Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa
File:                     3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          yTyQgj+UgJFLjy8fUFS3mLdZF/6a6g3hAxTBUSA2nTg=
Subject key identifier:   BB:64:FA:6D:2D:CD:85:FE:F8:C6:5A:FE:ED:97:69:34:C5:3B:63:15
Certificate issuer:       /CN=9B200BCD91DFF47750BD2C67A02D2E1F476C8232
Certificate serial:       1E5FA06230DF4BA22254FD04AB938FC934A7E3D9
Authority key identifier: 9B:20:0B:CD:91:DF:F4:77:50:BD:2C:67:A0:2D:2E:1F:47:6C:82:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa
Signing time:             Tue 22 Aug 2023 19:52:46 +0000
ROA not before:           Tue 22 Aug 2023 19:47:46 +0000
ROA not after:            Tue 20 Aug 2024 19:52:46 +0000
asID:                     264381
IP address blocks:        131.100.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5f:a0:62:30:df:4b:a2:22:54:fd:04:ab:93:8f:c9:34:a7:e3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B200BCD91DFF47750BD2C67A02D2E1F476C8232
        Validity
            Not Before: Aug 22 19:47:46 2023 GMT
            Not After : Aug 20 19:52:46 2024 GMT
        Subject: CN=BB64FA6D2DCD85FEF8C65AFEED976934C53B6315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:17:a9:2b:fe:af:96:f3:76:e2:99:e4:8a:
                    1e:13:5c:38:f3:0c:a5:e3:39:31:bc:5b:d6:38:18:
                    39:ad:49:d3:8a:c3:4e:e3:cf:6b:86:3b:cb:4f:5a:
                    5b:3d:cc:a5:ce:17:c3:92:77:0d:02:bf:1b:f7:e4:
                    ed:a7:97:85:c7:50:7c:d8:fc:63:81:c5:f7:ed:ca:
                    2b:9b:56:c9:26:c2:03:e2:7f:4b:d2:3e:f6:75:87:
                    33:82:51:19:2a:81:aa:81:06:90:8c:49:f1:c7:bc:
                    80:f2:e6:18:fe:18:ac:b8:5f:87:f3:ff:32:07:4e:
                    0a:1f:9f:bd:8d:d7:a6:64:4c:b4:d1:2e:6a:9a:b5:
                    7e:53:05:ea:71:6b:a1:56:1b:7b:a1:4b:09:bb:d8:
                    8a:7b:0b:cc:af:8f:d9:09:0d:c2:a3:84:b8:35:00:
                    7a:ce:35:47:20:47:5f:db:f8:08:b2:5b:af:2d:e8:
                    77:0b:12:2a:9c:0e:14:1c:80:82:f1:ee:aa:a5:81:
                    f6:26:ee:48:fb:cc:78:ec:eb:4f:68:ac:4c:80:40:
                    7f:cf:99:8b:ab:4a:15:95:fe:48:c9:af:7a:7b:72:
                    e4:e2:ac:56:99:3c:f8:dc:74:81:21:80:9a:4c:50:
                    14:b2:61:84:a3:7b:15:68:b8:0d:21:0e:c8:69:98:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:64:FA:6D:2D:CD:85:FE:F8:C6:5A:FE:ED:97:69:34:C5:3B:63:15
            X509v3 Authority Key Identifier:
                keyid:9B:20:0B:CD:91:DF:F4:77:50:BD:2C:67:A0:2D:2E:1F:47:6C:82:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:cd:98:76:b9:a3:55:e5:00:be:f6:20:6b:f1:57:68:c9:72:
         67:5d:bf:51:a4:7c:84:a3:9d:dc:dc:e6:a1:03:36:26:c9:5e:
         0c:60:da:2a:d1:76:b0:a7:35:97:bf:fa:05:5b:a3:f6:b4:83:
         32:99:e2:10:b2:cf:48:91:43:03:f5:d6:45:ec:f5:19:b5:d0:
         58:bd:5f:59:a3:ee:2e:58:69:b5:8a:11:19:d6:cf:97:24:6a:
         17:de:8c:7b:fd:77:77:62:02:5f:fb:10:6c:a3:4a:b0:a5:4e:
         c0:b6:db:5f:2c:2b:3b:42:dc:43:f1:0c:57:4e:4f:7b:bc:29:
         4b:21:a9:81:d5:f5:b4:c0:0e:17:ba:7d:2e:e4:b8:2e:3c:b5:
         cf:6a:16:fb:a3:e5:a5:f7:86:7e:69:42:65:5f:49:5e:e9:f2:
         fc:12:1a:e8:cd:c2:50:65:aa:a4:7f:c3:8c:8d:d5:99:79:58:
         3f:51:2c:c5:d4:22:be:28:8f:7f:9d:c4:88:da:e5:55:9e:fc:
         ee:d6:34:b5:59:c2:3c:dd:42:c0:b0:2b:de:d2:cf:04:4d:1c:
         6c:1b:27:0e:f5:e9:35:05:cc:07:67:94:56:08:49:0a:ca:4b:
         eb:f2:9d:a3:c6:e4:83:93:d7:dc:50:bb:49:0a:6a:ee:5a:ff:
         d7:19:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org