Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa
File:                     3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          iHPmu/GByPaDlExzaLrQRu9aoh9EhRdGkD8Ikm7DHPM=
Subject key identifier:   D8:6D:A1:64:6F:6A:C6:BA:67:3E:E9:EB:88:A7:5C:0F:69:AC:89:5E
Certificate issuer:       /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial:       06DDB22BBD47CFDE2D2DD480E5348E425B6029E7
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa
Signing time:             Mon 08 Apr 2024 20:11:31 +0000
ROA not before:           Mon 08 Apr 2024 20:06:31 +0000
ROA not after:            Mon 07 Apr 2025 20:11:31 +0000
asID:                     263665
IP address blocks:        131.161.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:dd:b2:2b:bd:47:cf:de:2d:2d:d4:80:e5:34:8e:42:5b:60:29:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
        Validity
            Not Before: Apr  8 20:06:31 2024 GMT
            Not After : Apr  7 20:11:31 2025 GMT
        Subject: CN=D86DA1646F6AC6BA673EE9EB88A75C0F69AC895E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:fe:a1:f4:93:74:83:d8:03:69:c8:5b:91:
                    93:65:c9:eb:eb:63:09:c8:5a:a9:71:63:e3:62:10:
                    3a:2c:fd:aa:83:97:31:42:35:1d:3a:df:b4:b1:ab:
                    55:da:4d:41:90:f7:4f:2b:89:41:ff:3d:04:a1:f0:
                    12:1b:82:e9:2d:f3:4f:65:b0:63:e9:1f:e3:44:e6:
                    c2:d7:d7:e5:9b:47:77:cd:53:04:2f:e9:18:1a:db:
                    43:74:15:64:a7:4b:db:51:6e:18:ba:d0:80:e4:f6:
                    ad:4b:76:ef:a0:36:91:0e:bd:e7:28:bd:ec:66:6c:
                    ad:80:63:e1:bc:f8:cc:03:06:77:81:37:52:04:fd:
                    29:29:dc:4c:9c:f7:02:86:d8:61:17:8f:9e:7a:9f:
                    94:07:35:a0:7f:f0:6d:0e:05:5e:42:c8:e5:a7:44:
                    b5:17:03:f0:e7:26:69:67:0e:3a:c4:7f:a0:b2:26:
                    b9:58:ed:fb:20:68:06:6c:b1:ef:a2:af:08:f2:a6:
                    69:e2:31:11:83:81:69:f3:9d:94:ac:aa:ed:a9:34:
                    60:6d:6d:08:2c:c7:02:82:d9:f0:16:de:e9:0d:8d:
                    ba:14:eb:29:65:d2:f6:4d:e1:29:e7:7e:11:23:30:
                    ab:72:7c:84:c3:f0:d8:49:5d:5a:3d:1e:30:38:a5:
                    4e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6D:A1:64:6F:6A:C6:BA:67:3E:E9:EB:88:A7:5C:0F:69:AC:89:5E
            X509v3 Authority Key Identifier:
                keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:d8:68:02:ea:80:9e:6b:1b:4e:b9:eb:94:1c:20:29:0a:b5:
         9e:77:2c:79:16:50:c8:15:59:de:08:34:89:88:2f:6b:3d:17:
         56:e4:fc:99:23:e4:22:ff:2b:33:3f:7f:64:48:b6:37:bb:01:
         ca:5e:1f:50:f2:d8:d7:0a:44:28:9d:d6:56:4c:44:eb:d8:26:
         d3:ed:42:d3:fe:b8:04:60:96:04:56:32:4e:3b:1f:51:e3:35:
         7f:ac:3d:e6:97:e1:33:04:b6:5e:44:9d:f3:ed:ab:46:26:26:
         fd:81:d5:28:35:d6:7f:b0:d1:0a:7f:04:09:92:85:0e:b9:66:
         c9:77:19:fc:ce:f0:45:41:f9:bc:3d:8e:a6:1d:a1:92:f7:e3:
         fa:1a:aa:fa:6e:db:b5:b6:ba:b0:42:b1:c7:66:8f:3f:e6:4d:
         40:26:86:19:99:d3:b7:eb:fe:a9:ac:c8:2b:3a:44:22:c1:c9:
         dc:d1:f3:da:91:c3:12:5a:93:e5:22:e8:09:0e:aa:04:58:88:
         8f:0e:4e:af:b5:9e:29:51:22:3f:2a:8f:43:af:39:6f:92:54:
         ac:be:c3:c1:0d:25:2b:5a:a4:ff:11:60:0d:50:8a:87:55:e0:
         6d:a9:61:a3:df:b2:05:74:a2:bf:01:34:8f:b3:c5:16:e6:66:
         e9:be:b8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org