Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3133312e3130302e39362e302f32322d3234203d3e203238323234.roa
File:                     3133312e3130302e39362e302f32322d3234203d3e203238323234.roa (raw, json)
Hash identifier:          A6MRX4jrIxunwJTo4JahLqtvk3KadCyl67Mbio8mB2c=
Subject key identifier:   B8:88:0F:EB:66:D6:5C:1B:8E:DA:E3:67:BD:8B:F8:E8:1A:34:B8:8B
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       7B44DEE0861461DDE605856D081584BF60E7E01B
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3133312e3130302e39362e302f32322d3234203d3e203238323234.roa
Signing time:             Wed 21 Dec 2022 17:16:49 +0000
ROA not before:           Wed 21 Dec 2022 17:11:49 +0000
ROA not after:            Wed 20 Dec 2023 17:16:49 +0000
asID:                     28224
IP address blocks:        131.100.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:44:de:e0:86:14:61:dd:e6:05:85:6d:08:15:84:bf:60:e7:e0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:49 2022 GMT
            Not After : Dec 20 17:16:49 2023 GMT
        Subject: CN=B8880FEB66D65C1B8EDAE367BD8BF8E81A34B88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fa:43:e2:e7:ef:79:20:7f:82:8d:be:6c:6a:
                    b1:59:c1:0e:19:72:9b:02:16:a7:6e:78:2d:c3:1d:
                    78:5c:63:7b:15:d3:2a:ce:c3:3a:a5:ca:0a:2b:0c:
                    ef:70:ff:b8:af:ee:1a:d8:ab:4f:1b:8e:9e:c4:b5:
                    73:77:01:6c:83:e9:fb:ff:ab:bc:26:fc:7d:b7:6c:
                    fc:35:ea:65:b4:44:db:5e:cb:5e:ad:bf:dd:41:04:
                    66:4c:87:78:52:b6:88:4e:69:be:c1:c2:eb:a8:21:
                    43:d4:81:ca:e9:7d:00:60:eb:45:0a:60:30:65:04:
                    d3:59:d6:9f:ad:f2:16:a0:4d:8e:bc:f4:d0:e4:0a:
                    91:bd:55:6b:4f:6e:cb:7d:8d:45:b1:86:13:81:61:
                    40:1d:77:a5:76:6d:ba:4b:89:55:68:f5:87:42:0b:
                    79:3f:22:05:3e:42:95:35:87:01:da:aa:c8:2f:c0:
                    6d:3f:25:41:29:e7:50:c0:8d:34:cc:b2:82:d0:02:
                    f4:cd:e3:9b:54:16:94:ef:03:de:08:97:0c:a1:b8:
                    b3:f8:53:14:37:69:14:90:18:e2:0b:ff:83:72:4e:
                    58:10:8b:1c:e8:37:65:6d:46:ed:2e:04:6f:03:41:
                    9f:4d:f5:e2:c2:5e:a7:2f:ac:a0:ec:d5:0b:be:29:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:88:0F:EB:66:D6:5C:1B:8E:DA:E3:67:BD:8B:F8:E8:1A:34:B8:8B
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3133312e3130302e39362e302f32322d3234203d3e203238323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:c2:5a:49:ad:28:ca:dd:82:56:9e:b6:a9:5a:00:5c:91:95:
         13:39:95:3a:3a:49:58:ea:a9:47:f9:55:de:dd:ae:e1:75:58:
         7c:a4:3f:9b:67:da:71:1d:39:1d:da:99:34:5c:2e:76:43:53:
         09:4f:3e:5b:86:c4:46:af:6a:a7:01:84:90:8d:b5:3d:3f:46:
         a6:36:d1:9b:19:6e:c2:b3:bc:b3:e8:27:3d:48:61:c1:b4:e0:
         61:f1:51:f7:7e:76:bb:b3:f0:4d:7f:70:31:b7:fa:9e:79:dc:
         3b:1c:c2:78:f7:9c:03:31:8e:ab:c2:8e:ea:5a:eb:84:8a:41:
         64:e8:61:33:d7:fd:f3:db:bc:a8:61:ac:93:c2:3e:06:cd:07:
         bf:3f:d6:45:cc:e6:82:d1:16:40:32:94:00:ce:59:a3:29:be:
         c7:a6:4c:73:ca:ef:bf:16:af:27:11:b5:77:3d:65:f1:79:62:
         50:4d:c5:2f:36:b6:27:27:54:07:c1:2d:a3:a8:7b:50:05:76:
         af:62:50:f8:97:66:bb:75:bd:bf:8b:65:7d:93:f1:4a:91:81:
         8f:35:5d:70:bc:cb:18:13:f9:45:cd:ae:22:1b:b0:73:c7:fb:
         00:75:de:bb:a9:b8:70:b9:27:f4:5e:ac:67:86:63:aa:c9:c2:
         3e:1e:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org