Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34362e302f32342d3234203d3e20323634343039.roa
File:                     3133312e3232312e34362e302f32342d3234203d3e20323634343039.roa (raw, json)
Hash identifier:          D+7SoJdpoJMtnBAcnkKvYZtLdlTfnH/3WLz4estIHL4=
Subject key identifier:   F0:C3:C1:CD:97:1B:A5:38:97:9E:1B:F1:3A:26:31:59:11:4B:09:59
Certificate issuer:       /CN=09330E3BFF18E6DE867FE991629B2C56D94EF956
Certificate serial:       303DF07E25E1CCCEF2BED6F952F5B6A40591E66E
Authority key identifier: 09:33:0E:3B:FF:18:E6:DE:86:7F:E9:91:62:9B:2C:56:D9:4E:F9:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09330E3BFF18E6DE867FE991629B2C56D94EF956.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34362e302f32342d3234203d3e20323634343039.roa
Signing time:             Tue 09 May 2023 14:06:25 +0000
ROA not before:           Tue 09 May 2023 14:01:25 +0000
ROA not after:            Tue 07 May 2024 14:06:25 +0000
asID:                     264409
IP address blocks:        131.221.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3d:f0:7e:25:e1:cc:ce:f2:be:d6:f9:52:f5:b6:a4:05:91:e6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09330E3BFF18E6DE867FE991629B2C56D94EF956
        Validity
            Not Before: May  9 14:01:25 2023 GMT
            Not After : May  7 14:06:25 2024 GMT
        Subject: CN=F0C3C1CD971BA538979E1BF13A263159114B0959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:17:d9:e4:a8:1b:6c:7e:89:bf:20:7a:98:
                    1f:10:9f:b5:fa:b4:74:92:60:b4:34:55:2c:01:de:
                    a1:5f:7d:5f:70:61:de:23:c5:1d:31:07:50:d3:70:
                    53:84:d1:3f:c3:e3:aa:af:43:74:43:84:c8:23:d9:
                    a1:8e:62:52:fe:42:3e:c6:41:79:ae:9c:53:60:d4:
                    27:a1:3d:b1:d7:01:80:8e:75:87:d8:b9:01:2b:b4:
                    38:6e:57:29:be:f4:fc:8e:f7:0f:38:5b:02:de:df:
                    65:61:bd:73:37:4d:df:05:57:99:04:83:d6:ec:4d:
                    09:10:bf:f2:d8:16:6e:84:7c:12:54:45:d8:0f:9f:
                    38:00:51:a3:16:e6:00:33:91:a2:41:94:0a:90:fe:
                    94:0d:60:d6:81:34:f3:9d:fa:f7:5b:a0:5e:76:27:
                    76:72:7d:0e:c0:99:47:45:f3:6f:d2:8e:55:4f:e6:
                    52:dc:cd:dc:14:5d:5f:f6:5e:b5:f1:6a:6d:74:ed:
                    1d:31:73:2a:d9:a3:d5:64:7c:3c:70:a4:2c:ff:e3:
                    d4:af:67:54:8f:4c:76:38:a4:39:c1:ba:2e:05:11:
                    5a:80:59:91:c6:e8:18:da:19:03:68:48:bd:c2:0a:
                    3b:6a:e7:1c:ee:76:09:e0:94:54:74:bc:03:80:6a:
                    99:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C3:C1:CD:97:1B:A5:38:97:9E:1B:F1:3A:26:31:59:11:4B:09:59
            X509v3 Authority Key Identifier:
                keyid:09:33:0E:3B:FF:18:E6:DE:86:7F:E9:91:62:9B:2C:56:D9:4E:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/09330E3BFF18E6DE867FE991629B2C56D94EF956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09330E3BFF18E6DE867FE991629B2C56D94EF956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34362e302f32342d3234203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:2f:59:30:63:65:aa:5f:24:ad:6c:c9:fe:22:c0:e2:3d:87:
         e4:54:75:42:66:8a:10:2b:ac:ed:1b:0d:31:26:e1:f0:d8:49:
         82:cb:d3:31:1d:e3:ef:f7:b1:2b:13:0f:db:21:28:b4:31:16:
         ee:cc:ee:71:0c:94:df:cc:22:81:c4:89:bf:30:cd:e1:eb:21:
         0f:54:fd:cd:53:31:3d:f2:ea:be:00:20:3e:8e:c2:4c:47:86:
         64:2a:8e:8b:e1:6e:af:a4:87:63:de:e4:af:e7:e6:03:79:31:
         4d:64:f3:94:60:4f:70:e0:a2:8b:48:4a:69:fb:75:8e:aa:33:
         5f:22:66:7c:e2:d5:b8:ef:c7:8a:5a:35:87:4a:64:db:4f:a3:
         5d:83:6d:cc:5e:cf:88:22:0b:5f:f1:e9:1a:e2:5e:c5:51:35:
         fd:62:6c:66:ba:84:f0:11:50:86:88:48:ca:40:38:d9:3c:c5:
         3f:5c:5b:99:e8:d8:7b:1f:a0:a0:66:b7:e6:54:64:b7:bd:2c:
         1d:1c:1f:86:b8:83:16:12:74:b1:91:66:78:b4:2f:45:b8:34:
         45:eb:b3:93:8f:7b:69:24:66:3b:36:74:cc:c8:86:d1:11:ff:
         0e:f0:37:74:b3:ac:27:45:71:23:d5:e9:31:e2:0f:50:3b:84:
         96:09:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org