Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32322d3232203d3e20323730393536.roa
File:                     3133312e3232312e37362e302f32322d3232203d3e20323730393536.roa (raw, json)
Hash identifier:          5hhTpwGx6VgHbz1OmnQFXBciPnX0oHJ7B3xgBaKY0mg=
Subject key identifier:   1A:1C:ED:3A:41:79:E2:1F:7F:D1:10:5E:88:5D:57:A8:B8:6F:60:AC
Certificate issuer:       /CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
Certificate serial:       6A818CE386CBC2AC321DB0E5CD38840F2FBA00BB
Authority key identifier: BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32322d3232203d3e20323730393536.roa
Signing time:             Sun 16 Apr 2023 22:35:11 +0000
ROA not before:           Sun 16 Apr 2023 22:30:11 +0000
ROA not after:            Sun 14 Apr 2024 22:35:11 +0000
asID:                     270956
IP address blocks:        131.221.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:81:8c:e3:86:cb:c2:ac:32:1d:b0:e5:cd:38:84:0f:2f:ba:00:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
        Validity
            Not Before: Apr 16 22:30:11 2023 GMT
            Not After : Apr 14 22:35:11 2024 GMT
        Subject: CN=1A1CED3A4179E21F7FD1105E885D57A8B86F60AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:65:fa:94:03:dc:dc:d2:91:c3:38:83:be:
                    4f:7e:de:c1:5d:21:5b:85:fa:5b:a3:9d:fa:39:f5:
                    da:0e:1c:d5:08:01:a5:dd:d3:ad:45:ca:6a:84:fe:
                    69:d8:12:85:3a:28:b1:8b:5c:5c:f2:e2:a3:2e:07:
                    07:be:83:fd:c2:7d:69:f5:67:66:98:6c:4e:5a:31:
                    8d:bc:cc:ef:6d:92:c7:2a:19:f2:d6:50:65:92:06:
                    37:dc:d4:92:c6:47:48:09:08:76:4a:f4:5a:3f:83:
                    27:3d:01:11:60:fc:5c:43:b4:84:4b:c9:ea:ec:7e:
                    a8:77:50:f1:65:0e:82:55:05:62:d6:4d:7d:de:c7:
                    06:25:cd:fd:cd:42:f1:70:9a:fc:79:e1:40:ce:93:
                    8d:1c:16:37:ae:98:cc:e7:1d:40:ef:5b:49:1a:e4:
                    b9:6a:a1:5c:2a:2b:4f:f8:9d:da:fc:ca:e5:83:f1:
                    df:4b:e6:8f:3b:52:c6:d1:0c:9c:01:93:db:10:be:
                    36:9e:aa:8e:f6:76:ab:33:31:bd:f1:b1:2e:db:ac:
                    74:6a:e5:c2:1f:2d:81:bf:22:07:bb:b0:19:a4:d8:
                    0f:14:b5:d1:a9:ff:88:31:b6:0d:7a:06:56:01:7b:
                    91:7e:fe:4e:64:e8:aa:fd:f3:f3:17:71:20:fc:3e:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1C:ED:3A:41:79:E2:1F:7F:D1:10:5E:88:5D:57:A8:B8:6F:60:AC
            X509v3 Authority Key Identifier:
                keyid:BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32322d3232203d3e20323730393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:09:ec:d2:ba:da:49:c0:8b:10:98:88:ea:a0:25:37:0c:13:
         fb:d7:65:52:60:c4:78:a1:d0:ac:8a:a8:24:76:ea:57:a3:2d:
         92:ab:e9:95:02:d0:be:b4:e3:74:d2:f7:82:9b:66:36:46:76:
         e8:a2:ee:fc:2b:da:8d:9f:e5:62:1e:dd:20:e1:4a:77:01:5d:
         f4:f2:0b:f7:c3:86:37:5b:1f:c3:1f:34:d6:12:75:65:89:58:
         22:5f:fb:57:4a:35:61:5a:91:9a:75:84:a4:8a:08:03:78:67:
         23:f1:61:fe:ca:8c:ec:75:c7:23:24:de:ec:74:b8:66:7c:a8:
         57:08:84:63:3f:f6:cb:08:4c:ff:75:90:46:f1:71:19:b9:ba:
         65:1e:74:0f:d6:a2:63:39:75:e2:c2:2a:60:48:e7:5a:5b:10:
         00:58:03:61:48:9f:51:0f:58:f4:11:08:c7:5e:59:23:2c:ad:
         c1:e6:1a:e2:41:46:0b:48:6f:58:3b:41:8c:a4:db:a4:66:65:
         a8:d0:27:96:67:7c:25:a1:bc:11:73:68:e1:86:1e:6f:6e:a8:
         b2:b9:ef:1b:b0:41:5c:7e:01:31:f1:fe:53:38:6b:00:a3:91:
         1f:07:f3:ab:fb:90:ca:5a:74:e3:bd:0a:80:d3:fd:cd:03:c4:
         24:6b:ce:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org