Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/3133312e3232312e3130342e302f32322d3234203d3e20323634343132.roa
File:                     3133312e3232312e3130342e302f32322d3234203d3e20323634343132.roa (raw, json)
Hash identifier:          TukQFl8t75sMyV/cSfoPAHTD8vWqH/Pv42SoukswrZI=
Subject key identifier:   10:86:0B:26:C9:5D:2E:EF:0A:B1:E4:7C:FA:95:76:5B:D0:4D:BE:E5
Certificate issuer:       /CN=D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9
Certificate serial:       2E403747BAA19AB2A64CE1CB7E42883A14494809
Authority key identifier: D6:C2:23:F2:35:2F:0D:FB:6A:59:72:27:5D:CA:2F:3C:94:71:A7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/3133312e3232312e3130342e302f32322d3234203d3e20323634343132.roa
Signing time:             Tue 21 Nov 2023 19:43:24 +0000
ROA not before:           Tue 21 Nov 2023 19:38:24 +0000
ROA not after:            Tue 19 Nov 2024 19:43:24 +0000
asID:                     264412
IP address blocks:        131.221.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:40:37:47:ba:a1:9a:b2:a6:4c:e1:cb:7e:42:88:3a:14:49:48:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9
        Validity
            Not Before: Nov 21 19:38:24 2023 GMT
            Not After : Nov 19 19:43:24 2024 GMT
        Subject: CN=10860B26C95D2EEF0AB1E47CFA95765BD04DBEE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:0e:05:39:03:9b:a3:9c:4f:2f:8d:29:e7:
                    ac:86:19:cb:b4:87:b2:90:f8:e6:00:68:0d:aa:2d:
                    69:da:64:9e:3e:27:39:05:c7:5c:2b:66:6b:25:5b:
                    24:09:2d:7d:95:51:8d:24:b9:85:8d:37:c5:63:51:
                    0a:a8:83:fd:d9:d4:53:f3:13:7b:21:83:6a:cd:f8:
                    43:42:36:68:16:7a:d3:80:e5:8d:d5:62:b7:ee:ad:
                    de:aa:71:06:ad:7d:62:95:de:a8:e2:46:41:da:dc:
                    e2:47:5e:50:4b:87:f8:a1:ed:c1:39:65:9e:f7:42:
                    b7:12:70:92:29:c9:39:a0:96:d5:c6:9e:59:b9:73:
                    9a:31:f6:29:45:92:ae:55:00:7c:e1:49:7b:ff:0c:
                    8c:a9:fa:5d:ab:30:bd:4a:7d:f3:19:d7:ec:41:1a:
                    9b:00:d9:fc:01:d6:e3:05:f2:c2:c8:b8:32:c7:be:
                    62:dc:82:8d:fc:d8:f2:fe:3b:21:2f:09:a1:1e:2e:
                    5f:3b:e0:ad:11:c2:10:18:e5:af:5c:e9:bf:e7:6e:
                    33:71:7c:1e:02:81:82:6c:6d:4f:70:29:5f:ee:bd:
                    c8:35:21:c5:a6:4e:2b:0b:d9:63:ce:8c:d7:2b:45:
                    b8:2f:ad:80:5b:33:34:63:94:fe:52:6f:6d:8e:d3:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:86:0B:26:C9:5D:2E:EF:0A:B1:E4:7C:FA:95:76:5B:D0:4D:BE:E5
            X509v3 Authority Key Identifier:
                keyid:D6:C2:23:F2:35:2F:0D:FB:6A:59:72:27:5D:CA:2F:3C:94:71:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/3133312e3232312e3130342e302f32322d3234203d3e20323634343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:55:6f:a4:bc:30:b3:74:34:4d:b8:40:db:22:60:2a:be:55:
         72:05:63:3e:2c:59:32:89:42:ba:82:91:e5:a1:e1:17:e4:6c:
         48:6c:c0:cc:c1:2e:63:15:66:1f:b5:7c:c7:63:0d:74:5b:93:
         77:57:56:f6:32:38:b6:06:46:d2:dd:d4:75:b7:2e:83:1b:36:
         0a:d1:ec:18:e2:32:61:01:31:72:eb:a6:6e:98:3f:9b:0a:b2:
         4a:4d:db:1a:4a:d1:03:f1:b8:c8:94:24:25:53:d7:c1:cf:a9:
         a5:de:08:99:0f:b8:e1:af:5c:ea:91:0b:fd:d8:6b:43:db:b0:
         5f:93:8c:d6:55:5b:93:19:dd:cd:77:f2:cd:76:f9:d1:41:11:
         b0:c8:e3:5e:7f:ec:15:72:f1:96:1c:7a:95:ec:b8:d3:4c:b3:
         15:11:d6:65:f1:04:32:ce:5d:dd:22:b5:27:5a:f9:b7:46:72:
         a3:29:1e:bb:78:91:d1:e7:33:3e:2b:99:53:2e:1d:30:d6:25:
         d8:f5:b6:dc:53:ab:fb:f9:d9:19:c5:93:fd:e1:b8:8c:f3:c3:
         2e:d3:5f:87:64:cd:83:95:c5:27:72:d9:e6:e0:d4:ac:89:64:
         a8:7d:f7:a4:2f:38:b8:4f:8d:ea:5d:4a:23:a0:5b:f5:b0:fb:
         29:c0:1e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org