Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34352e302f32342d3234203d3e20323634343039.roa
File:                     3133312e3232312e34352e302f32342d3234203d3e20323634343039.roa (raw, json)
Hash identifier:          gWdIoUdLrDD6LuaU4rX3W1obLBRT3aK+Lr7hfxEEa3I=
Subject key identifier:   EE:3D:61:A8:DE:F2:0C:E9:00:21:D6:98:1C:A0:A4:74:0F:93:F3:97
Certificate issuer:       /CN=09330E3BFF18E6DE867FE991629B2C56D94EF956
Certificate serial:       4EAC8D66FA7AD36E940192EF967B4024CEF69412
Authority key identifier: 09:33:0E:3B:FF:18:E6:DE:86:7F:E9:91:62:9B:2C:56:D9:4E:F9:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09330E3BFF18E6DE867FE991629B2C56D94EF956.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34352e302f32342d3234203d3e20323634343039.roa
Signing time:             Tue 09 May 2023 14:05:12 +0000
ROA not before:           Tue 09 May 2023 14:00:12 +0000
ROA not after:            Tue 07 May 2024 14:05:12 +0000
asID:                     264409
IP address blocks:        131.221.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ac:8d:66:fa:7a:d3:6e:94:01:92:ef:96:7b:40:24:ce:f6:94:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09330E3BFF18E6DE867FE991629B2C56D94EF956
        Validity
            Not Before: May  9 14:00:12 2023 GMT
            Not After : May  7 14:05:12 2024 GMT
        Subject: CN=EE3D61A8DEF20CE90021D6981CA0A4740F93F397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:91:3d:e9:c9:21:1d:a3:ad:ce:45:fb:48:
                    ea:b0:7f:23:83:ef:1b:6a:e1:95:80:90:a1:c1:cb:
                    4c:05:68:72:85:96:93:4d:4f:98:14:b6:1d:18:af:
                    f8:01:46:15:b9:03:b5:32:6a:38:87:df:48:46:58:
                    f7:16:71:bb:fd:c5:85:1f:6b:d3:56:1b:f8:77:de:
                    76:3f:f6:4e:af:b1:9a:d6:a8:09:f8:67:6d:a4:95:
                    d8:02:88:4c:a5:e8:12:67:68:25:af:00:66:73:3b:
                    cf:ee:e5:5a:57:f2:de:5e:56:ef:a1:cd:c4:53:06:
                    4c:65:34:90:eb:19:91:f9:b6:94:ee:43:83:8a:d0:
                    28:d6:ad:1a:3a:83:17:0b:3f:f4:bd:ec:9b:55:87:
                    da:f5:65:1e:e2:6f:e2:3d:76:79:84:08:b6:e8:92:
                    eb:f0:a3:34:bd:7e:01:a3:85:55:50:63:11:a7:4c:
                    0c:7f:bd:8f:53:3f:d1:ef:f6:a2:0a:12:0e:32:0c:
                    32:39:75:99:87:a5:fb:eb:8a:80:b1:5b:ba:8f:6b:
                    4e:bf:fd:07:ae:07:b8:45:82:f0:07:f4:72:26:5b:
                    79:33:95:70:e0:92:0d:6e:66:6c:43:e6:95:02:e5:
                    a0:22:12:fc:9d:8d:12:f0:15:7a:9e:f5:60:c6:df:
                    35:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3D:61:A8:DE:F2:0C:E9:00:21:D6:98:1C:A0:A4:74:0F:93:F3:97
            X509v3 Authority Key Identifier:
                keyid:09:33:0E:3B:FF:18:E6:DE:86:7F:E9:91:62:9B:2C:56:D9:4E:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/09330E3BFF18E6DE867FE991629B2C56D94EF956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09330E3BFF18E6DE867FE991629B2C56D94EF956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34352e302f32342d3234203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f5:12:42:77:c0:a0:81:e9:84:f3:cc:38:7f:e1:84:33:d7:
         92:74:1e:ff:b5:b3:2b:11:fa:49:d6:1e:cf:a3:d7:41:8e:cb:
         63:d3:b5:c2:fb:ce:d4:d3:36:7a:95:ef:d0:0a:9a:62:7c:fc:
         1f:af:a7:77:68:77:64:40:f4:02:8c:af:c1:aa:d4:04:6b:33:
         0a:14:15:e6:7d:9b:64:f6:ff:9a:d0:c7:61:d6:be:a0:f5:7c:
         29:94:23:9c:64:31:6e:95:63:47:b8:2e:54:72:6c:a3:f3:68:
         c5:1c:4e:aa:fc:a2:03:ec:ab:cd:2b:d6:30:df:ee:4f:93:0d:
         06:7a:bb:25:e3:20:2e:cf:d9:9b:b9:92:52:7b:78:d5:6c:a3:
         9a:d2:8e:99:8e:93:42:4a:b8:7a:bb:da:fd:53:11:78:b6:ce:
         8e:5c:1b:1f:bc:76:8b:e8:cb:a8:08:94:48:5d:e6:b1:d8:1d:
         1e:9f:d0:9c:a0:42:1e:7b:91:b7:55:5d:d5:c4:85:38:38:7b:
         8d:5f:67:e9:d3:a5:34:2b:2d:b2:c4:95:da:2c:9a:13:38:7c:
         d8:3c:c1:51:e0:c6:fc:d7:2b:82:ae:bf:ad:e9:4f:3e:82:85:
         8f:9f:c2:95:ca:2f:fb:a6:b2:d3:0a:19:a8:8a:80:61:51:17:
         c3:27:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org