Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e20323633363635.roa
File:                     3133312e3235352e3135362e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          Lg9Dh9UFyevITnIRxFDVHq34JRCeWHwDWSNYfMR05Yo=
Subject key identifier:   AC:BB:29:CB:71:12:3C:5F:15:86:5F:A7:ED:C9:19:09:11:32:A6:4C
Certificate issuer:       /CN=9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A
Certificate serial:       48C35E60FD10463C65D53A78F67B7A220439FD80
Authority key identifier: 9A:F4:CE:ED:37:1E:AA:FF:F9:2E:8E:45:A5:53:7E:65:10:B1:EF:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e20323633363635.roa
Signing time:             Thu 13 Oct 2022 21:18:25 +0000
ROA not before:           Thu 13 Oct 2022 21:13:25 +0000
ROA not after:            Thu 12 Oct 2023 21:18:25 +0000
asID:                     263665
IP address blocks:        131.255.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c3:5e:60:fd:10:46:3c:65:d5:3a:78:f6:7b:7a:22:04:39:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A
        Validity
            Not Before: Oct 13 21:13:25 2022 GMT
            Not After : Oct 12 21:18:25 2023 GMT
        Subject: CN=ACBB29CB71123C5F15865FA7EDC919091132A64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:f1:ec:ed:69:5f:21:07:05:d1:81:48:9a:
                    f9:90:9a:63:dc:c3:08:d6:02:f1:aa:f3:09:ca:6f:
                    12:25:85:a9:ac:94:41:f4:c9:ca:4d:59:9c:5f:0c:
                    f3:d9:d0:30:1e:13:7e:e4:82:86:5e:0c:84:03:80:
                    63:ec:85:99:87:8c:52:37:f9:d3:79:b7:73:e6:a7:
                    94:68:53:5a:ce:75:f4:71:9f:65:f3:26:77:cd:47:
                    c9:2d:20:ac:c8:f7:15:40:2b:ea:95:d0:79:09:ac:
                    62:54:34:53:0b:db:fd:8a:1b:92:50:62:c3:bb:d1:
                    49:b6:bf:01:91:94:6b:98:b1:f9:58:b4:51:e0:5b:
                    90:99:cf:dc:5c:9d:25:fe:f8:6c:ab:40:0a:52:da:
                    93:a7:4e:df:18:39:da:7e:75:a1:b0:48:dd:47:a8:
                    3f:9d:8d:62:71:1a:2a:c2:36:1b:17:21:93:a4:98:
                    55:3b:6e:86:8c:c1:88:3a:07:99:f9:99:e7:bd:ee:
                    87:0e:3f:fb:bc:9b:37:2f:3e:1c:a9:b5:01:3f:78:
                    4f:81:b2:2f:f1:11:c0:be:9c:6c:8f:1d:a6:9a:3b:
                    e1:5e:6c:83:01:35:fa:8f:5e:f3:04:ef:f6:2d:e7:
                    25:75:f6:ea:9d:b4:e8:ce:1d:4c:b4:de:15:af:60:
                    54:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BB:29:CB:71:12:3C:5F:15:86:5F:A7:ED:C9:19:09:11:32:A6:4C
            X509v3 Authority Key Identifier:
                keyid:9A:F4:CE:ED:37:1E:AA:FF:F9:2E:8E:45:A5:53:7E:65:10:B1:EF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:70:9b:40:3a:ba:e0:90:4f:ac:a3:64:79:ef:44:97:ad:b3:
         5a:7c:e4:93:45:52:77:c2:d2:55:04:4d:8e:19:ee:d3:58:4d:
         8d:da:d8:fe:8d:7f:30:cd:8d:b0:18:c1:e4:0d:61:f4:5f:94:
         84:ed:d8:19:7f:0f:8f:d1:5f:71:e9:03:2a:4e:5c:ee:0d:f3:
         34:51:ff:a8:77:98:2c:aa:39:dc:47:00:4f:8e:0b:ff:0c:7b:
         a0:bd:de:b6:08:11:0a:5a:c2:83:71:f7:ba:a1:6d:1c:79:23:
         6d:91:18:7d:88:b2:5a:38:d2:50:d8:85:8b:a4:f7:51:b0:23:
         ce:2c:21:a8:03:16:1c:e6:ed:05:40:15:62:83:4d:90:31:f7:
         1d:ae:08:4f:e2:09:a9:43:39:b9:94:d4:38:c7:d3:83:38:dd:
         a3:92:39:e6:fe:42:0c:e0:df:10:66:0d:06:97:09:e5:01:08:
         5c:22:6c:92:4f:a6:da:2e:5a:5b:20:14:1d:5f:7b:55:ea:2c:
         ee:62:85:f5:83:9f:53:76:0a:00:61:8d:f1:1b:60:f6:f1:6b:
         e1:41:01:74:91:53:13:5c:f1:3a:1e:b2:06:c6:4b:74:fe:6c:
         e8:2a:b5:7b:37:02:93:62:2b:05:d8:74:9e:db:33:0e:23:ff:
         ca:31:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org