Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e203238323230.roa
File:                     3133312e3235352e3135362e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          xkA+i4N4iaqqrsgBVO1HVc3AK/P1YAPcv4fvu+m0Sdg=
Subject key identifier:   1A:3D:B3:C6:09:E0:42:B7:04:6A:D9:8A:DB:96:46:88:7C:A2:4B:49
Certificate issuer:       /CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
Certificate serial:       29E3ACDA1DC0AAD8615B865E12839231331E33A9
Authority key identifier: 8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e203238323230.roa
Signing time:             Fri 16 Dec 2022 20:00:56 +0000
ROA not before:           Fri 16 Dec 2022 19:55:56 +0000
ROA not after:            Fri 15 Dec 2023 20:00:56 +0000
asID:                     28220
IP address blocks:        131.255.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e3:ac:da:1d:c0:aa:d8:61:5b:86:5e:12:83:92:31:33:1e:33:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
        Validity
            Not Before: Dec 16 19:55:56 2022 GMT
            Not After : Dec 15 20:00:56 2023 GMT
        Subject: CN=1A3DB3C609E042B7046AD98ADB9646887CA24B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:be:5a:71:64:d3:77:47:f8:3f:61:8e:09:
                    a0:8f:d0:68:00:1e:5e:65:a3:14:98:f8:9d:5e:5c:
                    52:5f:0f:e2:89:f9:fe:b5:cb:b6:9c:b6:0b:db:ff:
                    2b:c3:80:32:c5:5d:26:79:0b:61:3a:33:e8:e8:a0:
                    9a:db:05:a0:f7:74:ef:5a:5e:31:24:ef:22:52:10:
                    08:d3:00:5c:b6:cf:6e:02:72:e3:80:80:73:d0:c2:
                    f4:38:dc:c5:e2:b4:55:b8:e2:85:62:4e:39:88:dd:
                    d8:58:1a:ce:d6:0e:5a:9c:8c:d4:ae:51:56:cb:31:
                    53:2b:28:e9:c6:ec:d3:08:cd:0d:78:9b:d8:29:a7:
                    9d:31:f2:0f:5b:6f:a8:5a:ec:96:f8:ae:32:22:bd:
                    d5:c1:1f:8e:c1:fb:97:b5:e8:36:24:2b:50:04:72:
                    42:30:53:6b:69:c8:4f:79:e5:b2:cc:c9:2f:33:99:
                    d9:48:25:f4:2f:78:a8:d0:ae:d3:dd:03:b9:ce:16:
                    b2:b7:fe:ca:c2:4e:85:ea:33:a9:1a:2a:54:67:9c:
                    ef:e1:86:c5:c1:46:07:64:fc:ab:b2:88:b2:1d:ea:
                    ca:41:a4:aa:12:df:c9:19:70:9e:a4:7b:31:a6:81:
                    db:b9:3e:e6:3b:d8:47:a7:e6:b1:cc:b0:d3:a0:88:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3D:B3:C6:09:E0:42:B7:04:6A:D9:8A:DB:96:46:88:7C:A2:4B:49
            X509v3 Authority Key Identifier:
                keyid:8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:25:5d:35:b9:4a:4e:e2:5a:fb:85:3c:6d:ef:e3:5c:43:a5:
         43:c6:7a:c9:a1:51:29:b5:fe:a1:4f:bb:9f:b9:1c:58:8b:81:
         34:7a:4c:74:09:1b:f7:47:e3:ad:09:44:49:95:70:77:5f:76:
         ae:cc:90:d5:21:45:f6:c3:ba:d2:e2:b7:51:09:e7:51:a4:c2:
         01:c8:cc:29:29:72:03:ac:b9:00:78:45:99:f6:70:4e:17:db:
         91:c5:71:bd:7c:38:08:d8:6e:9d:af:af:5e:d9:dd:9b:9f:62:
         3b:62:89:cd:db:85:16:6d:f3:f8:cd:3d:e4:ed:1a:32:1a:6f:
         9a:88:6b:07:81:2b:85:42:38:44:9b:cd:a4:07:eb:05:09:3d:
         e3:fd:18:a6:a2:bc:5c:be:3c:5c:90:f2:72:95:36:6c:c6:41:
         c5:eb:1a:6f:1c:e8:e0:50:72:8e:d1:f2:12:b2:87:9c:ab:c9:
         e9:5b:d4:a8:10:56:f2:8d:56:f4:35:7b:93:9a:48:fb:76:f5:
         38:6b:db:61:b7:14:16:75:3a:7f:02:a6:63:e4:ed:26:bb:78:
         4f:1f:d8:ab:1f:dc:a0:0e:0b:55:7a:b6:80:c6:92:6c:d0:74:
         39:e7:e8:7b:3b:0c:c5:92:9e:cf:ee:00:cb:ac:6a:9b:53:0d:
         05:bb:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org