Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32322d3234203d3e20323730393536.roa
File:                     3133312e3232312e37362e302f32322d3234203d3e20323730393536.roa (raw, json)
Hash identifier:          qwzif+dmcVjOA4kQrQW2SwN99KTIhdUDh1lpsKbJhAw=
Subject key identifier:   0C:E7:53:EA:DC:BC:0B:E0:FF:73:E2:C7:63:A5:5E:D8:36:62:B4:1D
Certificate issuer:       /CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
Certificate serial:       29953FFB2CD1A8DAE07946F4912C6E118C432A55
Authority key identifier: BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32322d3234203d3e20323730393536.roa
Signing time:             Thu 11 May 2023 02:17:08 +0000
ROA not before:           Thu 11 May 2023 02:12:08 +0000
ROA not after:            Thu 09 May 2024 02:17:08 +0000
asID:                     270956
IP address blocks:        131.221.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:95:3f:fb:2c:d1:a8:da:e0:79:46:f4:91:2c:6e:11:8c:43:2a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
        Validity
            Not Before: May 11 02:12:08 2023 GMT
            Not After : May  9 02:17:08 2024 GMT
        Subject: CN=0CE753EADCBC0BE0FF73E2C763A55ED83662B41D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:10:b0:e2:42:19:5b:06:9f:14:5b:7a:ea:
                    63:70:68:a9:d6:0c:fb:6d:55:29:6e:98:d8:38:80:
                    3d:57:52:d7:94:6e:14:9b:2b:95:8d:a0:db:ce:07:
                    15:ad:59:9f:5f:61:92:00:3d:86:33:06:3b:d7:17:
                    0d:de:38:7a:c2:af:51:16:25:f1:f2:9a:b0:60:ff:
                    3b:01:c8:55:70:9a:3a:d8:7c:a5:2c:71:7d:6d:b2:
                    da:ee:f4:ab:c3:80:98:b2:83:99:d4:b5:84:a2:5d:
                    cf:ec:d6:0c:e5:85:73:e0:d8:1a:b5:82:c6:e6:f2:
                    ac:3c:71:f8:00:ea:16:90:7d:79:5e:d2:78:f1:56:
                    4e:1b:90:73:6f:12:1d:73:55:a3:a2:cb:7b:3a:6f:
                    b9:1d:66:07:92:b2:18:ee:c7:c4:bf:7e:39:9a:a3:
                    65:71:3e:e3:4c:77:87:6f:18:be:b9:7f:2d:41:52:
                    07:74:5d:b1:ea:3c:65:39:41:59:ff:30:7c:eb:db:
                    a4:40:3d:f4:5e:43:32:9c:7c:43:3d:3c:8a:99:fe:
                    fc:3c:1b:c5:14:88:f4:3e:0e:2d:89:8e:7a:2e:41:
                    cb:08:fe:9a:91:c2:0d:de:ae:37:4c:57:db:2c:f7:
                    7b:69:4a:88:8d:35:95:83:12:d6:44:19:4f:2c:b3:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E7:53:EA:DC:BC:0B:E0:FF:73:E2:C7:63:A5:5E:D8:36:62:B4:1D
            X509v3 Authority Key Identifier:
                keyid:BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32322d3234203d3e20323730393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:fb:3a:8c:9d:f0:3f:c9:b6:09:58:e6:48:2f:64:3c:94:c1:
         75:d3:48:4e:fc:0a:7d:aa:07:06:28:2c:5e:d3:96:9b:47:55:
         a7:53:ed:a3:4e:78:b4:8e:1e:66:88:e6:8c:19:1f:08:8b:3f:
         00:f9:b2:68:4a:11:f1:80:07:77:11:1f:c1:8c:d8:96:c8:29:
         90:d8:53:91:5c:b9:cb:77:73:eb:3b:1e:1e:37:22:c8:cf:47:
         69:62:05:03:2f:d4:a6:fc:7f:a3:ed:e9:01:e2:2e:da:37:0d:
         63:c1:fc:21:bc:3c:19:8f:d4:9e:e8:c3:f9:d9:75:07:eb:f4:
         ee:92:2c:c8:0e:84:42:27:63:60:78:5f:21:d1:fe:9c:25:15:
         8a:9c:68:cc:f0:31:0a:ef:ab:b7:03:1e:b8:0a:17:92:f6:60:
         72:b5:95:67:d6:cb:d7:92:83:74:c5:3d:04:f8:0d:cd:ae:1e:
         dd:4f:50:f2:fd:1e:a2:e4:f0:05:65:40:b9:8b:e3:e7:5a:eb:
         8e:d0:34:df:da:76:39:5e:d9:27:e1:df:9e:89:62:78:f8:95:
         b4:69:ab:c0:ef:e9:66:96:f4:4a:97:9f:4b:99:eb:b6:cb:19:
         8d:3f:2b:ff:1e:8b:13:d6:f1:1d:28:26:3f:83:e2:a0:c1:52:
         e1:4d:c7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org