Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/3133312e3130382e3232382e302f32322d3232203d3e20323632343933.roa
File:                     3133312e3130382e3232382e302f32322d3232203d3e20323632343933.roa (raw, json)
Hash identifier:          XDV3jKeqC74tTNqQOFelggSVwLhY89mgzg+1F/Ja8t0=
Subject key identifier:   41:61:C9:6D:0E:EF:49:52:A3:D5:C1:F8:99:B3:94:EC:4E:31:3E:46
Certificate issuer:       /CN=03542DCBF20E742950F1A92DDBD898DEE09D5572
Certificate serial:       6B5FE95A6A151E3D1B3E599D450767F20FE2057E
Authority key identifier: 03:54:2D:CB:F2:0E:74:29:50:F1:A9:2D:DB:D8:98:DE:E0:9D:55:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03542DCBF20E742950F1A92DDBD898DEE09D5572.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/3133312e3130382e3232382e302f32322d3232203d3e20323632343933.roa
Signing time:             Mon 25 Mar 2024 17:40:57 +0000
ROA not before:           Mon 25 Mar 2024 17:35:57 +0000
ROA not after:            Mon 24 Mar 2025 17:40:57 +0000
asID:                     262493
IP address blocks:        131.108.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5f:e9:5a:6a:15:1e:3d:1b:3e:59:9d:45:07:67:f2:0f:e2:05:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03542DCBF20E742950F1A92DDBD898DEE09D5572
        Validity
            Not Before: Mar 25 17:35:57 2024 GMT
            Not After : Mar 24 17:40:57 2025 GMT
        Subject: CN=4161C96D0EEF4952A3D5C1F899B394EC4E313E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:64:d9:4e:96:c0:6c:23:55:97:3a:90:27:
                    bb:2e:6f:46:45:d5:d0:7b:e7:60:fe:51:47:08:e5:
                    a3:b7:6a:14:bf:02:18:e2:b0:d1:3a:27:f9:6f:ba:
                    99:84:69:4d:ef:e9:11:78:3d:78:00:54:16:cf:94:
                    20:2b:b0:6a:53:e7:e5:b7:5f:e3:2e:9a:4c:86:d7:
                    2a:43:05:e9:08:62:1f:f3:b4:a8:87:b8:e5:1e:47:
                    60:f8:7a:d2:36:01:fd:3c:52:e4:b0:92:f1:8c:2b:
                    24:ed:2a:30:65:fc:4a:06:22:d6:ab:24:40:27:48:
                    de:ef:ae:0e:d9:1e:45:95:cd:19:45:dd:de:0a:86:
                    bc:ac:d5:66:27:9b:df:41:b1:dd:23:b1:40:8f:5a:
                    d6:47:83:40:77:2f:e3:e6:6b:c8:df:86:eb:ee:a6:
                    52:2e:6c:cf:e2:b5:98:88:56:20:6c:a6:ac:cf:c2:
                    f0:7e:f1:98:f7:51:05:1d:36:38:33:c2:69:ad:f9:
                    08:af:f8:50:6d:b8:b5:93:c8:d8:c0:e4:9d:ec:65:
                    f7:d9:22:b5:cc:7c:23:59:2c:01:41:b0:4c:1c:7e:
                    cd:46:d7:b9:55:0e:d6:8d:6f:32:46:8c:de:34:46:
                    8d:1a:80:a3:cb:0c:98:ea:db:b7:87:1b:d2:21:05:
                    e0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:61:C9:6D:0E:EF:49:52:A3:D5:C1:F8:99:B3:94:EC:4E:31:3E:46
            X509v3 Authority Key Identifier:
                keyid:03:54:2D:CB:F2:0E:74:29:50:F1:A9:2D:DB:D8:98:DE:E0:9D:55:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/03542DCBF20E742950F1A92DDBD898DEE09D5572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03542DCBF20E742950F1A92DDBD898DEE09D5572.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/3133312e3130382e3232382e302f32322d3232203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:bf:2a:f3:ed:bd:fc:8d:82:e5:25:c6:ec:8d:35:9e:a5:
         91:52:ee:0b:7c:80:e4:dc:b4:3e:0f:83:af:be:79:43:82:0c:
         48:c0:2c:0e:4d:6d:79:0d:fa:0b:ff:d3:55:fc:67:0e:87:8d:
         f0:6d:61:20:71:62:ee:fb:ed:f1:22:59:46:79:10:de:8c:c0:
         02:52:c7:95:52:3a:0a:8f:cf:6c:58:a9:1a:de:22:c4:4e:d9:
         c2:0c:d2:cb:7b:ac:d9:8a:1b:f3:17:0b:a4:f7:de:b6:43:51:
         eb:52:c7:8e:b4:61:fb:72:82:10:de:83:e7:9a:36:ec:15:96:
         06:aa:7f:5d:2b:7a:8e:9c:7e:cb:f1:04:24:52:4c:8d:33:58:
         5f:0d:94:49:9e:b6:db:97:49:7c:c1:25:5b:e2:f6:f1:de:58:
         33:ca:34:a6:38:90:34:67:50:db:65:c5:cd:c0:f5:cb:d6:c2:
         36:bc:fc:44:88:54:65:6d:0a:24:41:02:87:ec:29:92:d8:df:
         e9:1e:e9:c8:70:2b:93:3e:3a:09:40:32:07:3b:6b:c8:db:92:
         e6:4d:56:96:81:3e:c6:6e:9b:cb:21:e5:7a:77:6b:d4:74:52:
         ab:ba:79:7d:51:d2:e6:c1:5c:71:83:60:8c:02:d3:81:2e:f5:
         a7:d0:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org