Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/3133312e3130302e3133322e302f32322d3232203d3e203631363337.roa
File:                     3133312e3130302e3133322e302f32322d3232203d3e203631363337.roa (raw, json)
Hash identifier:          fWJ+Tkv0LRxtqF+PxU5Ub3MDzZj57O6LCG8EmbECaoE=
Subject key identifier:   22:AC:87:CB:EB:5C:3A:60:81:00:79:0E:3D:2B:2C:C1:B9:93:37:32
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       12F4F490FF9CA806A2B4E33C551AD52145EFD086
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/3133312e3130302e3133322e302f32322d3232203d3e203631363337.roa
Signing time:             Thu 01 Feb 2024 19:55:31 +0000
ROA not before:           Thu 01 Feb 2024 19:50:31 +0000
ROA not after:            Thu 30 Jan 2025 19:55:31 +0000
asID:                     61637
IP address blocks:        131.100.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f4:f4:90:ff:9c:a8:06:a2:b4:e3:3c:55:1a:d5:21:45:ef:d0:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb  1 19:50:31 2024 GMT
            Not After : Jan 30 19:55:31 2025 GMT
        Subject: CN=22AC87CBEB5C3A608100790E3D2B2CC1B9933732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:9f:af:38:13:b4:95:56:fe:a5:05:03:60:
                    65:44:06:cd:f0:d7:f6:cf:51:b8:73:a1:32:7c:45:
                    c9:98:f3:dd:05:d3:b6:50:ee:7f:dc:ff:37:48:71:
                    be:70:0b:d0:e7:2a:54:fb:da:12:59:34:2b:2a:eb:
                    0a:d5:33:43:ff:ea:6e:9a:ef:e0:e4:1b:61:e9:a2:
                    95:21:3c:92:7b:da:2a:41:0f:41:e9:e0:41:0a:d1:
                    fa:0a:10:da:30:ed:60:ea:c8:43:8d:2f:fd:58:fa:
                    5b:36:66:64:37:6b:3f:bb:c3:fc:10:25:25:83:eb:
                    b4:d2:68:fe:4d:67:84:e6:d9:7c:d2:ca:a4:68:2d:
                    63:27:2e:50:2d:ed:c8:9e:b5:34:47:bb:bc:ea:2e:
                    f6:80:e3:bb:fd:5f:80:41:e4:d2:60:60:50:d2:1a:
                    8d:32:35:2b:a0:52:ff:27:16:3f:cd:fb:b4:cd:ef:
                    5c:6d:7d:bf:ec:97:3a:ef:6d:21:03:cd:16:68:36:
                    e4:04:4d:de:bf:e8:f0:3e:6a:e2:15:95:47:7e:b9:
                    77:6c:aa:46:f5:83:40:bb:72:e2:e3:8b:e8:1f:32:
                    94:a5:2b:e3:45:c3:70:bf:75:ef:cf:76:89:2a:73:
                    89:46:a1:cd:a6:b9:a6:5f:84:f7:37:98:b4:82:75:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AC:87:CB:EB:5C:3A:60:81:00:79:0E:3D:2B:2C:C1:B9:93:37:32
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/3133312e3130302e3133322e302f32322d3232203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:e0:d5:9c:af:60:a1:21:ed:e0:f0:a2:32:00:e0:c2:7e:61:
         e6:24:c7:68:62:1f:36:bc:39:30:98:a4:a3:66:3e:e1:83:c2:
         de:04:51:e7:d0:11:71:72:86:cd:f1:01:8f:a0:e1:62:4a:f7:
         dd:01:87:50:ef:17:2c:ba:03:97:88:d2:3e:e4:d6:18:5f:15:
         12:26:11:ac:3c:97:9f:c8:14:e3:5c:71:77:f0:b0:ae:ba:b0:
         8a:28:13:f0:11:a7:93:8a:3c:3d:a4:34:ce:57:7f:d7:37:bd:
         6e:6b:23:8f:49:c0:ae:73:7d:61:ed:1f:bb:0a:5b:90:8b:fd:
         20:4f:05:c8:ed:f2:fd:49:16:96:d8:a0:8c:33:0a:81:35:5f:
         fd:ff:b5:2d:12:b3:86:9e:3c:9f:b2:44:00:f9:04:4a:21:3c:
         17:2d:39:56:43:dc:85:8f:05:ec:7e:cd:ea:73:0f:60:df:0f:
         ad:92:20:14:d5:14:d7:b4:29:40:9c:c0:9a:6b:cc:0c:35:b3:
         2f:87:99:92:a1:12:f6:24:4e:36:22:0a:34:3c:3f:5b:3b:42:
         c9:5f:2b:9f:0c:a3:6a:b9:15:ff:e3:04:db:25:b6:ee:87:57:
         a7:4f:c6:3e:3f:9f:ed:41:a8:36:21:a0:c2:85:65:71:20:e8:
         2f:02:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org