Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa
File:                     3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa (raw, json)
Hash identifier:          JaPbQjZHODPwi9cmkwfuMQQ51gRhu8MDhoWUUsoWiY4=
Subject key identifier:   90:90:13:C0:82:B5:24:0C:64:71:9D:72:1A:95:CA:FB:92:84:3D:23
Certificate issuer:       /CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
Certificate serial:       44F221C9E7F29EE9978E501F146AF525454C0C51
Authority key identifier: 5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa
Signing time:             Wed 10 Apr 2024 13:48:46 +0000
ROA not before:           Wed 10 Apr 2024 13:43:46 +0000
ROA not after:            Wed 09 Apr 2025 13:48:46 +0000
asID:                     264434
IP address blocks:        131.221.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f2:21:c9:e7:f2:9e:e9:97:8e:50:1f:14:6a:f5:25:45:4c:0c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
        Validity
            Not Before: Apr 10 13:43:46 2024 GMT
            Not After : Apr  9 13:48:46 2025 GMT
        Subject: CN=909013C082B5240C64719D721A95CAFB92843D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6e:f4:87:02:2c:21:11:6b:ab:a4:f8:8a:9a:
                    60:50:95:a6:8e:5d:99:7a:07:27:02:50:fb:54:b4:
                    94:51:46:a3:6a:4f:99:26:db:5b:ae:f2:49:7b:4e:
                    71:47:43:76:38:96:b8:75:ee:9c:6c:f1:09:41:96:
                    35:72:53:f8:71:cc:49:d3:a7:8a:cd:bc:50:75:8e:
                    44:f9:98:cf:05:ff:b5:44:90:8f:74:7c:06:1d:14:
                    98:ec:d8:bc:27:64:53:30:8e:a2:52:cd:99:10:b7:
                    54:48:c3:05:72:bb:a5:b5:81:df:b6:fd:99:61:69:
                    6c:62:12:e4:93:5f:3d:31:49:d0:90:96:51:57:a1:
                    2d:3e:fc:ab:c5:54:4c:7e:9a:a4:0b:bd:60:97:c1:
                    a0:84:78:d7:b7:9e:c0:10:1e:4d:1b:5c:6a:a0:95:
                    8a:f3:b9:96:d3:4a:1b:08:33:82:a3:51:40:cf:ee:
                    cc:41:13:03:80:6d:3d:1d:71:41:27:10:2a:70:60:
                    0f:71:92:44:28:69:dc:28:33:d7:ad:1f:17:32:16:
                    89:a4:62:b3:3c:65:7c:d0:b8:f8:ef:72:cd:74:23:
                    7e:e0:a3:52:8c:3e:f7:5f:d8:9c:e6:aa:7b:b1:4d:
                    91:e7:95:00:e2:30:7e:6c:5a:1b:f5:94:b5:1b:05:
                    25:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:90:13:C0:82:B5:24:0C:64:71:9D:72:1A:95:CA:FB:92:84:3D:23
            X509v3 Authority Key Identifier:
                keyid:5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:56:16:f5:b4:f1:1c:86:4e:41:22:93:a2:81:47:87:6b:bc:
         55:84:05:f1:5f:e9:1c:5a:99:8e:5a:48:b7:83:9a:3e:61:af:
         92:6d:cc:c4:1a:e9:58:43:be:09:67:76:ab:22:13:94:31:0a:
         5f:09:78:b2:9a:c3:1a:5a:92:8c:d2:df:d8:34:c6:5a:70:ad:
         e5:b8:f7:cf:8e:af:f9:16:35:6c:5a:fb:c8:d7:16:c0:1e:b4:
         aa:ae:35:c4:23:93:0d:34:6f:f5:2f:e9:79:24:9c:d5:af:fa:
         58:f2:58:21:b1:39:c5:e9:40:3c:65:da:63:c6:42:05:9e:25:
         5f:7b:90:a4:95:13:65:f2:75:64:da:f8:45:d6:0c:32:c1:cc:
         fa:72:85:13:43:26:ec:07:b4:57:47:46:49:e0:32:e7:f3:ab:
         9a:7a:de:6a:72:e3:4a:f4:e1:50:32:99:b9:e1:21:48:86:dc:
         43:36:3a:10:df:b2:c2:f0:e1:09:7c:29:ec:f1:44:a5:12:36:
         24:dc:15:9a:c9:9b:52:77:b2:a0:44:74:ec:22:32:e3:f9:4c:
         13:ec:e9:22:63:ac:ee:c9:e8:55:87:b8:44:9e:9d:84:a7:ca:
         dd:42:e7:83:45:a7:b2:25:8d:f9:f8:18:ec:ec:36:6c:f1:48:
         c7:87:84:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org