Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3233302e302f32342d3234203d3e20323634343436.roa
File:                     3133312e3232312e3233302e302f32342d3234203d3e20323634343436.roa (raw, json)
Hash identifier:          biqAWkMPA4hDvnQyqC7BUvDAy1+lwA6RPNCFybDR5RU=
Subject key identifier:   23:DD:84:65:A4:F1:FA:A0:95:E2:58:6C:8B:5E:F3:5E:61:43:72:41
Certificate issuer:       /CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
Certificate serial:       2B5B62F40B81BECCE97DC20A0364C5AE82C4BF47
Authority key identifier: CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3233302e302f32342d3234203d3e20323634343436.roa
Signing time:             Tue 02 May 2023 16:11:33 +0000
ROA not before:           Tue 02 May 2023 16:06:33 +0000
ROA not after:            Tue 30 Apr 2024 16:11:33 +0000
asID:                     264446
IP address blocks:        131.221.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5b:62:f4:0b:81:be:cc:e9:7d:c2:0a:03:64:c5:ae:82:c4:bf:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
        Validity
            Not Before: May  2 16:06:33 2023 GMT
            Not After : Apr 30 16:11:33 2024 GMT
        Subject: CN=23DD8465A4F1FAA095E2586C8B5EF35E61437241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bb:99:a4:2e:bd:7d:c9:c2:a9:72:3a:90:69:
                    cc:4d:89:af:c3:97:47:01:17:cc:f5:f5:a2:ba:64:
                    05:cd:5f:47:2a:35:f3:41:cd:60:1c:1d:f4:30:c0:
                    63:52:ef:21:bb:df:8f:cd:59:f1:fb:6e:1b:c2:66:
                    89:33:6b:18:81:56:4b:c3:8f:53:23:fc:25:d7:60:
                    88:e0:11:85:e6:ae:47:4a:b2:a0:7f:54:71:f0:a8:
                    a1:d3:fc:dc:d2:12:db:3e:3f:b4:de:68:71:7a:1d:
                    d2:53:ab:c8:48:12:33:ab:6a:f0:1a:ae:0d:76:4f:
                    c1:e9:88:38:1e:a8:fe:26:01:cb:69:4b:f9:8c:5f:
                    fd:0b:25:70:8c:b3:ae:d7:3a:23:14:14:8f:36:e9:
                    88:40:40:2c:f0:71:3b:28:94:f1:16:73:6d:0a:fc:
                    26:e5:42:cb:5b:1c:a9:60:37:a5:3f:c6:da:66:d3:
                    02:4b:7b:81:f3:bf:55:a8:65:b1:7a:b6:96:ea:f5:
                    84:09:aa:05:57:e8:82:ee:4e:42:5b:f8:16:86:15:
                    31:96:c6:96:0a:16:12:04:81:fb:91:f0:bf:eb:e8:
                    0c:bf:d0:f6:d4:81:3e:24:9a:3e:00:5d:0f:e0:8a:
                    31:12:5f:d2:29:15:00:73:00:9d:e2:5d:f0:13:23:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DD:84:65:A4:F1:FA:A0:95:E2:58:6C:8B:5E:F3:5E:61:43:72:41
            X509v3 Authority Key Identifier:
                keyid:CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3233302e302f32342d3234203d3e20323634343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:98:1e:a9:38:e5:21:eb:8d:f0:2b:b2:d4:2f:b8:f6:3e:57:
         86:c2:6f:8c:35:ff:4f:02:0a:12:fa:41:fc:f5:c9:32:6f:ee:
         45:8b:1a:a8:26:2e:dd:23:39:9d:69:d3:3c:fb:5e:e4:cf:82:
         ec:a7:c6:d1:82:ed:74:e2:a8:0f:20:36:27:ab:89:e6:16:4a:
         50:96:20:21:7f:be:c0:cb:d0:da:bc:fa:79:ee:d8:2c:71:0f:
         84:29:18:44:e5:7a:50:0f:90:21:06:bf:34:e7:52:fa:1a:ec:
         15:23:a7:09:74:42:2c:ca:01:9e:6b:2d:9c:ad:69:82:84:79:
         96:6c:48:19:2f:89:62:0c:1e:bf:80:12:17:a9:90:09:ef:c3:
         14:98:14:3b:ed:be:57:32:8c:19:81:40:c5:1a:39:22:0d:af:
         9d:09:99:2f:a2:f9:8e:05:e8:aa:a8:6e:b4:51:be:da:b8:c1:
         bb:4c:6a:f1:f1:96:07:68:cf:61:19:13:c1:ce:8d:cb:01:0c:
         cf:47:68:b0:3d:0f:83:53:2b:bf:ce:9e:b2:41:f2:07:53:82:
         5a:e7:5f:24:24:30:59:c7:e1:7f:52:09:48:86:b9:84:57:b5:
         0c:e5:27:22:ef:ff:15:6d:88:54:18:48:db:8f:d9:ce:06:6c:
         ab:22:96:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org