Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133312e3139362e34302e302f32322d3234203d3e20323637333838.roa
File:                     3133312e3139362e34302e302f32322d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          dlo7SoVilKDTYlt2sETc8/nPVRRrzgFue7Zt3oo6rKE=
Subject key identifier:   75:0A:3D:E2:92:3B:86:76:EB:DF:DF:A3:56:B8:5E:DA:C1:CD:03:1E
Certificate issuer:       /CN=BDF87BF76BB69D53875E8C1E1D2E5F88253D3025
Certificate serial:       3263EFE68978A9DBAE52F06415FA1835E1BBC7F5
Authority key identifier: BD:F8:7B:F7:6B:B6:9D:53:87:5E:8C:1E:1D:2E:5F:88:25:3D:30:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133312e3139362e34302e302f32322d3234203d3e20323637333838.roa
Signing time:             Tue 12 Mar 2024 21:17:06 +0000
ROA not before:           Tue 12 Mar 2024 21:12:06 +0000
ROA not after:            Tue 11 Mar 2025 21:17:06 +0000
asID:                     267388
IP address blocks:        131.196.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:63:ef:e6:89:78:a9:db:ae:52:f0:64:15:fa:18:35:e1:bb:c7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF87BF76BB69D53875E8C1E1D2E5F88253D3025
        Validity
            Not Before: Mar 12 21:12:06 2024 GMT
            Not After : Mar 11 21:17:06 2025 GMT
        Subject: CN=750A3DE2923B8676EBDFDFA356B85EDAC1CD031E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:11:0e:0c:3c:88:db:b7:a7:67:25:07:c6:
                    87:b3:f7:47:2f:b6:ca:3a:cf:dc:15:7c:23:14:5d:
                    f4:64:ee:ba:88:c0:af:27:3c:06:ad:95:d4:1b:78:
                    ce:b2:c5:96:9d:8f:eb:38:0b:8b:e9:0e:62:32:e1:
                    7c:f8:46:17:b4:bd:13:d0:fa:81:64:c0:83:e4:85:
                    dd:81:45:6f:11:6d:fd:cf:e3:05:04:0b:40:ff:e2:
                    18:02:35:13:8a:21:90:d2:64:b3:7b:4a:de:3b:6a:
                    be:fa:07:37:1f:ef:df:0c:c4:89:ff:28:9a:67:d1:
                    0a:77:7d:ed:b3:62:18:da:e2:13:24:f1:17:5f:50:
                    81:c2:fc:8e:6d:de:ee:bb:38:b6:32:d5:2b:94:9d:
                    d2:f9:ba:10:37:6c:b1:87:90:d1:c5:67:70:07:c8:
                    03:4c:0d:78:b8:df:4a:03:2e:5b:f1:c2:56:ea:11:
                    e2:f6:da:e0:7e:93:0d:7b:7d:e3:31:2d:37:54:01:
                    d9:f0:37:23:30:89:e9:d4:9e:00:bf:27:85:1f:c9:
                    99:23:a6:6f:ec:10:e7:b4:86:01:ca:c5:9a:46:1d:
                    ee:c2:f9:c7:54:22:0a:12:e3:63:72:77:f0:96:0f:
                    72:67:de:36:32:5f:1e:8a:9a:a8:5f:f3:4c:94:d1:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0A:3D:E2:92:3B:86:76:EB:DF:DF:A3:56:B8:5E:DA:C1:CD:03:1E
            X509v3 Authority Key Identifier:
                keyid:BD:F8:7B:F7:6B:B6:9D:53:87:5E:8C:1E:1D:2E:5F:88:25:3D:30:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133312e3139362e34302e302f32322d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:d4:b4:f8:d0:d5:95:a7:be:ae:81:32:61:b9:58:ed:56:c3:
         53:23:5c:a0:7e:ba:69:bd:d3:8f:4c:31:f4:91:3b:2d:07:03:
         d1:4f:3c:90:ef:31:2e:1b:6d:5b:6f:56:47:5f:7d:aa:9b:82:
         ef:05:23:d1:e5:7e:e0:07:3e:2f:0d:b0:a4:31:bf:77:b9:1c:
         db:74:fb:7c:f8:79:ce:f9:3d:d0:4f:f5:67:52:01:9a:55:98:
         72:50:b5:61:80:ad:08:73:15:71:e2:ea:71:f5:59:1b:cc:ec:
         9d:ab:0b:fc:d6:d6:ae:17:4b:ca:a6:fc:6f:be:b5:b7:1a:a2:
         80:96:34:85:78:63:84:e2:61:af:31:b4:35:aa:19:b6:49:b1:
         d4:db:e0:9e:d6:9e:b9:43:c5:0b:ab:a1:83:fd:a7:72:6f:9e:
         57:8d:d9:5a:0a:e3:68:d4:94:55:20:04:8b:6e:f6:6e:13:e9:
         17:49:c2:50:60:39:22:02:c5:69:f5:bb:1e:d1:d3:79:f1:d7:
         17:2f:02:5a:43:80:64:27:e4:ff:ea:f7:f5:62:2e:2e:e8:26:
         4d:f5:8c:a7:1b:8f:95:93:16:cd:55:6d:ed:48:54:22:1d:34:
         f7:46:c3:94:d2:dc:76:f8:10:72:eb:34:3d:c5:ea:f7:b6:71:
         1f:ae:fc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org