Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/3133312e3232312e3138382e302f32322d3234203d3e20323634343236.roa
File:                     3133312e3232312e3138382e302f32322d3234203d3e20323634343236.roa (raw, json)
Hash identifier:          3+hBcZvHaMfvzD3DjZ9obQyJKDfcZXJbOF+2blRSNLs=
Subject key identifier:   43:24:BB:01:94:24:FB:76:B8:35:AE:4E:79:08:33:4D:D5:BE:64:B2
Certificate issuer:       /CN=2E7EF3D46EA1FA859183A72D9264A4F76D5C0707
Certificate serial:       6026AB59506452E112A67C4F74AE592F64E0AFFE
Authority key identifier: 2E:7E:F3:D4:6E:A1:FA:85:91:83:A7:2D:92:64:A4:F7:6D:5C:07:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/3133312e3232312e3138382e302f32322d3234203d3e20323634343236.roa
Signing time:             Tue 16 Jan 2024 00:00:00 +0000
ROA not before:           Mon 15 Jan 2024 23:55:00 +0000
ROA not after:            Thu 16 Jan 2025 00:00:00 +0000
asID:                     264426
IP address blocks:        131.221.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:26:ab:59:50:64:52:e1:12:a6:7c:4f:74:ae:59:2f:64:e0:af:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7EF3D46EA1FA859183A72D9264A4F76D5C0707
        Validity
            Not Before: Jan 15 23:55:00 2024 GMT
            Not After : Jan 16 00:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:fe:f3:29:a4:ac:c9:8e:0c:f5:4a:c8:ee:
                    34:6d:de:89:67:86:05:b0:89:ac:21:94:6d:32:ec:
                    d5:ac:46:ec:f6:88:0a:fb:08:7f:2d:46:75:38:00:
                    6e:df:01:46:d0:5b:0c:b0:bb:c2:9b:05:0d:2e:2f:
                    0d:d3:8e:b4:fa:85:88:87:f1:b4:96:10:97:a8:9f:
                    dd:56:67:d7:3c:1e:f9:6b:da:68:a5:47:a0:1b:7f:
                    3b:ea:45:ec:ae:00:7d:24:9d:fa:85:63:c0:df:09:
                    58:b8:21:e6:f3:d3:5d:e3:db:8f:2d:13:38:29:bc:
                    c8:4d:d1:76:5e:86:10:f0:56:21:d4:15:ba:12:1d:
                    24:63:b5:ce:b4:92:e8:6c:bc:c9:93:e5:21:fa:8e:
                    18:60:24:e8:91:96:33:48:b8:ea:a7:10:17:7a:9b:
                    63:0a:d4:d7:ae:80:dc:7f:bf:44:c5:10:6f:88:52:
                    92:a5:8b:e2:51:d8:7f:88:3f:dc:47:81:4d:e8:53:
                    8e:1b:8b:97:cd:5a:30:a8:dd:50:06:51:db:0e:e4:
                    ae:b3:98:8f:f5:9e:94:e0:07:42:11:ef:a2:2b:63:
                    a3:88:fb:1e:8c:14:0b:eb:3c:12:d5:a3:be:fb:42:
                    58:6b:16:ef:30:b4:3c:d6:2b:91:74:cc:84:30:f3:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:24:BB:01:94:24:FB:76:B8:35:AE:4E:79:08:33:4D:D5:BE:64:B2
            X509v3 Authority Key Identifier:
                keyid:2E:7E:F3:D4:6E:A1:FA:85:91:83:A7:2D:92:64:A4:F7:6D:5C:07:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/3133312e3232312e3138382e302f32322d3234203d3e20323634343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:35:7a:75:27:a2:0a:21:2f:a5:b5:11:23:e3:c1:bc:65:48:
         2b:d4:1d:66:e0:b3:9e:60:d3:e8:36:cb:c4:15:7f:81:8c:a7:
         81:4b:0d:85:91:3c:51:db:53:06:88:f3:41:08:4c:3b:2c:ce:
         8d:84:f3:8b:42:46:f0:bc:03:32:11:e3:39:7e:2a:bf:bc:36:
         b2:b2:94:52:52:6b:3b:6b:f6:26:3c:7c:96:48:f0:46:72:ee:
         2a:16:85:89:02:dc:b0:20:84:27:3a:15:8c:56:a1:65:f3:43:
         6a:81:87:a2:88:cd:3a:ec:f1:3d:57:7a:98:be:5e:b1:15:ab:
         ab:31:3b:93:26:62:e2:21:0e:d3:73:eb:90:a9:9a:a7:f3:96:
         3e:8f:84:c5:52:6e:7f:ed:fa:6f:e4:40:aa:93:22:3d:3a:3d:
         9d:ed:e9:ce:b3:f6:64:6c:7e:98:1f:0f:70:7c:af:e9:15:dd:
         d0:24:2b:75:23:ca:24:5c:0c:ae:5c:c5:e3:15:25:76:b0:b8:
         bc:35:0a:f7:db:ef:cd:ca:0c:5c:1d:f6:75:76:85:7f:eb:b2:
         db:6b:49:c7:aa:71:28:02:7c:c7:85:66:ed:e9:b1:85:43:a4:
         45:30:43:4e:32:cd:ad:96:9e:c4:ac:b6:b7:17:75:22:1a:49:
         9e:5f:c5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org