Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/0/3133312e302e32302e302f32322d3234203d3e203238333237.roa
File:                     3133312e302e32302e302f32322d3234203d3e203238333237.roa (raw, json)
Hash identifier:          9zC6gq7yhcSnQng5wxuYyK9dRy2/oeHQJUSZveHgWFQ=
Subject key identifier:   A2:E5:46:06:64:D9:7A:24:8B:EA:11:3C:70:2A:EF:99:01:E9:FD:3B
Certificate issuer:       /CN=2D986BE46C5DEBAE344855265B87EFB984A52F12
Certificate serial:       3021B9A22FB1C338CD594BC1213D294A6698827D
Authority key identifier: 2D:98:6B:E4:6C:5D:EB:AE:34:48:55:26:5B:87:EF:B9:84:A5:2F:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D986BE46C5DEBAE344855265B87EFB984A52F12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/0/3133312e302e32302e302f32322d3234203d3e203238333237.roa
Signing time:             Wed 29 Nov 2023 14:00:00 +0000
ROA not before:           Wed 29 Nov 2023 13:55:00 +0000
ROA not after:            Wed 27 Nov 2024 14:00:00 +0000
asID:                     28327
IP address blocks:        131.0.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:21:b9:a2:2f:b1:c3:38:cd:59:4b:c1:21:3d:29:4a:66:98:82:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D986BE46C5DEBAE344855265B87EFB984A52F12
        Validity
            Not Before: Nov 29 13:55:00 2023 GMT
            Not After : Nov 27 14:00:00 2024 GMT
        Subject: CN=A2E5460664D97A248BEA113C702AEF9901E9FD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:28:53:f9:03:cd:5f:2d:6d:16:a6:75:2a:
                    99:e1:a6:54:80:63:bd:1c:4e:0e:27:53:d6:57:9e:
                    1f:17:81:19:17:81:8d:5d:0f:ec:8d:c5:f0:31:83:
                    b1:2d:18:37:f9:e1:3c:f6:62:f9:76:02:c7:be:41:
                    94:a2:f8:9d:2f:02:58:c8:24:95:2a:2c:46:15:95:
                    1f:80:a3:c6:40:72:ba:6b:d9:21:17:78:d2:9c:84:
                    5f:54:2d:f5:93:83:0e:f6:08:9a:00:9e:a1:31:cf:
                    8a:ff:26:97:84:bb:fe:7c:1d:81:73:fa:57:98:6a:
                    cb:e4:18:6d:83:40:1a:fd:d2:4b:96:85:9c:85:7e:
                    6e:99:b2:60:9b:7b:70:5a:60:5e:90:a7:cd:03:d1:
                    8d:7f:ec:5d:38:d9:a5:37:eb:0f:59:c9:74:e4:18:
                    fe:98:27:55:c0:c2:73:35:34:bb:2e:a0:62:19:9f:
                    00:f9:51:e8:fc:8f:63:13:64:10:ac:52:87:54:6c:
                    b9:f9:fd:4e:75:23:a8:af:82:ed:08:05:32:98:01:
                    c0:ef:c1:5d:cc:bb:4a:7c:ed:45:cf:76:2f:39:7c:
                    ec:e6:c9:89:af:3e:57:ff:4a:4b:64:bd:e2:44:9a:
                    71:01:ee:9e:02:a1:8c:08:03:40:b9:85:a2:4f:21:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E5:46:06:64:D9:7A:24:8B:EA:11:3C:70:2A:EF:99:01:E9:FD:3B
            X509v3 Authority Key Identifier:
                keyid:2D:98:6B:E4:6C:5D:EB:AE:34:48:55:26:5B:87:EF:B9:84:A5:2F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/0/2D986BE46C5DEBAE344855265B87EFB984A52F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D986BE46C5DEBAE344855265B87EFB984A52F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/0/3133312e302e32302e302f32322d3234203d3e203238333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:ce:54:88:23:e0:8c:ab:0b:45:3e:bc:18:d5:a9:38:6a:ef:
         7e:1c:b2:ab:06:8a:5e:ec:84:68:9a:65:27:55:ba:69:7f:42:
         8f:e9:fe:80:68:08:66:d5:ee:e8:b2:74:30:08:a1:97:a5:84:
         cd:73:42:cb:3a:2d:a0:20:1d:a3:af:32:e8:40:51:ee:36:b2:
         bf:b3:37:16:08:5b:bc:12:25:f5:6f:f7:b8:d6:1d:c3:cc:58:
         1f:88:8e:7c:e4:74:63:5f:37:84:ee:ad:37:ce:de:a7:3d:ee:
         e5:50:88:eb:00:13:eb:62:16:20:fc:cf:b1:a1:53:5e:0d:22:
         fa:d2:c7:37:f9:f5:52:7b:02:41:78:90:e4:6a:7a:1f:9b:ae:
         03:f0:01:94:fa:ba:bd:7d:86:91:0c:be:5b:46:4c:ce:eb:ed:
         18:ae:67:00:c3:fa:47:da:cb:5f:f8:47:4a:4a:9e:2a:83:0a:
         fc:f2:ae:df:60:c1:76:98:4a:45:ee:2a:06:63:9e:aa:b4:50:
         bc:bf:2b:5d:3a:e3:48:ad:11:d6:a3:4b:af:7a:a1:2a:99:a4:
         9f:e2:38:23:4e:dd:18:ae:cc:b3:7d:da:9a:87:d9:45:f5:00:
         79:ec:87:e5:96:e1:e5:02:2e:b3:0c:bf:dc:83:8d:c5:d7:15:
         45:c7:04:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org