Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136312e302f32342d3234203d3e20323634343334.roa
File:                     3133312e3232312e3136312e302f32342d3234203d3e20323634343334.roa (raw, json)
Hash identifier:          Q9cU8zZOgZwj/96VShsPNvjGJUfyGyAnmL64bNjZmQY=
Subject key identifier:   C8:06:A6:5B:1F:B6:08:FF:BF:E1:E8:AD:E5:33:6E:59:1E:77:DD:BD
Certificate issuer:       /CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
Certificate serial:       09C5FC3C49325E0D268A0B3341ED5A9DEDE42AE0
Authority key identifier: 5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136312e302f32342d3234203d3e20323634343334.roa
Signing time:             Wed 17 May 2023 14:32:03 +0000
ROA not before:           Wed 17 May 2023 14:27:03 +0000
ROA not after:            Wed 15 May 2024 14:32:03 +0000
asID:                     264434
IP address blocks:        131.221.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c5:fc:3c:49:32:5e:0d:26:8a:0b:33:41:ed:5a:9d:ed:e4:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
        Validity
            Not Before: May 17 14:27:03 2023 GMT
            Not After : May 15 14:32:03 2024 GMT
        Subject: CN=C806A65B1FB608FFBFE1E8ADE5336E591E77DDBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9a:a2:1c:f2:4d:a7:c3:3f:c7:06:92:ca:31:
                    17:fd:ef:d2:12:6e:4b:7a:80:84:38:ed:51:8e:3c:
                    13:af:c4:a7:ea:f0:fd:a7:11:50:4f:fc:c8:02:82:
                    bb:bc:98:f6:87:7d:19:ac:bd:38:a4:dd:06:bb:13:
                    10:73:0d:3c:ae:32:c4:ab:6a:95:11:8b:8c:90:ac:
                    44:62:14:41:79:dd:08:87:04:cd:41:e2:05:b5:19:
                    91:7a:ad:17:ba:22:ec:50:2b:35:83:a5:21:37:11:
                    43:89:70:3f:b0:eb:0d:48:d7:fd:9b:86:b3:f2:47:
                    59:20:75:a4:29:43:94:a3:3a:97:ee:f2:e8:6f:f3:
                    26:36:1b:7e:a9:c6:7b:88:a2:d0:3b:13:f4:73:1d:
                    4d:2d:36:26:b1:40:b5:85:12:99:1b:b3:5f:40:a0:
                    26:75:31:e1:c2:b3:a9:30:a0:43:ff:12:17:0e:9a:
                    2a:0a:1f:d3:de:8a:e8:6c:49:5c:db:79:d4:8e:e8:
                    13:4b:40:14:48:49:62:ec:4c:6b:50:56:ec:13:5f:
                    ef:6c:d4:1c:db:5b:86:b1:eb:84:17:62:db:ff:e6:
                    14:31:0a:04:78:1a:ee:0d:57:c2:ff:d8:c9:c4:b6:
                    4a:0a:44:a9:b9:43:97:d9:67:40:02:9a:25:23:39:
                    96:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:06:A6:5B:1F:B6:08:FF:BF:E1:E8:AD:E5:33:6E:59:1E:77:DD:BD
            X509v3 Authority Key Identifier:
                keyid:5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136312e302f32342d3234203d3e20323634343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:63:52:e3:e2:41:a4:08:ae:d7:4a:ae:e4:b8:e0:45:c1:8c:
         94:a9:55:a7:00:6f:27:a2:83:1f:52:4d:87:f4:c8:4c:e7:ec:
         76:a4:26:25:f2:3a:84:ae:26:4a:43:1a:54:0d:b9:a2:68:50:
         3c:c3:be:06:2d:3d:d6:17:51:74:20:57:fb:eb:8e:dd:70:ee:
         39:68:19:3f:3c:8b:a7:56:ed:61:8e:60:b8:58:c7:cc:82:4a:
         34:13:19:26:29:4f:b5:6d:0c:aa:64:bc:a2:1d:03:49:16:b2:
         33:57:59:3a:82:7c:8c:38:0f:d3:14:d2:12:53:21:fd:07:07:
         2a:f7:cd:cb:02:5e:bf:3a:ab:d1:0a:a4:16:f0:11:38:cd:51:
         b6:82:37:18:ef:29:b1:6e:d7:74:a2:af:8b:5e:07:a9:42:7c:
         af:62:01:a4:ef:95:24:2a:65:44:a0:71:52:3b:80:2b:3e:75:
         60:9c:46:8d:bc:67:8d:f1:81:f2:11:0f:4c:5c:3c:b3:3d:68:
         f5:b6:4b:8e:b7:63:37:1b:68:02:5c:65:3e:2b:95:4a:c1:49:
         2a:b8:94:bd:9a:d2:1d:44:fa:9e:d9:8e:38:24:c1:0e:9a:a0:
         cd:4a:ae:b7:1e:24:b4:ed:78:a6:f4:6c:b4:d5:f6:70:91:49:
         c6:b2:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org