Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136302e302f32332d3233203d3e20323634343334.roa
File:                     3133312e3232312e3136302e302f32332d3233203d3e20323634343334.roa (raw, json)
Hash identifier:          ElWChx2aULLEtIZ0iytWFRjk7KZhe5hQu65N9QFuCZM=
Subject key identifier:   25:60:61:D4:BC:12:99:91:EF:AE:9F:3D:80:6B:0D:BD:77:79:36:BE
Certificate issuer:       /CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
Certificate serial:       5561B236BADC80675AD80E459210824FA904D969
Authority key identifier: 5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136302e302f32332d3233203d3e20323634343334.roa
Signing time:             Wed 10 Apr 2024 13:48:46 +0000
ROA not before:           Wed 10 Apr 2024 13:43:46 +0000
ROA not after:            Wed 09 Apr 2025 13:48:46 +0000
asID:                     264434
IP address blocks:        131.221.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:61:b2:36:ba:dc:80:67:5a:d8:0e:45:92:10:82:4f:a9:04:d9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
        Validity
            Not Before: Apr 10 13:43:46 2024 GMT
            Not After : Apr  9 13:48:46 2025 GMT
        Subject: CN=256061D4BC129991EFAE9F3D806B0DBD777936BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:53:a2:89:50:63:c0:db:d6:74:49:68:69:
                    8b:46:0e:fa:02:32:ff:b1:12:8c:cb:4b:a8:99:1b:
                    bc:5c:9f:66:47:e0:27:27:49:e6:f9:62:c2:0e:b3:
                    fa:1f:58:24:9a:a7:47:1c:12:85:45:6c:2f:5f:46:
                    a2:fa:46:27:51:30:de:cb:69:27:13:a1:fd:62:bc:
                    20:2f:ea:77:19:d4:63:1f:bc:54:dd:83:8d:d4:c5:
                    38:34:62:41:f9:43:af:e8:b0:06:50:04:a5:ce:9f:
                    9f:63:4b:a9:93:48:fc:ee:65:ed:fa:23:b4:24:d8:
                    21:df:7d:7f:cf:dc:26:24:28:3b:69:4d:f2:c9:f7:
                    68:3d:ed:92:ec:fd:95:72:96:36:8d:cb:ed:b9:4e:
                    97:1e:73:31:70:af:df:a6:2f:c7:3b:2e:cf:bc:2f:
                    1e:58:e3:5c:2a:f0:6c:69:24:d6:bd:5e:fc:6a:63:
                    f3:a7:08:73:cc:9f:b6:a4:1d:44:a3:dd:9e:2e:22:
                    e5:4b:a7:04:fa:19:67:bb:c7:e1:49:36:47:a8:48:
                    5a:bb:28:f0:a5:cd:69:7a:37:d9:24:c8:a5:e6:47:
                    c8:c9:cd:03:06:70:83:dc:d5:56:aa:1f:3f:47:30:
                    fb:6b:66:a0:ee:bd:ab:4f:2a:f4:98:21:03:20:4c:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:60:61:D4:BC:12:99:91:EF:AE:9F:3D:80:6B:0D:BD:77:79:36:BE
            X509v3 Authority Key Identifier:
                keyid:5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136302e302f32332d3233203d3e20323634343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:56:03:f8:64:52:9a:bc:d5:e2:12:b3:35:1c:40:47:b7:b7:
         5f:d2:37:40:36:fa:c9:c9:1a:85:0c:d8:f1:49:9d:d8:6d:52:
         58:fe:17:9b:7f:c3:35:df:85:05:44:c5:e9:ff:ab:cf:f3:a1:
         6f:da:12:ea:d4:b5:1f:77:e5:4f:e9:61:b1:ab:53:ba:ee:c9:
         a6:f3:61:16:d5:bd:f9:e6:5a:51:31:c5:75:37:4b:e2:84:cb:
         17:70:f0:27:2f:39:e7:ed:1f:56:99:b4:48:27:e1:e9:a7:f1:
         4e:27:cc:ff:83:e9:1f:d4:62:17:1f:27:a3:a7:7f:2b:91:1e:
         20:d5:31:fc:5c:22:27:84:5d:38:7a:94:dc:1e:60:65:3b:4a:
         ff:5a:9b:99:5c:8f:d5:bb:9a:f6:8c:c3:ae:4c:26:93:ec:37:
         b3:2d:1b:46:d9:17:54:46:0d:ed:03:c6:a4:67:5b:1c:cc:a9:
         0e:13:ba:c4:c3:29:5b:e0:92:ca:61:20:ec:01:f2:60:bf:96:
         f3:8e:16:44:7e:90:e8:7c:83:0b:e2:ff:b8:38:ec:39:33:04:
         0f:29:71:38:68:47:53:6c:dd:d8:e3:6f:a2:49:20:f7:08:c4:
         60:f1:2e:ba:84:15:7e:5d:4c:30:d8:02:43:85:ed:c9:b9:96:
         f4:03:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org