Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3232392e302f32342d3234203d3e20323634343436.roa
File:                     3133312e3232312e3232392e302f32342d3234203d3e20323634343436.roa (raw, json)
Hash identifier:          Hf3NsjcwFxVM4lpq7GSCWnv6HCONVqF8AvziAaWWsVA=
Subject key identifier:   CC:9C:D9:50:D5:DD:77:FB:16:03:95:F5:E7:58:FF:8D:80:2B:3C:4A
Certificate issuer:       /CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
Certificate serial:       14EDF0F66FB8507EB164D0B81EB755EB186E72D4
Authority key identifier: CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3232392e302f32342d3234203d3e20323634343436.roa
Signing time:             Tue 02 May 2023 16:11:26 +0000
ROA not before:           Tue 02 May 2023 16:06:26 +0000
ROA not after:            Tue 30 Apr 2024 16:11:26 +0000
asID:                     264446
IP address blocks:        131.221.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ed:f0:f6:6f:b8:50:7e:b1:64:d0:b8:1e:b7:55:eb:18:6e:72:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
        Validity
            Not Before: May  2 16:06:26 2023 GMT
            Not After : Apr 30 16:11:26 2024 GMT
        Subject: CN=CC9CD950D5DD77FB160395F5E758FF8D802B3C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1a:bf:2a:24:a5:f6:3a:b5:1c:83:ef:bf:fe:
                    02:e9:45:51:3a:87:c2:c1:92:65:fb:de:e9:30:05:
                    ca:ed:bc:42:65:2b:c8:41:70:d8:e9:44:01:36:a2:
                    3e:ea:86:52:a6:57:bd:66:8e:3f:1a:ff:38:c5:53:
                    18:e6:cf:27:0d:52:5a:d8:d2:21:26:99:d6:6c:2c:
                    5e:02:cb:54:61:32:6f:4c:23:d3:29:f5:3f:10:1c:
                    40:47:58:60:8f:10:58:61:6a:6f:9f:f4:dc:a0:e4:
                    5a:1a:c1:01:bc:52:18:65:41:f1:47:ba:28:3d:10:
                    0c:a6:ce:48:b3:41:6c:02:74:32:a8:fb:4f:23:b9:
                    ce:80:22:bc:cd:6a:0f:4c:52:8a:c8:13:be:e6:b0:
                    43:d9:c4:fb:18:ec:43:dd:b7:ce:30:f3:aa:7c:43:
                    3c:85:d0:a4:99:fd:d2:3b:1b:a4:03:13:e7:98:43:
                    5a:98:2c:65:0a:2d:d3:15:71:e8:4f:19:d6:c1:b1:
                    b9:80:2e:05:e6:bf:6e:18:97:71:94:97:db:e1:43:
                    b8:49:30:52:4e:1e:f1:a7:cf:d7:b6:06:90:93:99:
                    0a:a5:ee:50:71:49:0d:a9:c0:1d:2b:8b:4d:33:be:
                    e0:e5:ee:28:a2:2c:1a:b5:57:03:17:54:8f:93:a8:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9C:D9:50:D5:DD:77:FB:16:03:95:F5:E7:58:FF:8D:80:2B:3C:4A
            X509v3 Authority Key Identifier:
                keyid:CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3232392e302f32342d3234203d3e20323634343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:bc:4f:57:38:5c:95:1f:0a:77:33:d6:9c:54:48:ca:8f:c6:
         2a:f4:67:d2:b3:57:e9:55:ed:f6:27:04:28:d7:33:4d:ba:83:
         90:5b:24:e1:9c:af:2a:82:85:04:03:b3:e1:c8:ec:94:ee:d2:
         0f:52:31:14:8d:10:31:72:30:51:6a:9d:b7:88:4f:93:2a:09:
         eb:fc:17:fa:93:94:0f:5a:72:94:f7:ac:e0:78:cd:ee:72:5d:
         3c:fa:a1:8f:e3:53:f9:5e:e3:d2:42:b1:09:73:03:56:f7:f9:
         a8:84:63:81:9c:1d:b5:45:bb:fe:85:43:3e:b5:0e:f3:3f:3c:
         a3:7c:8a:cd:f1:93:10:7f:79:4b:37:8d:13:0d:36:c5:87:e2:
         df:6d:41:f5:7c:8e:38:65:7f:8a:91:92:c2:fa:59:4c:f0:c1:
         3c:d8:16:df:6c:9e:a6:2c:df:94:19:3f:5d:ae:23:5c:3f:03:
         e9:50:9c:0e:2b:48:17:90:f7:9a:c4:b4:61:06:61:04:75:f8:
         33:f2:8d:ab:17:4e:95:f4:e1:56:61:60:71:38:8e:15:18:e0:
         22:e6:4e:86:18:a5:39:99:ec:50:db:c5:20:70:f8:20:8e:c1:
         d9:1a:24:d2:07:c5:e2:b5:7a:45:7f:fc:1b:92:a3:c1:07:20:
         f5:f0:d4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org