Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37382e302f32332d3233203d3e20323730393536.roa
File:                     3133312e3232312e37382e302f32332d3233203d3e20323730393536.roa (raw, json)
Hash identifier:          RMy2b+wzebbXeXpgWjtJoaOpqe853k6lUBs4RR8YVZs=
Subject key identifier:   E5:EF:2A:F1:9E:36:2A:9C:6F:91:F1:EC:F3:86:32:47:54:19:85:18
Certificate issuer:       /CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
Certificate serial:       2ED57383013F3F0F0D9BB60A2FA37ACCFCE04932
Authority key identifier: BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37382e302f32332d3233203d3e20323730393536.roa
Signing time:             Thu 11 May 2023 01:47:29 +0000
ROA not before:           Thu 11 May 2023 01:42:29 +0000
ROA not after:            Thu 09 May 2024 01:47:29 +0000
asID:                     270956
IP address blocks:        131.221.78.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d5:73:83:01:3f:3f:0f:0d:9b:b6:0a:2f:a3:7a:cc:fc:e0:49:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
        Validity
            Not Before: May 11 01:42:29 2023 GMT
            Not After : May  9 01:47:29 2024 GMT
        Subject: CN=E5EF2AF19E362A9C6F91F1ECF386324754198518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e0:d3:40:8e:4f:cb:15:19:21:f9:12:62:2f:
                    b8:ee:b7:94:38:d2:36:94:1f:5d:77:57:0d:28:05:
                    f9:44:6a:b3:13:3e:99:2c:8b:55:82:a5:f5:87:da:
                    6b:ac:8d:d9:6c:97:5a:1d:ed:86:77:93:14:93:43:
                    37:af:9d:a8:35:d3:9a:e0:25:66:af:f3:b1:c9:9c:
                    9b:d3:25:e6:5e:82:a3:ec:ca:8e:de:59:df:94:3c:
                    ea:87:a3:d7:e1:a1:ec:1b:f5:ab:a4:9a:16:2f:82:
                    10:f3:dd:60:c9:b2:a0:5d:b5:7a:1f:50:67:82:21:
                    d2:c7:da:01:c3:32:3d:7a:9c:5a:db:4f:4c:78:ca:
                    bd:d3:e0:b2:14:98:75:de:db:8f:5e:7c:1b:00:a8:
                    08:ef:b1:df:bc:ed:1b:dc:ba:4d:bc:da:0b:db:2d:
                    bc:0f:ca:2a:22:80:6d:2b:d9:06:f1:51:39:52:f0:
                    5f:23:74:d3:db:92:92:eb:a1:45:e1:e8:e0:c8:af:
                    9a:13:72:5e:d4:79:50:38:fd:d5:5f:3e:06:45:e9:
                    db:75:db:06:c2:7b:f4:ef:1d:bd:3d:51:cf:3b:e7:
                    4b:38:6a:eb:d7:ca:12:66:58:5a:cb:66:b2:77:f3:
                    f8:77:51:b8:3b:78:31:37:05:9b:b9:8d:dc:08:62:
                    20:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EF:2A:F1:9E:36:2A:9C:6F:91:F1:EC:F3:86:32:47:54:19:85:18
            X509v3 Authority Key Identifier:
                keyid:BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37382e302f32332d3233203d3e20323730393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:8e:8c:79:c2:a5:cb:bf:99:ff:b7:fb:45:03:3f:cb:a6:04:
         d9:20:d4:8a:c0:9b:89:97:b8:fa:03:4d:b3:ae:2d:2c:c1:1f:
         f0:5b:a5:8b:d5:0c:cc:38:ec:74:30:aa:c5:18:ca:ca:0d:83:
         68:ac:25:11:29:07:2d:d0:d6:8c:f9:83:fd:20:70:96:a9:f5:
         6a:1b:6f:11:ab:1f:3a:86:55:f6:74:40:d6:08:f4:d9:68:38:
         88:c8:0f:f2:12:ce:2a:8f:be:4d:16:c6:63:24:5f:68:9c:b7:
         df:e4:f7:a8:b0:7c:20:8b:e3:f7:84:1a:95:36:f3:ae:1a:cc:
         e3:ff:e8:07:86:d1:c3:a7:73:62:6d:1e:e3:72:23:6a:b4:75:
         b1:e2:78:19:72:99:6f:90:c2:36:9f:2f:a8:2d:87:b7:53:ef:
         0c:1c:5a:ea:48:ee:06:28:ba:c9:f0:2d:1c:d2:ae:9a:4e:0f:
         64:06:85:7b:ae:f8:ad:ac:49:fe:1a:62:7f:c1:1b:9f:8f:4d:
         c3:8d:ae:d5:73:5a:5b:21:18:91:d4:1a:9a:5d:f0:da:b0:82:
         93:4b:2f:50:cb:f8:bc:f5:12:3c:7a:ee:a6:47:8d:7e:7d:d3:
         8e:6f:2c:72:d4:06:9f:bf:89:4e:bd:03:88:2c:e5:d6:37:9c:
         ab:af:8e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org