Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa
File:                     3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa (raw, json)
Hash identifier:          Ke5sYRRy2JRj1EPBKxGGpKL3lDF/0XcRm+IH5VpzidE=
Subject key identifier:   D2:BC:A7:C5:B8:EF:A7:7A:8B:49:CB:D0:10:D9:21:92:FC:58:DC:6E
Certificate issuer:       /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial:       057F147F8DAD207463085B6766D03755A34A5F9A
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa
Signing time:             Mon 08 Apr 2024 20:11:31 +0000
ROA not before:           Mon 08 Apr 2024 20:06:31 +0000
ROA not after:            Mon 07 Apr 2025 20:11:31 +0000
asID:                     264493
IP address blocks:        131.255.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7f:14:7f:8d:ad:20:74:63:08:5b:67:66:d0:37:55:a3:4a:5f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
        Validity
            Not Before: Apr  8 20:06:31 2024 GMT
            Not After : Apr  7 20:11:31 2025 GMT
        Subject: CN=D2BCA7C5B8EFA77A8B49CBD010D92192FC58DC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:53:ff:3c:de:b2:d0:03:f8:cc:5a:f8:80:8c:
                    cf:76:e2:05:23:c8:26:6a:99:8b:4a:0b:4b:6a:db:
                    87:1f:14:81:08:ff:2d:eb:8d:77:c9:ab:59:d9:53:
                    f5:50:08:13:47:7f:10:46:be:32:c5:22:5e:46:32:
                    e1:fb:ef:12:bd:29:4b:da:f4:ce:9a:ea:5d:ae:2d:
                    86:d1:26:2f:87:db:5e:79:f6:46:3f:d8:84:78:6c:
                    1e:68:79:10:f9:99:69:3a:e5:2b:63:cf:b8:37:a7:
                    de:eb:07:e1:f0:cf:92:61:58:92:97:8c:0f:8a:d8:
                    67:6d:e5:7c:04:e2:fd:31:95:9e:c8:8a:9c:ec:c7:
                    4f:f0:4d:d0:78:c2:79:09:0b:a2:60:01:9a:00:d3:
                    ba:c3:fe:89:3f:dc:87:e5:88:61:9a:01:e7:10:f4:
                    10:42:c7:44:fd:bd:58:f0:81:5a:b9:a8:76:60:31:
                    56:43:4a:1c:b6:16:91:bd:8b:c6:28:2b:b9:d1:f7:
                    25:2e:46:e6:68:35:ef:2d:46:a8:22:96:c1:19:ea:
                    34:4d:5c:7d:b5:7f:39:28:dc:4f:f8:dc:20:23:44:
                    d3:8f:9e:30:49:c5:18:83:a7:2f:86:8a:a4:40:27:
                    e8:d3:5c:16:d2:cb:0b:88:ba:1d:9c:66:04:83:fc:
                    45:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BC:A7:C5:B8:EF:A7:7A:8B:49:CB:D0:10:D9:21:92:FC:58:DC:6E
            X509v3 Authority Key Identifier:
                keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:ef:f5:3b:0f:f4:01:c1:ad:b0:ad:0f:17:99:3b:cd:e9:04:
         10:41:f8:64:ab:8a:13:4e:da:51:c6:22:76:18:11:c9:af:f1:
         b4:61:78:dc:46:50:34:85:d3:32:93:f8:ca:b5:86:0e:7f:cd:
         76:35:81:10:06:ed:79:e7:f1:e6:f9:d7:38:3a:ba:46:8e:8e:
         81:ac:da:8d:02:54:78:c5:cf:a8:d5:8d:f3:36:c8:ca:bf:c6:
         b1:fa:e9:c3:2d:b5:cc:23:27:41:fd:c6:2a:df:97:71:d1:ee:
         ae:cf:c1:8a:a4:bc:1c:08:00:e5:78:4f:d9:91:3d:47:e6:50:
         73:e8:72:ca:04:fe:48:5e:d3:30:24:3b:02:d2:07:02:a4:25:
         51:d3:c9:fb:a5:f6:ce:82:37:72:c1:f5:23:14:72:8e:b9:8b:
         86:70:d2:81:d7:7e:34:58:e2:5c:c5:36:fb:7e:72:23:cd:f0:
         e9:19:0b:53:bc:15:a4:8f:a6:6a:34:64:e3:20:e1:dc:0a:72:
         09:62:4e:6c:e0:95:c7:81:5b:ce:87:05:f6:3e:00:03:9e:64:
         32:9d:05:84:34:92:03:b8:9f:d4:35:c9:ef:fd:bf:92:08:bc:
         cf:a7:ef:71:e7:71:f5:bf:1e:a6:d4:79:a7:4a:16:a6:db:aa:
         a3:33:67:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org