Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37392e302f32342d3234203d3e20323730393536.roa
File:                     3133312e3232312e37392e302f32342d3234203d3e20323730393536.roa (raw, json)
Hash identifier:          rBEo0OSwmgn0N9fO0Rg2oQjEoXAbkxd2Zo9ivgK5NMw=
Subject key identifier:   81:51:9A:3A:0E:69:51:3F:01:74:21:46:7B:12:9C:B2:38:1F:56:45
Certificate issuer:       /CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
Certificate serial:       47EC30CFD17CA0F177B93A5083EF8B9F392699EE
Authority key identifier: BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37392e302f32342d3234203d3e20323730393536.roa
Signing time:             Thu 11 May 2023 01:45:37 +0000
ROA not before:           Thu 11 May 2023 01:40:37 +0000
ROA not after:            Thu 09 May 2024 01:45:37 +0000
asID:                     270956
IP address blocks:        131.221.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ec:30:cf:d1:7c:a0:f1:77:b9:3a:50:83:ef:8b:9f:39:26:99:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
        Validity
            Not Before: May 11 01:40:37 2023 GMT
            Not After : May  9 01:45:37 2024 GMT
        Subject: CN=81519A3A0E69513F017421467B129CB2381F5645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5a:85:c9:a7:7a:79:cc:b0:f0:8b:ee:f4:bd:
                    e4:c6:23:fc:f9:8b:e4:d3:ea:cf:8c:68:4d:8a:96:
                    6f:a9:e8:ac:54:a9:d6:8e:41:b3:17:13:74:96:d3:
                    0c:f6:d4:52:b9:8e:8c:d3:cf:9a:82:a1:a0:60:20:
                    a1:d4:50:0f:16:81:ca:68:6c:1d:f3:b2:16:28:d1:
                    3f:13:10:e8:9c:fa:de:a1:d0:2b:46:9f:18:db:67:
                    f1:81:0f:4b:4c:fd:f4:62:2b:29:fb:bb:11:14:40:
                    4f:e7:00:93:60:e3:a6:56:93:f0:89:55:07:47:28:
                    ac:b7:ac:d0:4d:e3:c8:16:ab:8c:0c:82:d6:a3:0f:
                    b2:0e:e4:2b:da:e6:3f:a0:9c:6a:0f:8f:b5:89:8d:
                    28:ee:e8:d7:ab:a9:05:e9:60:97:6f:2a:c4:69:7e:
                    d1:8c:8d:8c:97:cc:07:08:1f:a1:a7:51:da:d0:99:
                    05:40:8f:df:4f:dd:77:d6:56:65:b0:8a:ed:06:28:
                    e7:6b:38:a0:b0:60:72:b6:4a:e1:85:7b:d9:a3:31:
                    89:ae:3f:a6:dd:57:d2:33:22:db:1c:6e:cc:62:5b:
                    68:be:d2:e7:4d:b1:e9:c6:52:75:aa:08:44:4e:f5:
                    a2:ec:cf:49:42:64:d2:b4:92:eb:aa:de:92:a6:a3:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:51:9A:3A:0E:69:51:3F:01:74:21:46:7B:12:9C:B2:38:1F:56:45
            X509v3 Authority Key Identifier:
                keyid:BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37392e302f32342d3234203d3e20323730393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:c7:87:5f:2f:53:11:d4:66:d2:db:7e:8b:83:a9:3c:93:
         35:45:cf:d0:e6:d6:9f:1f:03:5b:04:b3:46:4c:27:24:67:95:
         a9:24:1a:26:d9:d8:91:d8:d6:5b:05:60:1d:71:05:05:21:fa:
         c1:48:23:91:c7:11:fc:c7:4d:9d:9e:0c:3e:69:0d:9b:bd:60:
         f9:0b:19:5f:83:63:45:69:6a:23:fa:e8:be:3e:66:dc:35:e2:
         cc:30:8c:ad:aa:0a:35:c3:03:a5:b1:2e:51:99:ac:a7:c8:2a:
         27:5b:9b:06:3d:ad:b1:c3:e5:f7:7e:87:70:43:59:f4:eb:09:
         44:14:a9:9e:36:d7:0f:86:8a:8f:f8:bf:72:a7:95:04:a5:2d:
         3e:56:b2:0b:f8:eb:e8:a2:f7:44:f4:b5:6a:8a:e9:21:7b:7a:
         23:81:76:60:a8:00:95:fc:02:a7:c4:fb:50:b0:13:29:c6:65:
         e0:4c:7b:5e:bb:4f:1a:e9:51:61:e1:14:0e:f2:24:22:65:98:
         23:ea:0f:ac:07:32:80:56:56:03:e5:d9:53:a4:e4:88:17:d6:
         e8:15:06:5a:27:52:ad:e1:fe:5c:b4:a3:90:80:49:b4:65:dd:
         72:66:70:17:11:57:31:86:df:9e:cc:f8:7e:70:da:8b:33:d5:
         ab:36:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org