Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133312e3235352e32302e302f32322d3232203d3e203238323130.roa
File:                     3133312e3235352e32302e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier:          ofZbE48tYcRDGePwNGQib1NOXY+p5OfVVDeMLBpZNBw=
Subject key identifier:   E5:7B:83:5D:98:B4:FF:4D:B8:69:3E:97:E2:0C:76:0F:A3:96:A1:EB
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       705F6D40FAB9B17997905C0AC49F8AA40DDD1C3F
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133312e3235352e32302e302f32322d3232203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:24 +0000
ROA not before:           Wed 28 Feb 2024 13:58:24 +0000
ROA not after:            Wed 26 Feb 2025 14:03:24 +0000
asID:                     28210
IP address blocks:        131.255.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5f:6d:40:fa:b9:b1:79:97:90:5c:0a:c4:9f:8a:a4:0d:dd:1c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:24 2024 GMT
            Not After : Feb 26 14:03:24 2025 GMT
        Subject: CN=E57B835D98B4FF4DB8693E97E20C760FA396A1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ae:ae:99:f1:4f:37:c3:c8:af:3a:be:c2:a3:
                    39:32:11:82:fe:29:b3:41:c5:07:95:2b:d0:15:7b:
                    18:a0:4a:21:c9:21:10:29:07:af:d6:0d:b7:1a:f2:
                    ba:f1:fd:e3:ba:56:58:98:e7:ec:eb:3d:94:5f:ec:
                    e1:5f:17:56:28:94:64:8a:ce:12:b5:af:7e:fa:14:
                    1f:b3:72:62:f5:a0:47:b8:a7:65:05:51:f8:59:e5:
                    75:8e:c7:69:81:a9:44:ef:aa:e9:31:41:b0:31:58:
                    31:a3:87:63:a2:c8:8a:94:08:71:57:db:b2:6a:9d:
                    c7:9a:c7:09:3e:33:32:5e:fb:11:56:6d:a6:10:d3:
                    d2:05:f3:17:4c:b6:52:83:be:a8:ec:bf:1a:0f:be:
                    3d:2d:67:37:a5:d3:41:f3:f6:bf:cc:62:35:03:6a:
                    28:5c:01:d6:62:1d:43:de:0d:1a:fb:44:5c:81:7f:
                    02:b9:92:ba:b6:5a:e8:7f:19:31:42:c9:84:54:70:
                    63:95:dd:31:e4:46:0c:c5:fa:00:c2:60:f3:c3:35:
                    c1:81:50:81:15:bd:07:4f:a8:de:06:57:f4:62:b4:
                    fc:03:97:d0:69:a9:58:ee:a3:c1:f1:4c:fd:9f:4b:
                    b4:bc:30:06:a6:c6:ac:7d:b0:a0:5d:63:99:68:02:
                    d3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7B:83:5D:98:B4:FF:4D:B8:69:3E:97:E2:0C:76:0F:A3:96:A1:EB
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133312e3235352e32302e302f32322d3232203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:c2:f9:14:8a:78:a2:c9:84:01:75:85:9c:9b:0b:de:2a:1d:
         6e:bc:7e:2a:af:6a:0e:e1:7b:a3:2c:32:bf:64:4d:15:f4:86:
         9f:a0:bb:62:e1:85:2b:bf:a9:9b:41:b4:c5:f6:b8:df:a6:51:
         58:50:02:80:78:66:8c:96:32:c8:06:8c:37:5a:c9:0d:b4:82:
         00:2a:71:c4:95:4c:86:7a:7f:57:80:85:4f:0d:b4:00:21:a5:
         ff:f8:c8:74:06:d1:59:83:f1:2b:e0:1b:63:89:bb:bf:f8:ed:
         06:e7:ea:26:37:d8:68:5a:a3:c6:1b:7a:46:6e:5c:46:45:e6:
         db:86:f6:c6:61:fe:88:64:b4:f5:75:a7:1f:b1:0d:d3:29:9e:
         fe:cf:b3:08:7d:15:23:b5:20:a3:0f:fa:3d:e4:57:3e:7b:4d:
         5c:48:2f:55:5c:a6:fb:f2:35:7e:c9:e6:21:82:d1:9d:67:e8:
         95:af:2b:97:fe:cc:36:ee:1b:20:12:4a:e6:ed:f1:80:9e:fe:
         2c:16:19:76:b7:10:73:1f:e4:de:89:5d:5b:28:98:30:7d:b0:
         7f:3c:47:b2:9f:fa:6a:c3:a9:fa:d8:87:37:44:b7:c5:68:10:
         83:cc:7f:42:c0:ad:c9:2f:cf:bb:ce:4c:f5:0a:f8:0b:61:70:
         c4:1f:16:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org