Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32342d3234203d3e20323730393536.roa
File:                     3133312e3232312e37362e302f32342d3234203d3e20323730393536.roa (raw, json)
Hash identifier:          rsGCEbsdaydu3U3cg94MyoGS9e6M29N5bXembkB9qoo=
Subject key identifier:   A8:7C:DE:D1:9C:F1:E9:DC:D7:83:37:30:19:87:72:14:48:5B:F9:88
Certificate issuer:       /CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
Certificate serial:       1D9DB4E597292B8ED474358BF6D03C89483B3467
Authority key identifier: BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32342d3234203d3e20323730393536.roa
Signing time:             Thu 11 May 2023 01:46:36 +0000
ROA not before:           Thu 11 May 2023 01:41:36 +0000
ROA not after:            Thu 09 May 2024 01:46:36 +0000
asID:                     270956
IP address blocks:        131.221.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9d:b4:e5:97:29:2b:8e:d4:74:35:8b:f6:d0:3c:89:48:3b:34:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
        Validity
            Not Before: May 11 01:41:36 2023 GMT
            Not After : May  9 01:46:36 2024 GMT
        Subject: CN=A87CDED19CF1E9DCD783373019877214485BF988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:13:2b:83:62:45:e2:1f:33:aa:4c:db:9d:
                    5d:cb:df:c6:09:5e:75:fe:4a:9e:d7:98:b4:ef:0d:
                    f0:48:af:a5:bb:f8:0a:42:c0:fc:4c:14:2b:db:42:
                    9b:12:e0:dd:48:21:f7:2b:bb:53:7f:1b:1a:40:63:
                    b9:9a:55:b2:c1:c0:06:dc:73:33:d9:e1:f2:82:c0:
                    da:f6:cd:d7:52:12:43:77:c2:1e:01:5a:c5:e3:9f:
                    bd:c1:07:9e:da:3c:f3:a6:40:97:20:b2:bd:f5:ee:
                    f8:51:56:82:2d:e0:42:3d:5d:4e:87:7d:84:12:8b:
                    02:78:fe:db:1c:0c:99:da:97:c8:c2:fe:19:44:1c:
                    57:e4:c1:a6:b7:8a:01:9d:f9:73:76:25:31:4b:ee:
                    bb:bc:8a:be:51:62:e6:00:35:37:b8:b1:fc:36:7c:
                    56:5c:e1:f4:ee:3b:e7:7c:af:4e:d7:a9:98:34:4b:
                    ca:79:26:fc:1b:42:76:3e:7c:5b:bc:a3:ba:71:8e:
                    bd:38:3b:d8:24:62:c8:54:b2:27:41:21:2a:d2:62:
                    da:ff:60:fb:1f:b1:8a:e5:ab:5e:e9:aa:8f:8c:27:
                    a5:e5:15:0e:e2:04:d2:df:90:9e:8e:d8:eb:2b:d3:
                    8a:62:51:f9:b2:01:24:8f:6b:c6:21:5b:5b:f9:1d:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7C:DE:D1:9C:F1:E9:DC:D7:83:37:30:19:87:72:14:48:5B:F9:88
            X509v3 Authority Key Identifier:
                keyid:BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32342d3234203d3e20323730393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:85:49:aa:51:7e:3e:71:4f:64:de:7a:6f:39:5b:bf:be:
         9f:8e:44:0d:5f:87:20:5f:8b:b4:5a:02:88:2d:aa:f6:ce:a0:
         ee:6d:b7:58:40:69:14:22:f4:0e:6e:ec:04:a2:9e:d4:85:77:
         15:dd:db:07:7e:da:df:f8:0d:c5:33:7e:c6:57:dc:0c:24:30:
         ab:a4:14:b8:79:fd:6e:c5:76:a4:b6:db:ac:8c:5c:3b:50:45:
         57:bb:c8:51:28:f9:8a:13:93:14:73:af:07:89:4f:35:a7:89:
         ec:aa:01:dc:cf:c8:46:83:11:14:d3:d1:db:e0:bf:4e:6a:75:
         89:43:4d:e8:72:03:d9:44:36:9d:67:6f:8c:d2:31:a4:12:35:
         a7:4b:8d:ab:27:8c:12:3e:c3:6c:50:d3:9b:b6:96:f1:dd:60:
         e0:43:c5:54:86:ec:24:a7:9c:5c:7d:73:af:e8:c0:2b:d2:7f:
         d0:55:f9:25:3c:a7:61:48:8b:9c:15:c5:5e:39:9b:12:2f:41:
         a0:6b:fc:ed:b5:cd:18:d9:92:08:4a:9f:91:e6:5e:ac:46:f9:
         bd:0d:ee:02:ca:22:be:62:31:14:18:0b:97:35:fd:3b:be:8f:
         97:18:9d:4a:18:87:04:c8:ed:9e:f1:6f:bb:c1:84:b1:5f:11:
         e9:81:27:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org