Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3232312e35322e302f32322d3234203d3e20323632393037.roa
File:                     3133312e3232312e35322e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          iHn1fkgLD9pdTr5GkQoGaeyZkSsoAtn0oTy7brbasto=
Subject key identifier:   12:26:30:FB:E3:4C:A5:35:56:AA:71:0B:18:F0:40:F3:CC:17:5A:19
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       1C5BE251F5DB68606E98B49E2740A2C774086348
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3232312e35322e302f32322d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:18 +0000
ROA not before:           Sat 03 Feb 2024 12:48:18 +0000
ROA not after:            Sat 01 Feb 2025 12:53:18 +0000
asID:                     262907
IP address blocks:        131.221.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5b:e2:51:f5:db:68:60:6e:98:b4:9e:27:40:a2:c7:74:08:63:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:18 2024 GMT
            Not After : Feb  1 12:53:18 2025 GMT
        Subject: CN=122630FBE34CA53556AA710B18F040F3CC175A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:26:09:91:c8:bd:e8:91:7a:83:6e:75:3e:
                    6a:5e:5b:f6:e0:0a:94:95:a6:ee:aa:21:2c:13:88:
                    e5:dc:21:fb:2f:85:30:a8:b4:c6:27:ce:8a:38:c2:
                    06:af:71:4c:a3:76:fa:9a:88:cb:b2:57:61:5b:26:
                    29:c3:94:c2:74:a9:7a:7f:ca:83:ae:8e:49:76:af:
                    71:48:10:64:1e:a4:72:0f:01:0f:fc:33:7b:50:7b:
                    a4:86:d7:93:1d:91:0d:26:67:e1:0d:61:d0:05:a5:
                    45:17:8e:6a:8a:83:29:c9:82:33:c6:fe:28:af:ec:
                    c1:4c:b9:a7:08:b1:48:e2:bd:ec:21:6d:7f:b8:55:
                    94:f8:8e:0d:df:89:be:d0:c0:61:fc:b7:0b:fb:05:
                    ca:4f:64:d3:c0:bd:a3:d0:7c:e2:8d:a6:b9:71:e1:
                    4c:0b:d3:52:ec:6f:00:43:31:b1:25:ce:61:3a:7d:
                    a5:2d:4e:5b:ae:ff:8a:75:6f:4d:c6:4a:8f:f5:f6:
                    c0:1e:d0:87:44:db:a2:27:08:ec:a1:c3:91:b7:5c:
                    16:ca:a9:ea:32:e8:41:e8:cb:6b:9a:1e:b9:83:1c:
                    02:eb:e6:a6:f9:45:cc:31:b3:fc:e8:ff:71:48:e3:
                    71:80:c1:ed:2e:8a:c9:3e:8a:1a:27:99:01:58:1c:
                    80:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:30:FB:E3:4C:A5:35:56:AA:71:0B:18:F0:40:F3:CC:17:5A:19
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3232312e35322e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:31:fa:eb:f0:0e:b4:f6:27:5e:aa:99:f9:2d:7c:9d:a1:
         47:41:86:16:99:b8:cd:f7:90:01:4c:b5:c7:13:35:1a:54:c4:
         a1:d9:2b:68:89:14:7e:80:25:39:01:17:2e:69:c4:bb:dc:b2:
         6c:2e:0c:63:19:74:73:1f:2b:f6:68:2c:e1:ff:dd:40:45:a6:
         1f:48:a1:06:16:2f:21:fa:8b:4e:dc:36:60:fa:25:76:0f:b0:
         46:98:13:8c:06:9e:98:00:57:6f:10:b0:38:47:c9:85:2b:4a:
         0e:19:d9:c4:85:fc:1e:ac:c1:4e:3a:65:cb:b6:58:60:6a:27:
         93:70:7d:df:8d:ec:1f:d4:66:12:e9:b2:7e:7e:9a:5d:a4:b0:
         f4:ea:f8:6a:77:ca:1b:5a:b5:92:a4:75:82:ff:c8:b2:1c:0c:
         0a:79:7b:46:7f:df:43:42:3a:0b:e6:16:e4:02:41:8d:e5:2d:
         8d:09:83:0e:fe:ea:76:90:18:75:a3:90:2b:52:0f:f4:bc:90:
         6e:e8:bf:3c:0e:7f:df:80:1c:3c:d9:74:5d:dd:00:14:56:1c:
         b7:02:7f:e5:70:8e:eb:8b:9f:96:22:be:31:b3:8f:c4:22:e9:
         72:b5:89:a3:cb:78:de:68:e3:54:e5:35:48:6d:13:ac:37:1e:
         02:2a:d5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org