Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/3133312e3232312e3137332e302f32342d3234203d3e20323634343232.roa
File:                     3133312e3232312e3137332e302f32342d3234203d3e20323634343232.roa (raw, json)
Hash identifier:          u4TDOS8YqNjW+IT3qbCDXTAphkc0aoZVLS+BPxY+CRQ=
Subject key identifier:   A5:3B:2A:C0:01:00:F0:FF:DB:2C:AA:60:84:F9:A1:B9:9C:96:C1:F7
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       6FAC49D8534BCEB9A55ECC414ED7C99FE9D8B38C
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/3133312e3232312e3137332e302f32342d3234203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:00 +0000
ROA not before:           Thu 04 Apr 2024 11:29:00 +0000
ROA not after:            Thu 03 Apr 2025 11:34:00 +0000
asID:                     264422
IP address blocks:        131.221.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ac:49:d8:53:4b:ce:b9:a5:5e:cc:41:4e:d7:c9:9f:e9:d8:b3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:00 2024 GMT
            Not After : Apr  3 11:34:00 2025 GMT
        Subject: CN=A53B2AC00100F0FFDB2CAA6084F9A1B99C96C1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:3c:20:60:3f:af:01:c1:b6:c3:d7:0b:41:
                    30:28:f3:ab:44:2c:8a:3f:5f:2d:90:53:3f:84:cf:
                    0b:a9:70:6e:ce:72:0c:63:a0:c4:d8:0e:1c:74:b6:
                    e0:5a:ce:d8:cc:86:0a:a5:3b:ed:b7:68:42:d0:2d:
                    bf:3b:ef:9f:86:d7:15:ae:f2:f6:c7:1c:a2:dc:c0:
                    d1:f0:ad:cf:ea:78:d1:26:0d:97:17:0b:20:1b:9f:
                    80:98:54:ad:b1:7d:cf:5b:81:b3:cd:9a:90:a3:4d:
                    9b:c7:8b:12:15:78:61:2b:03:a1:99:c6:96:de:e0:
                    36:95:b4:de:d4:46:08:16:9a:bd:c7:f0:70:19:05:
                    e0:89:c9:ae:b4:9a:90:04:4c:14:89:b6:c3:b4:86:
                    40:ae:db:16:0b:a9:4f:ba:af:c8:84:18:8c:11:4b:
                    30:18:3c:81:d0:8e:eb:6c:2c:52:b6:7a:ff:83:bd:
                    6b:9b:05:67:d2:c6:06:6a:87:8d:1f:e4:9e:84:33:
                    4b:75:d3:3f:e6:5b:40:8b:8b:d4:81:8c:ce:de:7f:
                    9b:74:3d:2c:60:b4:48:b0:c2:4a:a0:bb:b4:8b:f7:
                    5d:3f:e3:df:ce:ef:77:9e:ca:02:5c:0e:c8:82:47:
                    2b:61:08:2e:bc:8d:ec:e0:90:6e:af:57:ed:8c:8e:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3B:2A:C0:01:00:F0:FF:DB:2C:AA:60:84:F9:A1:B9:9C:96:C1:F7
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/3133312e3232312e3137332e302f32342d3234203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:11:4b:4f:d1:0f:72:8e:8a:2d:dd:4e:30:fc:ab:ef:1c:d3:
         6d:f1:dc:0b:39:68:3e:0e:a6:31:38:d5:e4:2c:dd:9a:07:a4:
         b7:cb:25:d4:4c:c0:29:98:e3:b3:a1:85:44:cf:00:83:f2:39:
         1a:4b:1f:7a:75:90:fb:cc:4c:ab:8a:59:44:92:7d:8f:58:82:
         14:21:ff:53:98:bd:50:22:66:dd:9d:5e:25:c1:e1:f3:f5:c5:
         d3:7d:e9:63:fd:63:ff:9a:ba:87:66:7a:5b:30:60:66:94:6b:
         e1:7c:da:10:1f:af:80:e6:37:4e:2c:0b:a2:5f:a1:6b:0c:1b:
         78:85:5f:46:0e:c2:79:c7:f6:d1:ac:56:97:d1:a1:53:32:88:
         bb:45:d9:16:36:21:69:42:29:4a:90:fb:68:6a:59:58:f7:ba:
         84:04:de:25:c4:42:96:a2:d1:e0:e7:51:d0:d7:82:73:41:07:
         83:cc:25:3d:56:8f:84:de:84:cc:46:b7:7b:0c:34:34:60:7d:
         a5:b2:ce:18:63:a5:e4:47:28:00:90:66:e8:09:5c:c1:19:1f:
         da:2d:f4:3d:51:9f:ff:d9:f8:8f:f2:9b:0a:2c:3a:37:ad:ee:
         04:52:7b:cf:16:4d:1f:1a:82:67:8d:fe:5f:78:ee:5b:8e:e6:
         27:6e:1e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org