Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34342e302f32322d3332203d3e20323634343039.roa
File:                     3133312e3232312e34342e302f32322d3332203d3e20323634343039.roa (raw, json)
Hash identifier:          Ktz5mm9nb0J3z9MXV5uD8mx0Ud264qHliZK6yTZE5OE=
Subject key identifier:   9B:CA:9C:8E:3D:DC:9C:9D:07:73:2B:26:FF:B8:A7:16:89:D4:58:9C
Certificate issuer:       /CN=F6A854F7ADB5F77180FB875F5E7CE73C14AE666D
Certificate serial:       3CF43D6A98C71501B602E0B79964262811328F2D
Authority key identifier: F6:A8:54:F7:AD:B5:F7:71:80:FB:87:5F:5E:7C:E7:3C:14:AE:66:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6A854F7ADB5F77180FB875F5E7CE73C14AE666D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34342e302f32322d3332203d3e20323634343039.roa
Signing time:             Sun 03 Mar 2024 19:51:19 +0000
ROA not before:           Sun 03 Mar 2024 19:46:19 +0000
ROA not after:            Sun 02 Mar 2025 19:51:19 +0000
asID:                     264409
IP address blocks:        131.221.44.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f4:3d:6a:98:c7:15:01:b6:02:e0:b7:99:64:26:28:11:32:8f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6A854F7ADB5F77180FB875F5E7CE73C14AE666D
        Validity
            Not Before: Mar  3 19:46:19 2024 GMT
            Not After : Mar  2 19:51:19 2025 GMT
        Subject: CN=9BCA9C8E3DDC9C9D07732B26FFB8A71689D4589C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:67:64:b4:02:c6:f3:07:6a:d6:af:cb:61:
                    8c:c2:b1:39:d9:d2:67:76:8b:b1:aa:65:4d:be:ae:
                    eb:3b:41:c7:db:93:c7:c8:11:6c:8d:5e:01:34:31:
                    08:79:e6:e8:4e:ab:3c:19:98:49:f5:f0:4b:db:62:
                    ba:d7:c9:e1:f9:1e:06:8c:1b:e6:c3:70:70:b6:4b:
                    d3:16:ff:30:4f:42:44:ec:1d:ae:66:5d:33:dd:73:
                    92:17:5f:d2:a6:42:0e:fa:53:00:04:71:e2:fa:ed:
                    cf:83:ea:fb:10:27:33:4d:1c:22:a0:3d:30:e8:8c:
                    95:cd:1b:ce:e9:79:71:51:7d:18:1e:2d:f0:07:80:
                    09:89:1a:ac:40:3c:7d:54:3b:6e:60:e8:7f:35:b4:
                    37:7c:f2:43:90:de:a0:22:08:33:8c:6d:85:ea:15:
                    66:fa:53:a4:7c:75:d9:89:b2:cf:98:6d:04:9f:fa:
                    b1:1f:56:c7:64:e1:c0:d8:71:b3:d6:84:fe:2a:1f:
                    f5:65:f7:08:b0:f6:6c:b1:12:67:07:a5:09:51:46:
                    55:6e:cf:8f:f6:ab:c7:38:f2:99:e8:93:db:a9:d1:
                    b2:33:33:4b:a0:d4:19:62:58:6a:74:25:d6:6f:5b:
                    21:0f:d6:c0:77:bd:ac:74:f8:32:28:77:53:ea:08:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CA:9C:8E:3D:DC:9C:9D:07:73:2B:26:FF:B8:A7:16:89:D4:58:9C
            X509v3 Authority Key Identifier:
                keyid:F6:A8:54:F7:AD:B5:F7:71:80:FB:87:5F:5E:7C:E7:3C:14:AE:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/F6A854F7ADB5F77180FB875F5E7CE73C14AE666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6A854F7ADB5F77180FB875F5E7CE73C14AE666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34342e302f32322d3332203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:49:95:ee:85:54:82:c0:e9:6c:4a:53:c9:df:6b:9e:29:da:
         1a:39:35:61:62:2e:88:db:86:12:4f:c2:cb:05:04:85:d6:25:
         21:09:f0:27:61:8d:29:8e:b1:e2:aa:83:9a:49:12:e4:9e:bb:
         a3:0b:1f:13:90:75:d1:8c:b0:17:f3:53:43:c0:70:7d:e5:63:
         8c:3e:b0:95:c0:02:14:1f:31:99:44:d7:5d:6e:81:f4:27:1f:
         6c:1c:40:eb:9b:93:a6:3e:3e:01:dd:58:66:b7:bd:d8:98:45:
         7c:c3:00:00:9f:ee:31:f4:bf:d3:62:2b:2d:58:c5:b2:b1:fe:
         ac:55:c8:12:64:46:34:2d:ff:ee:27:07:ae:b0:b0:28:87:72:
         22:1d:54:37:09:c4:18:e2:8f:56:a3:09:16:50:cf:fb:b5:1a:
         61:fe:dd:2f:f7:9c:f3:d4:31:60:b7:d2:8a:75:bf:4f:28:c6:
         4d:84:28:0a:22:37:95:27:ce:e1:c6:4a:6f:cb:39:01:3f:87:
         34:02:3e:a9:5d:a6:fb:54:0e:b8:f7:24:e9:a6:96:01:65:d3:
         e1:a9:fe:32:cf:75:95:43:a5:01:00:0a:1d:29:65:0a:ac:c4:
         7f:27:d5:2a:3f:e8:1a:e1:0e:4b:19:e1:6f:c3:d9:75:be:74:
         e4:a8:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org