Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3136312e3130382e302f32322d3232203d3e203238323230.roa
File:                     3133312e3136312e3130382e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          uWkgmHwHUznaz2of41TBef5ffviqpUQiPkq0TrheiMI=
Subject key identifier:   33:3B:1A:0C:88:DB:DD:4B:20:BB:4D:F1:F9:FC:1E:D7:E4:39:2C:C4
Certificate issuer:       /CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
Certificate serial:       5A55F3A39D55B46A77A2DFC2DE0C01D73CD53B89
Authority key identifier: 8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3136312e3130382e302f32322d3232203d3e203238323230.roa
Signing time:             Fri 16 Dec 2022 20:00:25 +0000
ROA not before:           Fri 16 Dec 2022 19:55:25 +0000
ROA not after:            Fri 15 Dec 2023 20:00:25 +0000
asID:                     28220
IP address blocks:        131.161.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:55:f3:a3:9d:55:b4:6a:77:a2:df:c2:de:0c:01:d7:3c:d5:3b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
        Validity
            Not Before: Dec 16 19:55:25 2022 GMT
            Not After : Dec 15 20:00:25 2023 GMT
        Subject: CN=333B1A0C88DBDD4B20BB4DF1F9FC1ED7E4392CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:77:35:e5:ce:a5:da:17:3e:45:5b:c5:db:
                    40:f9:1a:68:aa:7a:d6:5a:58:4d:65:c1:ce:23:2d:
                    50:a6:50:cd:86:13:26:62:bc:2c:e7:a8:81:f0:db:
                    4e:54:80:7f:f9:3c:24:aa:9e:80:dc:38:57:c8:04:
                    1a:76:3d:f6:a3:b2:e8:09:07:14:02:e1:c1:0b:8b:
                    20:4d:ef:6b:24:b9:12:11:ea:7c:80:e4:ec:d5:49:
                    8b:d9:e7:54:bc:cf:9f:6e:21:a6:89:3e:1e:ad:f9:
                    33:b9:b9:b3:a7:57:7b:2f:a4:5d:58:86:6d:91:67:
                    03:40:e4:f9:d9:d0:29:97:4b:6a:5d:c9:ad:f2:bc:
                    d2:61:49:f0:c8:66:d3:77:ba:5f:9c:1b:47:67:c0:
                    be:c7:38:51:33:ea:da:94:45:23:63:a4:7e:82:bb:
                    de:da:09:88:a3:7e:07:b4:87:a2:23:0f:bb:49:64:
                    21:8b:0b:18:28:0a:e1:e8:35:06:87:d6:85:e5:ef:
                    89:d4:1c:24:ba:c6:e8:b6:70:69:11:c7:aa:1e:c5:
                    1a:dd:50:55:f4:bd:e5:f2:48:1a:68:1e:72:87:d9:
                    7a:df:62:3f:ef:24:b2:6e:c3:40:fb:48:d5:64:4b:
                    69:79:f8:18:0f:02:d8:c7:6b:e8:f3:a8:a0:50:69:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3B:1A:0C:88:DB:DD:4B:20:BB:4D:F1:F9:FC:1E:D7:E4:39:2C:C4
            X509v3 Authority Key Identifier:
                keyid:8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3136312e3130382e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:02:c8:59:17:6e:85:67:10:11:bc:b9:9f:bd:a0:0d:f4:e1:
         e9:ea:92:52:c8:ef:8f:07:b7:5f:88:e9:46:a9:91:01:2e:84:
         19:f0:bc:5f:8c:ab:09:eb:dd:5e:2c:ad:2e:aa:52:55:bc:0d:
         b3:85:68:80:5c:70:b3:18:43:fb:63:ae:57:7c:25:60:c8:93:
         38:2f:8b:49:1f:84:a8:e9:c2:b0:30:7d:8a:ed:53:c0:5b:ca:
         33:62:3a:e1:dd:1e:e3:79:e8:e9:42:d8:d5:5c:41:07:9b:05:
         44:90:f4:d2:4c:f8:64:08:b7:b6:53:25:8b:c3:5d:32:a7:25:
         08:77:77:1c:c4:96:40:da:4b:d9:89:55:4d:e7:95:2b:be:d8:
         36:50:36:03:99:55:9e:98:da:8e:99:9f:13:26:54:85:8d:3b:
         fa:a1:b2:d3:1f:e4:35:b1:4a:2a:89:ab:29:b6:b5:0b:95:5c:
         87:29:56:11:79:85:86:26:80:36:51:55:bb:52:8c:d8:1f:d6:
         93:5e:1e:65:d6:03:c4:07:1d:67:f2:4a:ad:08:df:b3:63:b7:
         a7:2e:06:e6:a7:46:fc:23:30:41:81:67:41:17:74:f3:6b:a3:
         a6:d7:fb:17:f3:27:a3:60:c9:36:e0:a2:28:60:50:35:7b:da:
         92:15:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org