Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/3133312e3235352e3230342e302f32322d3234203d3e20323633353832.roa
File:                     3133312e3235352e3230342e302f32322d3234203d3e20323633353832.roa (raw, json)
Hash identifier:          kzuMGayRFWHvG47xR9aTL5MP+KXLdmzchr5bLSSydxw=
Subject key identifier:   A1:FC:3C:F3:F6:FC:0A:62:B1:64:8B:09:11:7C:80:FF:42:3D:B2:87
Certificate issuer:       /CN=B4B19FDC97B4A5BBEF71A74C356CFE34DFCE3B8E
Certificate serial:       30DB6D2DC1E9D22018240AD550626C0A3CD9768F
Authority key identifier: B4:B1:9F:DC:97:B4:A5:BB:EF:71:A7:4C:35:6C:FE:34:DF:CE:3B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4B19FDC97B4A5BBEF71A74C356CFE34DFCE3B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/3133312e3235352e3230342e302f32322d3234203d3e20323633353832.roa
Signing time:             Mon 11 Dec 2023 12:13:29 +0000
ROA not before:           Mon 11 Dec 2023 12:08:29 +0000
ROA not after:            Mon 09 Dec 2024 12:13:29 +0000
asID:                     263582
IP address blocks:        131.255.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:db:6d:2d:c1:e9:d2:20:18:24:0a:d5:50:62:6c:0a:3c:d9:76:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4B19FDC97B4A5BBEF71A74C356CFE34DFCE3B8E
        Validity
            Not Before: Dec 11 12:08:29 2023 GMT
            Not After : Dec  9 12:13:29 2024 GMT
        Subject: CN=A1FC3CF3F6FC0A62B1648B09117C80FF423DB287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:6a:7f:14:09:3c:ff:cb:e6:92:8d:f5:de:
                    2c:4a:1d:2e:03:67:3b:19:0f:1a:11:81:08:5a:e7:
                    66:87:57:b7:29:d2:84:59:d4:41:cd:ac:1c:34:37:
                    4c:a0:af:6d:9e:a7:6d:26:43:47:f3:a6:f3:8a:21:
                    4a:2b:56:5e:ee:0a:2c:6e:75:68:8e:59:0e:1c:ad:
                    55:2d:ab:c5:db:9f:e4:77:77:d6:cf:a1:16:df:64:
                    82:45:2d:e4:a8:04:50:1b:98:b2:3e:b2:5f:1e:8b:
                    23:b6:97:a7:d8:4e:1e:a6:3f:6c:31:a7:24:c1:81:
                    50:36:0d:67:c9:94:68:3b:26:b9:0e:26:d4:10:ef:
                    08:c1:d3:4a:aa:dd:a2:e7:fe:04:e3:2a:28:4e:47:
                    29:ec:99:46:fc:4f:6f:b1:5b:e9:d4:e4:e2:25:db:
                    4e:0e:8b:68:12:22:3f:e5:0d:37:d6:14:16:82:e3:
                    25:3c:59:23:a0:5f:2a:99:36:f2:30:17:2d:4a:1d:
                    3d:e9:f4:1e:3d:77:86:1d:12:c8:21:0d:1b:0c:5f:
                    aa:a4:c0:47:a4:c4:74:d0:14:d7:69:3b:a0:05:75:
                    b9:0e:26:c0:a5:16:7d:72:d7:d7:e7:35:f5:6f:82:
                    67:c8:83:be:86:dc:11:18:ec:17:c3:c3:af:f7:ca:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FC:3C:F3:F6:FC:0A:62:B1:64:8B:09:11:7C:80:FF:42:3D:B2:87
            X509v3 Authority Key Identifier:
                keyid:B4:B1:9F:DC:97:B4:A5:BB:EF:71:A7:4C:35:6C:FE:34:DF:CE:3B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/B4B19FDC97B4A5BBEF71A74C356CFE34DFCE3B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4B19FDC97B4A5BBEF71A74C356CFE34DFCE3B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/3133312e3235352e3230342e302f32322d3234203d3e20323633353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:cb:1b:8b:5e:cb:b0:79:ba:92:b6:b0:a7:d5:85:4e:9b:
         9c:e4:b9:71:95:04:5e:42:88:3f:7c:80:1f:20:9a:7e:7f:e6:
         7b:98:3f:02:82:eb:0f:4b:1a:a0:0a:40:c7:23:b4:4c:9e:f0:
         ff:91:6d:2f:e1:15:02:41:9d:17:88:92:b3:d7:8e:dc:e4:13:
         a4:df:07:21:fe:c9:91:99:38:bc:77:87:8e:f1:8c:20:57:0b:
         f1:cb:56:86:2a:ab:01:65:e5:01:fa:57:05:eb:91:35:d7:d7:
         ea:e1:12:25:d5:15:eb:d5:87:7a:32:37:44:af:85:aa:33:f1:
         9e:07:28:15:a1:73:96:f4:e9:2a:e1:9d:4b:3e:ec:aa:5f:f6:
         32:8e:92:07:f0:93:8a:73:70:43:0b:62:07:34:f1:c8:ed:09:
         33:ef:b4:b0:80:2e:5c:3e:3d:d2:5c:15:ee:56:9a:ca:3b:08:
         39:2f:93:66:9b:a5:4b:c4:5f:83:8f:02:a7:cc:bb:2e:48:6e:
         16:eb:a2:fa:1d:af:a8:3a:30:21:f9:50:ca:64:a5:41:d4:c8:
         07:99:ef:f7:e2:9c:98:7e:31:fc:c3:c8:28:01:a7:6c:56:bf:
         5a:68:c8:a3:22:91:6d:9d:1e:3a:56:aa:80:37:1b:01:9f:25:
         37:69:b5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org