Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31322e302f32322d3235203d3e20323632363037.roa
File:                     3133312e3130382e31322e302f32322d3235203d3e20323632363037.roa (raw, json)
Hash identifier:          Uj5h0X39a4jC2X/U26ohtKn1lDF3MTmZfDSYcl3+6AY=
Subject key identifier:   10:57:97:99:D5:F8:D2:3C:AB:5F:A6:2B:A6:DC:18:8E:A3:42:ED:EC
Certificate issuer:       /CN=B9095BB2B66362B38306199DFC51A80D9FFFA04A
Certificate serial:       0EF7E3B40F078F1DE329E9AEF966794831ADBEBC
Authority key identifier: B9:09:5B:B2:B6:63:62:B3:83:06:19:9D:FC:51:A8:0D:9F:FF:A0:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9095BB2B66362B38306199DFC51A80D9FFFA04A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31322e302f32322d3235203d3e20323632363037.roa
Signing time:             Wed 18 Jan 2023 23:19:44 +0000
ROA not before:           Wed 18 Jan 2023 23:14:44 +0000
ROA not after:            Wed 17 Jan 2024 23:19:44 +0000
asID:                     262607
IP address blocks:        131.108.12.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f7:e3:b4:0f:07:8f:1d:e3:29:e9:ae:f9:66:79:48:31:ad:be:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9095BB2B66362B38306199DFC51A80D9FFFA04A
        Validity
            Not Before: Jan 18 23:14:44 2023 GMT
            Not After : Jan 17 23:19:44 2024 GMT
        Subject: CN=10579799D5F8D23CAB5FA62BA6DC188EA342EDEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1c:28:08:06:4a:47:38:24:e0:b8:d9:53:c4:
                    bc:e5:f1:81:25:6f:6b:f8:f9:a3:10:1a:78:be:e4:
                    6f:49:b2:66:73:c0:74:74:71:e5:30:19:09:15:ba:
                    08:32:04:c6:12:c8:71:fb:3f:e4:58:90:a9:a3:f0:
                    ad:78:80:79:2b:1c:19:94:66:11:d8:fc:54:03:4f:
                    30:5a:6f:cc:aa:db:7b:3a:84:96:8f:5d:f9:5c:c3:
                    2c:b2:b7:53:aa:c4:66:c7:0d:ac:b5:84:be:cd:0f:
                    db:c9:bb:8f:d3:8d:bb:7b:a4:a5:7c:6b:d6:37:43:
                    d3:16:5f:fd:91:b9:e4:07:78:d9:78:7d:cf:f3:56:
                    23:84:98:dc:3e:c9:97:6a:03:0a:fb:da:33:60:90:
                    70:a1:93:f1:5a:67:72:8e:2a:6d:c0:34:3d:69:86:
                    a6:a0:8a:52:41:44:2e:b8:6e:b6:10:35:52:9a:2c:
                    3b:e5:9c:56:78:6e:f1:1f:3b:1e:bf:28:40:69:13:
                    b4:45:4d:c9:ad:90:8c:8b:f4:0b:b2:53:04:91:3b:
                    ce:5d:35:eb:2c:e7:71:fa:d9:55:4d:87:69:0c:c4:
                    6c:84:b6:8c:11:08:75:f8:b2:b2:8d:d9:86:9d:87:
                    13:41:50:44:ed:36:19:86:70:85:59:ad:67:ac:ee:
                    f4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:57:97:99:D5:F8:D2:3C:AB:5F:A6:2B:A6:DC:18:8E:A3:42:ED:EC
            X509v3 Authority Key Identifier:
                keyid:B9:09:5B:B2:B6:63:62:B3:83:06:19:9D:FC:51:A8:0D:9F:FF:A0:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/B9095BB2B66362B38306199DFC51A80D9FFFA04A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9095BB2B66362B38306199DFC51A80D9FFFA04A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31322e302f32322d3235203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:c7:1f:8a:a9:66:1c:07:ad:34:75:66:72:4a:3c:51:2b:33:
         6a:d5:a1:43:88:f4:95:ce:ac:cd:d8:cd:70:56:d0:ef:1d:b6:
         24:1e:cf:c5:44:8e:ec:49:c5:1c:f1:1f:bb:03:13:8a:f4:f7:
         45:9c:ec:04:d1:05:0b:a2:18:fa:ee:ec:37:e4:04:95:03:ca:
         06:1d:8b:31:3b:da:03:7f:60:bc:ee:f8:dd:89:05:6a:33:48:
         0b:9e:22:e2:50:c2:0d:b8:25:62:e8:89:8a:5e:33:36:d1:2f:
         2a:1e:53:cb:03:63:70:24:5e:db:21:63:80:6d:e5:27:34:eb:
         1d:ab:95:8b:72:d1:95:67:a4:3d:b4:82:8f:a7:6b:cc:07:55:
         2f:36:b1:a0:c9:23:ef:b9:9e:be:5e:5a:f0:b8:19:2e:a2:8b:
         1f:cc:ea:26:1a:15:2b:b6:a1:3b:d0:76:99:3a:7d:b8:5c:58:
         3f:a7:fe:8e:06:c3:ef:f6:5f:76:d4:54:58:1a:70:d1:cf:a9:
         9d:e4:e4:b4:a2:e7:fc:61:79:f2:60:92:28:3d:83:52:e0:c9:
         fb:73:0a:1a:72:d2:73:20:fc:2c:c4:9a:97:59:08:f6:46:b4:
         e5:5c:91:fb:98:43:56:4e:40:6d:ee:2c:f4:e7:47:eb:09:cf:
         0a:d1:d0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org