Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3233312e302f32342d3234203d3e20323634343436.roa
File:                     3133312e3232312e3233312e302f32342d3234203d3e20323634343436.roa (raw, json)
Hash identifier:          j85UxfJUkCMISuDmzmwGDg0iv7OJFutq6TKwG2focSY=
Subject key identifier:   3E:1B:AC:68:84:F8:11:12:37:99:4E:A5:0E:8F:81:C1:D7:D4:21:C8
Certificate issuer:       /CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
Certificate serial:       26D6FCAB5F08AE7D52C5CFF34BD78209402EAE49
Authority key identifier: CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3233312e302f32342d3234203d3e20323634343436.roa
Signing time:             Tue 02 May 2023 16:14:17 +0000
ROA not before:           Tue 02 May 2023 16:09:17 +0000
ROA not after:            Tue 30 Apr 2024 16:14:17 +0000
asID:                     264446
IP address blocks:        131.221.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d6:fc:ab:5f:08:ae:7d:52:c5:cf:f3:4b:d7:82:09:40:2e:ae:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
        Validity
            Not Before: May  2 16:09:17 2023 GMT
            Not After : Apr 30 16:14:17 2024 GMT
        Subject: CN=3E1BAC6884F8111237994EA50E8F81C1D7D421C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ea:f8:b4:91:59:2d:5e:60:c5:53:3c:57:72:
                    79:c4:a3:cd:7a:9d:c5:1d:54:ff:fb:ac:d1:51:45:
                    43:b4:c0:cf:71:eb:b4:42:19:e7:63:0a:2d:18:89:
                    e8:8b:0c:ad:dd:0d:9d:92:5f:19:be:1f:1f:63:b0:
                    39:ed:b2:83:b2:65:e3:5f:a9:d0:54:ae:3c:ef:f8:
                    f1:5c:4f:69:5f:75:e4:22:d7:37:e2:0a:a0:d0:27:
                    c7:07:5e:7d:e8:34:13:8d:bd:46:e0:61:2b:4f:6f:
                    d6:40:90:4c:ee:0e:97:5b:5b:65:f8:b8:f7:45:e0:
                    ce:90:4e:63:63:4b:c5:68:bb:ac:d4:54:73:1b:41:
                    b4:b1:cd:9f:bf:e8:f4:79:08:83:4d:e1:12:9f:5e:
                    bb:14:3a:4e:87:df:11:45:7d:ea:bd:d9:94:f6:83:
                    30:66:a4:ab:e4:27:af:f8:d4:94:7b:b9:36:fd:a0:
                    2a:da:8d:ed:0a:eb:9c:90:e7:d3:ef:2c:40:4c:92:
                    4e:0b:3f:4b:9a:52:80:fa:a2:59:d1:b9:a4:b1:dd:
                    6d:af:3a:94:ab:57:fe:72:b5:14:ee:2d:00:05:c8:
                    bd:dd:0e:a5:a1:18:06:3a:3f:b9:74:06:da:97:8a:
                    cd:5e:32:49:13:0d:46:2e:77:d1:70:8a:da:de:d2:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1B:AC:68:84:F8:11:12:37:99:4E:A5:0E:8F:81:C1:D7:D4:21:C8
            X509v3 Authority Key Identifier:
                keyid:CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3233312e302f32342d3234203d3e20323634343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:74:0b:cb:f4:59:40:14:a3:0a:ae:0c:3b:f9:d2:e1:f4:ff:
         89:cd:45:db:b3:b6:49:aa:a9:30:06:68:de:51:25:74:fa:49:
         85:d9:25:fc:4d:9f:03:99:50:d9:7e:8b:c9:30:96:fe:7a:c9:
         71:aa:4f:54:70:0a:ac:19:93:8a:18:89:07:fe:41:53:5b:e1:
         df:7a:a8:1f:ff:16:1f:59:93:99:ad:2f:81:f9:d9:b6:0b:0e:
         52:5a:33:6b:d5:d3:0e:0b:a0:8c:82:68:26:1e:3f:4a:2d:1f:
         00:9e:d9:76:13:82:85:34:a5:9e:ac:12:0e:7a:ff:7f:95:99:
         db:22:fa:3a:d1:9e:41:15:61:20:0f:21:46:04:b9:82:31:6b:
         3c:19:21:85:b9:94:e1:5e:00:8e:b3:8a:83:c9:66:65:03:66:
         70:76:8e:e6:b2:f8:3c:e1:f6:93:62:90:50:cb:bc:6c:39:ee:
         23:ed:ef:a8:1e:fa:47:1f:23:ff:70:be:fe:87:5e:5a:0f:c8:
         79:32:2b:fd:da:d2:e1:11:f2:37:2e:72:1d:f4:87:04:cb:2a:
         e9:4e:ea:29:10:8e:9d:a2:c8:a6:fb:62:7a:77:5b:7c:32:a0:
         9b:1b:66:ae:83:87:42:a8:08:05:0a:b2:be:d0:00:df:54:28:
         c1:df:f6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org