Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34372e302f32342d3234203d3e20323634343039.roa
File:                     3133312e3232312e34372e302f32342d3234203d3e20323634343039.roa (raw, json)
Hash identifier:          4PcYe/3oYk0PBU1QDmNdbb+c4fwXFhpTcwrjz8ctMZk=
Subject key identifier:   28:1A:77:0F:C1:89:08:89:8B:52:B0:85:C8:C2:31:EE:71:74:BA:E3
Certificate issuer:       /CN=09330E3BFF18E6DE867FE991629B2C56D94EF956
Certificate serial:       34E70CA8762EEA9C70B1F4F51221F3EA4583203E
Authority key identifier: 09:33:0E:3B:FF:18:E6:DE:86:7F:E9:91:62:9B:2C:56:D9:4E:F9:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09330E3BFF18E6DE867FE991629B2C56D94EF956.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34372e302f32342d3234203d3e20323634343039.roa
Signing time:             Tue 09 May 2023 14:05:17 +0000
ROA not before:           Tue 09 May 2023 14:00:17 +0000
ROA not after:            Tue 07 May 2024 14:05:17 +0000
asID:                     264409
IP address blocks:        131.221.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e7:0c:a8:76:2e:ea:9c:70:b1:f4:f5:12:21:f3:ea:45:83:20:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09330E3BFF18E6DE867FE991629B2C56D94EF956
        Validity
            Not Before: May  9 14:00:17 2023 GMT
            Not After : May  7 14:05:17 2024 GMT
        Subject: CN=281A770FC18908898B52B085C8C231EE7174BAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:3b:d2:55:28:94:0e:ff:f5:09:40:f8:51:
                    7b:a7:1b:93:dd:b2:ee:f5:b4:34:9d:fb:13:36:d9:
                    ef:63:62:05:38:b8:6d:0e:a0:ab:99:91:76:0b:71:
                    00:d0:4c:44:50:a9:49:07:20:dd:a2:ce:7b:73:8d:
                    eb:48:42:f0:8a:21:ee:1a:52:7e:f0:01:03:fa:50:
                    c3:57:06:1c:c5:b3:58:92:ee:bd:f0:97:3b:b7:f2:
                    84:9a:26:e2:e3:6b:12:72:f0:6f:e2:b7:9f:89:0d:
                    c9:42:7a:c1:9a:c3:a4:52:2e:ac:9f:d8:08:95:39:
                    85:db:2e:49:b3:18:8e:5d:34:c7:f0:b5:78:12:5c:
                    06:54:07:7b:1e:74:1e:d8:c5:1e:78:6a:10:3e:e2:
                    39:9b:71:63:7e:02:a1:5b:8a:b9:59:4c:0f:c3:ea:
                    89:f1:93:8f:03:31:6c:cc:d7:c9:26:d3:f7:4e:f7:
                    12:50:0c:79:8f:b6:16:de:9d:eb:5a:ff:8f:03:84:
                    3b:92:e0:5d:a9:62:f8:bd:20:f7:71:06:fe:02:f1:
                    bb:37:99:c9:7f:d1:5e:6c:40:4f:e9:e9:22:66:48:
                    fd:ed:fd:86:84:52:25:fd:e7:16:07:47:b9:19:74:
                    d0:33:81:20:70:c3:6a:6d:c7:75:68:a9:d7:3a:95:
                    48:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1A:77:0F:C1:89:08:89:8B:52:B0:85:C8:C2:31:EE:71:74:BA:E3
            X509v3 Authority Key Identifier:
                keyid:09:33:0E:3B:FF:18:E6:DE:86:7F:E9:91:62:9B:2C:56:D9:4E:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/09330E3BFF18E6DE867FE991629B2C56D94EF956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09330E3BFF18E6DE867FE991629B2C56D94EF956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34372e302f32342d3234203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:7a:52:9a:4b:6b:f3:28:19:79:34:4b:c7:6a:9b:c6:ab:f5:
         16:04:41:0f:e0:97:d4:1a:d4:8e:36:3c:1e:1d:12:86:c0:eb:
         79:1d:a8:e9:7a:7b:33:74:67:e1:22:f8:9d:62:d2:73:dc:17:
         c6:46:89:9b:d5:9d:d5:d7:d6:f7:a9:15:f8:ce:a8:74:98:7b:
         15:50:66:23:a1:48:5a:f3:3c:99:57:0e:78:75:31:60:e6:47:
         4c:ea:e1:e5:4f:b7:f8:45:20:f7:01:70:33:f0:5d:59:1e:8f:
         31:bb:10:66:99:ae:13:f9:14:7c:fe:7a:69:ce:5a:7f:f5:20:
         03:07:4e:b6:d2:f5:f3:3d:0b:05:52:ce:07:af:33:5f:49:64:
         c3:38:01:47:fb:86:27:22:73:ae:2b:fc:80:45:db:fb:30:81:
         0a:6d:a4:57:16:6b:58:00:6c:35:a4:ba:36:c6:00:9f:c3:f2:
         04:0e:05:c6:1e:cd:64:cc:fb:98:e3:bd:a6:6b:d7:0e:9a:10:
         9a:98:02:f8:a2:5a:1c:81:23:60:29:f0:50:29:75:3b:47:ec:
         ef:24:b9:59:e1:fe:df:2c:dd:48:bb:6a:01:27:f1:3a:b9:74:
         9f:4d:88:25:29:99:17:b8:89:da:07:be:ec:d2:49:76:95:84:
         eb:49:65:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org