Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3133312e3136312e3137322e302f32322d3234203d3e20323634333831.roa
File:                     3133312e3136312e3137322e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          cMWDtftkeLLBIrCAt3y+1OkNMnZOFrwz39ZbrUmqqJA=
Subject key identifier:   90:A4:3D:E9:C8:A2:8E:EF:F8:D2:CC:34:63:B2:44:2E:D7:1E:FC:F5
Certificate issuer:       /CN=9B200BCD91DFF47750BD2C67A02D2E1F476C8232
Certificate serial:       0BA7815801A35162850018E88D19156144BD2240
Authority key identifier: 9B:20:0B:CD:91:DF:F4:77:50:BD:2C:67:A0:2D:2E:1F:47:6C:82:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3133312e3136312e3137322e302f32322d3234203d3e20323634333831.roa
Signing time:             Thu 15 Jun 2023 21:20:59 +0000
ROA not before:           Thu 15 Jun 2023 21:15:59 +0000
ROA not after:            Thu 13 Jun 2024 21:20:59 +0000
asID:                     264381
IP address blocks:        131.161.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a7:81:58:01:a3:51:62:85:00:18:e8:8d:19:15:61:44:bd:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B200BCD91DFF47750BD2C67A02D2E1F476C8232
        Validity
            Not Before: Jun 15 21:15:59 2023 GMT
            Not After : Jun 13 21:20:59 2024 GMT
        Subject: CN=90A43DE9C8A28EEFF8D2CC3463B2442ED71EFCF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4f:de:98:14:a9:a8:d7:9a:5a:1d:fa:fb:fd:
                    d8:db:f8:52:33:4d:47:2e:e4:8b:d7:20:79:c2:46:
                    c5:27:1a:39:1b:ec:75:03:29:70:20:aa:11:4f:14:
                    47:13:c8:e7:67:17:16:f1:cc:84:2d:4a:93:68:1e:
                    53:1c:33:4b:f5:24:6d:7c:c4:75:ca:98:40:e4:22:
                    7e:c3:23:ac:ce:68:1e:62:8c:28:ba:b7:c4:ea:ab:
                    67:3d:25:d0:9b:16:2b:b6:29:e6:68:da:cf:72:42:
                    dc:8b:a1:a8:e5:8d:c3:70:84:8a:ad:ef:e3:a9:d3:
                    78:e3:8b:64:00:2b:42:81:c9:4d:f1:b5:5c:e6:37:
                    8f:74:d4:ee:45:6f:31:a5:d5:7b:4e:3c:ab:8b:2f:
                    1f:c6:21:9b:d9:81:52:91:2d:3b:8a:04:6c:b0:ba:
                    5a:e2:23:26:cc:17:b7:8c:5d:44:10:01:90:9c:0f:
                    25:cb:aa:39:5d:7f:f2:52:01:49:10:32:5b:ce:2d:
                    3c:98:1d:d0:1f:f7:ff:32:bb:02:85:74:cc:b3:d5:
                    c2:eb:76:73:fe:e3:aa:43:18:e6:a3:69:23:de:2e:
                    dd:02:e7:e5:c3:58:66:4e:b0:ad:fe:b3:78:f9:95:
                    cf:a0:52:1f:55:ed:87:87:30:ee:66:54:cc:6d:c7:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A4:3D:E9:C8:A2:8E:EF:F8:D2:CC:34:63:B2:44:2E:D7:1E:FC:F5
            X509v3 Authority Key Identifier:
                keyid:9B:20:0B:CD:91:DF:F4:77:50:BD:2C:67:A0:2D:2E:1F:47:6C:82:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3133312e3136312e3137322e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:f1:79:78:51:8a:c9:e2:63:80:24:3b:80:0d:8f:b4:85:ac:
         3e:cc:c4:2e:4e:57:0d:42:bd:62:93:11:ad:3e:f9:33:0d:e1:
         49:09:49:dd:62:73:77:60:6f:8a:b9:7f:29:68:1d:e9:fd:5b:
         7e:6f:17:2e:7f:6d:df:eb:be:0b:4b:0d:b5:38:ff:11:50:d2:
         36:23:af:be:8e:ef:f4:df:06:a3:e7:0f:af:d1:cd:bf:78:95:
         09:2a:6f:76:f8:5f:3f:6f:7d:9d:42:44:8b:2e:98:41:0e:72:
         85:fc:f5:9e:48:9d:c1:14:ef:26:a3:58:ed:79:5f:81:02:c3:
         1e:eb:67:62:5b:f1:11:8d:ce:b3:35:b1:c5:ef:d9:46:99:91:
         94:fe:7d:91:b9:6e:99:1f:e2:58:9b:c7:77:24:5c:28:ec:62:
         59:4f:2c:21:9c:bd:e5:cf:9c:1c:ac:65:2e:58:b9:39:bd:0e:
         be:1a:d9:d3:09:ea:61:96:de:56:a2:68:0d:ab:b6:63:c0:d7:
         cb:b5:76:76:e9:76:2c:5f:ec:96:89:f5:db:40:3f:cb:ea:6f:
         be:35:0a:dd:da:44:94:78:20:33:be:25:ec:9e:b0:ac:bd:6a:
         d3:48:2b:c9:0b:0e:16:f6:13:2b:a1:2e:b8:b4:0c:4e:26:4d:
         7f:02:6f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org