Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/3133312e3232312e3137342e302f32342d3234203d3e20323634343232.roa
File:                     3133312e3232312e3137342e302f32342d3234203d3e20323634343232.roa (raw, json)
Hash identifier:          fOCAKbv27ne9H5xbQ/oNFSb5Ps9/oPQLbn5b44BTZTc=
Subject key identifier:   DB:9F:7D:3C:D6:AC:C5:6A:75:90:A6:20:35:C6:12:8F:36:F3:CF:DD
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       6A3B33039B06957612DE9DAD7ACA01A66A720582
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/3133312e3232312e3137342e302f32342d3234203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:03 +0000
ROA not before:           Thu 04 Apr 2024 11:29:03 +0000
ROA not after:            Thu 03 Apr 2025 11:34:03 +0000
asID:                     264422
IP address blocks:        131.221.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3b:33:03:9b:06:95:76:12:de:9d:ad:7a:ca:01:a6:6a:72:05:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:03 2024 GMT
            Not After : Apr  3 11:34:03 2025 GMT
        Subject: CN=DB9F7D3CD6ACC56A7590A62035C6128F36F3CFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:cc:a2:bf:e8:8d:a7:e0:df:bf:a3:10:8b:
                    bf:41:b9:67:52:0a:24:79:70:9f:2e:a7:aa:67:23:
                    4d:58:93:c7:2e:73:eb:4a:71:b3:f4:d4:8d:ee:f0:
                    4b:3d:25:e1:5b:78:1d:9d:84:c1:8c:5e:6c:39:a1:
                    aa:cf:d7:66:3a:2f:15:06:86:3f:db:3b:60:5e:af:
                    e4:9f:b0:31:80:77:06:8e:93:79:cb:62:56:81:1e:
                    b0:67:f1:21:c1:bb:c8:34:e3:2d:91:68:0d:fc:ba:
                    d7:2a:60:29:d3:31:31:16:2b:6f:53:45:f7:b0:34:
                    43:e4:7a:5c:3e:cc:ef:15:32:72:99:19:a0:ca:33:
                    55:6e:ef:e8:ba:e0:6d:18:cd:a9:12:11:5d:9d:52:
                    1a:f9:f9:ea:54:ae:d8:e6:0a:cf:ab:44:7b:77:e1:
                    d0:4b:bf:6c:30:91:f6:62:f3:a3:29:ed:7c:5a:77:
                    d9:c7:50:81:a7:fd:5c:41:93:e3:6a:fd:e2:e2:70:
                    cb:e8:90:0c:88:2f:56:a1:d4:67:fe:15:80:61:f2:
                    5a:92:74:e3:60:18:8e:70:e4:cf:bf:34:23:05:af:
                    07:87:a5:46:ea:09:b5:bb:44:c5:27:a4:20:d8:b9:
                    91:72:51:9b:f8:98:63:36:6d:4e:7a:eb:b1:e8:be:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9F:7D:3C:D6:AC:C5:6A:75:90:A6:20:35:C6:12:8F:36:F3:CF:DD
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/3133312e3232312e3137342e302f32342d3234203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:33:49:4e:22:54:4f:4a:48:92:5d:fc:24:00:c0:af:f4:f2:
         8a:a5:f2:1b:06:25:69:3a:b1:3b:59:2a:71:8f:5f:98:68:76:
         c2:65:b8:c3:f3:19:e8:29:b1:4b:10:e4:d1:3d:de:e6:80:30:
         e0:36:d6:56:9a:90:87:4a:6b:da:55:b8:32:24:52:bf:bc:ac:
         e0:73:b0:a8:d9:1c:b5:d7:a3:ec:21:5c:34:09:b0:d8:56:89:
         70:16:55:ef:f5:82:4b:64:dc:b2:f5:8f:11:55:a1:3b:04:c8:
         8e:05:95:12:31:3e:00:b8:cf:b9:ab:90:eb:f6:81:88:da:79:
         0e:4a:40:9c:14:86:9e:c1:1f:e3:66:08:5e:8c:85:4f:ac:c7:
         44:cc:3c:87:ff:83:7f:d0:ac:3c:6e:21:66:ae:d3:0d:8c:b5:
         12:19:fa:e5:6c:13:00:3a:d7:03:7a:88:26:62:16:a4:d8:7e:
         8d:0a:43:3b:45:75:c5:36:0c:de:6d:ce:e4:58:e5:16:11:59:
         88:b4:09:9e:5e:7a:ec:0c:da:1c:cf:1d:f0:3e:f6:a6:ab:ea:
         25:59:a6:28:6e:a8:6f:34:ea:69:22:e5:db:ec:ba:f9:4b:d3:
         d2:e0:a0:14:3c:c2:2d:00:46:b8:6a:0a:ce:a0:73:ff:6b:0c:
         19:51:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org