Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/3133312e3130382e3232382e302f32322d3233203d3e20323634333532.roa
File:                     3133312e3130382e3232382e302f32322d3233203d3e20323634333532.roa (raw, json)
Hash identifier:          YstUoOrYgyHVqaG4G/WXxX9pcLCw0MAh4O03WyAB4PE=
Subject key identifier:   9C:22:6A:F9:92:16:F6:18:2D:6B:DF:89:A3:37:65:BA:2D:91:D5:E4
Certificate issuer:       /CN=BCA0329054F7A74EBFC3423B9DD86EEC0A4A1734
Certificate serial:       4039D6D1AB32C772E2F07812331198E8E9C1DDDE
Authority key identifier: BC:A0:32:90:54:F7:A7:4E:BF:C3:42:3B:9D:D8:6E:EC:0A:4A:17:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCA0329054F7A74EBFC3423B9DD86EEC0A4A1734.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/3133312e3130382e3232382e302f32322d3233203d3e20323634333532.roa
Signing time:             Tue 16 May 2023 16:57:41 +0000
ROA not before:           Tue 16 May 2023 16:52:41 +0000
ROA not after:            Tue 14 May 2024 16:57:41 +0000
asID:                     264352
IP address blocks:        131.108.228.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:39:d6:d1:ab:32:c7:72:e2:f0:78:12:33:11:98:e8:e9:c1:dd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCA0329054F7A74EBFC3423B9DD86EEC0A4A1734
        Validity
            Not Before: May 16 16:52:41 2023 GMT
            Not After : May 14 16:57:41 2024 GMT
        Subject: CN=9C226AF99216F6182D6BDF89A33765BA2D91D5E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4a:e1:02:ae:b3:38:c2:10:4d:06:27:39:9e:
                    90:46:17:60:ec:59:4a:35:a9:aa:9b:05:63:77:eb:
                    8a:ee:1f:be:ae:17:12:b9:94:bf:b0:0f:30:6c:60:
                    1d:b7:cb:c2:1b:3e:2d:e1:96:23:5a:5a:05:40:b8:
                    47:10:bf:8b:dc:1b:3b:5d:0b:09:a7:95:45:e6:ea:
                    f5:13:e2:fb:35:0e:bb:a1:0b:a2:0f:c9:26:3d:37:
                    a4:bd:1e:c1:0f:c0:9e:f8:57:2b:23:d3:ae:3e:29:
                    20:13:2c:85:56:82:d4:f8:41:c2:5e:9c:5c:9c:8e:
                    f0:95:9c:a7:d3:97:76:ab:d9:21:21:1d:83:12:1a:
                    53:33:da:b2:e6:b0:d2:9d:2a:29:c9:3c:bc:6f:0c:
                    ef:76:29:63:14:0a:8c:c4:f6:06:27:3f:98:2d:4c:
                    46:30:c1:8e:0f:56:c3:50:52:22:91:9c:2f:ed:63:
                    c1:69:61:9f:0d:93:df:f2:fe:7f:05:fe:d5:8d:e0:
                    8b:25:f5:89:ef:20:b8:5a:38:7b:e5:e5:ac:c2:38:
                    95:12:c9:24:e1:5c:6d:33:f3:6b:b4:96:10:87:4a:
                    f6:63:19:61:92:c7:c4:b1:47:95:a7:b4:24:ec:4d:
                    7a:a3:fa:1f:f9:67:83:d2:ea:05:41:ed:6a:fc:e3:
                    c9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:22:6A:F9:92:16:F6:18:2D:6B:DF:89:A3:37:65:BA:2D:91:D5:E4
            X509v3 Authority Key Identifier:
                keyid:BC:A0:32:90:54:F7:A7:4E:BF:C3:42:3B:9D:D8:6E:EC:0A:4A:17:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/BCA0329054F7A74EBFC3423B9DD86EEC0A4A1734.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCA0329054F7A74EBFC3423B9DD86EEC0A4A1734.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/3133312e3130382e3232382e302f32322d3233203d3e20323634333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:dc:ba:e5:c6:c5:f8:db:9b:06:91:91:9c:d7:f8:dd:db:ce:
         6b:20:7c:75:93:ec:98:f8:f8:67:e3:b1:b3:ba:84:2c:ba:d9:
         d3:96:b7:3c:81:35:b0:05:35:81:a6:46:a4:1b:93:e7:71:8b:
         b2:a9:4d:59:7d:a0:e3:cc:ca:bf:31:84:09:9b:52:62:18:f6:
         3e:24:4f:7f:43:ae:44:c3:4f:09:e0:b5:53:0a:c0:00:f3:b9:
         90:49:1c:18:4b:cf:e4:18:01:4a:d3:ca:06:f5:c4:16:15:68:
         74:7f:b0:cc:05:87:c4:8b:a8:0e:5a:56:a3:78:57:47:37:f0:
         98:9d:35:20:45:12:f1:99:72:80:11:de:c3:82:cb:61:34:23:
         13:5f:f6:e5:4f:8f:e8:c6:79:5d:f3:48:b8:51:33:a8:a2:8c:
         07:86:0d:ae:80:b5:6c:61:dc:9f:0c:89:d6:61:c6:cc:07:44:
         e1:f7:42:22:fe:95:da:ef:57:04:2e:a4:4b:f3:44:70:98:df:
         39:d8:9d:a4:b3:35:15:02:85:9a:d6:60:e4:7f:65:2e:aa:85:
         43:07:24:55:94:23:58:4e:26:75:29:f6:20:80:c9:a3:bc:02:
         fa:1f:52:09:e8:e5:fd:b7:55:55:de:47:0b:e8:54:f0:7f:51:
         ae:c7:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org