Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133312e3130302e3132342e302f32322d3234203d3e203631363332.roa
File:                     3133312e3130302e3132342e302f32322d3234203d3e203631363332.roa (raw, json)
Hash identifier:          cHU/qSa61HyRwebMc7Vq7Rg1b/V8GaTYcFyxZwj17ew=
Subject key identifier:   92:74:14:DD:55:79:A8:03:65:15:BA:26:78:51:01:8F:23:6F:93:F9
Certificate issuer:       /CN=A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4
Certificate serial:       7025151C16625A685833AC8B98B5057DBAE450F9
Authority key identifier: A7:A9:4F:13:9E:AB:DF:3D:B9:FC:5F:1C:56:6F:4C:7A:64:D5:87:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133312e3130302e3132342e302f32322d3234203d3e203631363332.roa
Signing time:             Mon 21 Feb 2022 14:20:01 +0000
ROA not before:           Mon 21 Feb 2022 14:15:01 +0000
ROA not after:            Mon 20 Feb 2023 14:20:01 +0000
asID:                     61632
IP address blocks:        131.100.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:25:15:1c:16:62:5a:68:58:33:ac:8b:98:b5:05:7d:ba:e4:50:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4
        Validity
            Not Before: Feb 21 14:15:01 2022 GMT
            Not After : Feb 20 14:20:01 2023 GMT
        Subject: CN=3082010A0282010100B63D06CEFFEAFA367B438DD55A55A4486FE768C9188EF50852F8B2EC8C17591FD166CE418EAB57E175CC207CFC07FC535182E2F8EF1545DC720DE23B67732586B334C2D918E4C298A2BD14CB8090AAC29E7513B290FAF69A8F31EFDFA22818681043046FDB8A7A0ED04FB317F307E984539DAFF90295174923DE715EDBFB918150A52B2A3284E00C9A159EE1FC4182B6758BC89CEDC4B37ED2E85716080F0FA3C5BF73526334513DF2EA04EE1ADF594CF5FCB6225B9DCF5394B86E4E3A2822C9A8F1924FB5CF9F3279F9ADDB77E5AC050319DDC343243489FD8303AADCCEA2E77436B44509FF6DEE4A54EC83D52404845863D32C713CEBB96B993F481C0EE8A30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:06:ce:ff:ea:fa:36:7b:43:8d:d5:5a:55:
                    a4:48:6f:e7:68:c9:18:8e:f5:08:52:f8:b2:ec:8c:
                    17:59:1f:d1:66:ce:41:8e:ab:57:e1:75:cc:20:7c:
                    fc:07:fc:53:51:82:e2:f8:ef:15:45:dc:72:0d:e2:
                    3b:67:73:25:86:b3:34:c2:d9:18:e4:c2:98:a2:bd:
                    14:cb:80:90:aa:c2:9e:75:13:b2:90:fa:f6:9a:8f:
                    31:ef:df:a2:28:18:68:10:43:04:6f:db:8a:7a:0e:
                    d0:4f:b3:17:f3:07:e9:84:53:9d:af:f9:02:95:17:
                    49:23:de:71:5e:db:fb:91:81:50:a5:2b:2a:32:84:
                    e0:0c:9a:15:9e:e1:fc:41:82:b6:75:8b:c8:9c:ed:
                    c4:b3:7e:d2:e8:57:16:08:0f:0f:a3:c5:bf:73:52:
                    63:34:51:3d:f2:ea:04:ee:1a:df:59:4c:f5:fc:b6:
                    22:5b:9d:cf:53:94:b8:6e:4e:3a:28:22:c9:a8:f1:
                    92:4f:b5:cf:9f:32:79:f9:ad:db:77:e5:ac:05:03:
                    19:dd:c3:43:24:34:89:fd:83:03:aa:dc:ce:a2:e7:
                    74:36:b4:45:09:ff:6d:ee:4a:54:ec:83:d5:24:04:
                    84:58:63:d3:2c:71:3c:eb:b9:6b:99:3f:48:1c:0e:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:74:14:DD:55:79:A8:03:65:15:BA:26:78:51:01:8F:23:6F:93:F9
            X509v3 Authority Key Identifier:
                keyid:A7:A9:4F:13:9E:AB:DF:3D:B9:FC:5F:1C:56:6F:4C:7A:64:D5:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133312e3130302e3132342e302f32322d3234203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:77:21:a4:ff:aa:37:bb:e2:6b:11:f4:36:72:95:de:e7:e7:
         31:5e:34:44:99:08:21:ff:cf:24:01:8f:e9:e7:76:13:cf:19:
         e4:43:54:5f:2c:6e:d9:21:4a:c6:2f:db:a0:6e:84:eb:59:33:
         54:fd:a9:27:de:fb:6f:cf:db:aa:c7:3d:54:26:96:df:3b:f5:
         13:38:93:f7:95:db:6a:c8:fa:ae:92:13:99:f3:72:a3:1a:c0:
         92:6a:d4:56:56:94:ab:e5:4c:53:ba:f0:07:91:05:29:8f:af:
         2a:12:88:0a:21:1e:cf:73:50:af:28:50:29:d1:7f:f8:0a:bb:
         12:2c:57:df:af:81:42:3e:b4:54:93:96:14:2c:ee:20:05:9e:
         18:02:a5:a1:f9:82:62:3d:c2:e4:53:6b:9b:7f:0f:52:64:a7:
         b9:34:9b:d3:6a:58:d1:35:1d:3a:22:5e:cd:41:5f:a0:72:65:
         d1:92:06:1a:ab:1f:d4:3d:b0:00:2e:72:ec:b8:13:a6:a6:60:
         a7:42:5f:34:da:57:af:62:7e:c7:5a:f1:bb:52:9b:1c:fb:ae:
         2a:22:b7:b5:cd:70:60:4d:7a:60:74:bc:76:02:4c:2e:25:0f:
         48:ad:e1:7e:5d:79:3b:8f:a0:63:4f:25:bc:e1:a7:75:bc:de:
         50:bf:c5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org