +0000
ROA not after:            Sat 29 Jun 2024 10:52:29 +0000
asID:                     264415
IP address blocks:        131.221.20.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:17:74:11:ec:2b:44:e8:be:7a:f7:54:a0:60:4e:36:6c:74:66:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35EEC59508A5401DDACC50AEE85763BE780448EC
        Validity
            Not Before: Jul  1 10:47:29 2023 GMT
            Not After : Jun 29 10:52:29 2024 GMT
        Subject: CN=1A26285ABC37F92AF1E946FD5C36B20B5DB71DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:ed:55:bf:5c:24:55:73:ff:9c:f9:66:55:
                    ff:4b:d3:9d:f1:91:4b:90:04:d2:f7:44:24:d2:93:
                    65:bc:19:1b:4b:ce:40:8b:d9:7a:ab:1a:ba:01:58:
                    1a:ec:53:e7:37:39:d5:a5:3a:c5:18:6d:13:35:5f:
                    aa:6a:3c:73:ed:cf:cc:8d:66:eb:64:c0:bf:84:e7:
                    4f:96:70:77:d2:7e:9d:e0:40:35:b0:98:8f:05:c3:
                    dd:7d:8a:59:78:e0:1c:cb:b9:8c:9b:53:0b:a0:1b:
                    2e:b5:d8:a3:fe:2d:28:50:a8:0e:fb:db:6c:2b:44:
                    d4:90:f5:3d:c8:ad:a7:c9:36:bf:71:c2:66:0c:56:
                    96:56:4a:22:65:0b:eb:7c:7a:cc:45:b6:c9:30:ec:
                    ab:f0:d8:43:7d:ab:13:5d:cc:e2:bf:86:ef:53:12:
                    c6:c6:4a:c7:89:6b:e6:92:d8:1a:ef:cd:d9:d6:93:
                    5a:ec:5e:88:05:3e:03:e8:20:7c:dc:b6:2c:a1:23:
                    c0:91:17:d9:d4:74:d1:29:a6:8d:86:5b:d6:c2:66:
                    22:46:dd:2a:7b:2b:3c:73:4a:cc:3f:65:96:57:45:
                    89:c0:57:01:a8:2c:2a:88:d0:73:63:a9:33:df:79:
                    b7:7c:bc:fc:67:32:58:34:48:bf:4c:c1:c3:6d:db:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:26:28:5A:BC:37:F9:2A:F1:E9:46:FD:5C:36:B2:0B:5D:B7:1D:C8
            X509v3 Authority Key Identifier:
                keyid:35:EE:C5:95:08:A5:40:1D:DA:CC:50:AE:E8:57:63:BE:78:04:48:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/35EEC59508A5401DDACC50AEE85763BE780448EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35EEC59508A5401DDACC50AEE85763BE780448EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:a7:10:bf:11:29:f8:33:f2:6b:7a:af:86:de:f5:ec:3b:07:
         3a:85:24:ed:80:bf:52:33:61:cf:6c:86:74:68:e6:f3:7e:68:
         06:bd:7e:d0:25:9b:10:c5:14:1b:01:19:73:1a:0e:58:96:25:
         ec:1e:f7:1e:94:38:5e:96:e6:9f:a4:7d:6e:33:64:89:47:10:
         08:19:79:bb:69:80:1e:bb:a4:a8:b0:e7:1c:7b:19:63:fc:00:
         87:f3:df:08:4b:a8:15:bf:e2:43:92:9a:df:59:6e:62:a5:48:
         6f:70:c6:f6:f8:ab:5d:5c:29:5f:0b:eb:88:6c:5e:24:40:e9:
         70:38:4d:47:5f:f1:50:ad:f4:d2:a3:37:0b:99:44:89:3c:f4:
         70:ef:fa:59:48:0d:94:17:e8:fe:e0:65:9c:68:fa:8f:c3:e6:
         1a:1a:a5:c3:10:7f:9b:0a:b7:08:6b:6b:e2:f9:88:e1:09:1c:
         00:e1:f6:a8:18:43:5f:f5:0a:2c:1c:27:0f:f3:88:ab:39:0f:
         e7:08:3a:ea:d5:39:20:24:68:ca:0d:33:f0:08:f4:b3:c7:29:
         79:93:b5:5d:bc:dc:10:78:dc:47:e5:20:df:a0:7d:19:c3:b8:
         a6:e9:c4:4b:ab:fd:d6:15:91:a8:02:ed:a1:79:62:d7:17:0d:
         83:27:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org