Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130302e302f32342d3234203d3e20323635393035.roa
File:                     3133312e3139362e3130302e302f32342d3234203d3e20323635393035.roa (raw, json)
Hash identifier:          fEz7qXVkXLIQA4ByIaaIpsNSAgBHEyU8rUr1tHP5L2Q=
Subject key identifier:   8B:B1:BB:85:D3:C1:52:28:6B:82:EB:F3:68:2A:1E:A4:99:30:DB:B0
Certificate issuer:       /CN=3D6DB1BC149116AC9490618E05F0ECC88B68F4A4
Certificate serial:       44D55239EC3FEBD83E392817F770547B9897CCF6
Authority key identifier: 3D:6D:B1:BC:14:91:16:AC:94:90:61:8E:05:F0:EC:C8:8B:68:F4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D6DB1BC149116AC9490618E05F0ECC88B68F4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130302e302f32342d3234203d3e20323635393035.roa
Signing time:             Mon 10 Jan 2022 19:27:41 +0000
ROA not before:           Mon 10 Jan 2022 19:22:41 +0000
ROA not after:            Mon 09 Jan 2023 19:27:41 +0000
asID:                     265905
IP address blocks:        131.196.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d5:52:39:ec:3f:eb:d8:3e:39:28:17:f7:70:54:7b:98:97:cc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D6DB1BC149116AC9490618E05F0ECC88B68F4A4
        Validity
            Not Before: Jan 10 19:22:41 2022 GMT
            Not After : Jan  9 19:27:41 2023 GMT
        Subject: CN=3082010A0282010100F8A3BFE681BEBFA8858306350EB948DCB9FEA9B63C09E72022CE96A2CB634C632D8483E095EB22811256558BBBDB39B1FCE68A1C02B00BD851BF1C68BC6A4E42A876B925DFFA72F488F142A632F7026398A69713A931ADEFAD8C9EAF3E7C51D8F13E414660BBD92E4CCD963CA8999902EEAF0959EA3DE6F462529AC2399D0333E66BA056EECAF782AA2FCCDAF9F47F9D33D4F3D2CB269C1EE1792A4E8A3C18424C890372248420CB1ADCCF40DB9C1E424ACA94BDB6F1A5728DC2CF1C2F2B7D8AEEDB6D6F62A2AB912B1A7BCEA5CFE50D3886E08C0D4E6B539B709C4FBCA7BB301E976C61C8D199946F8AB177271A5BB490C607D89AD41E2E970FE8068B71937B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a3:bf:e6:81:be:bf:a8:85:83:06:35:0e:b9:
                    48:dc:b9:fe:a9:b6:3c:09:e7:20:22:ce:96:a2:cb:
                    63:4c:63:2d:84:83:e0:95:eb:22:81:12:56:55:8b:
                    bb:db:39:b1:fc:e6:8a:1c:02:b0:0b:d8:51:bf:1c:
                    68:bc:6a:4e:42:a8:76:b9:25:df:fa:72:f4:88:f1:
                    42:a6:32:f7:02:63:98:a6:97:13:a9:31:ad:ef:ad:
                    8c:9e:af:3e:7c:51:d8:f1:3e:41:46:60:bb:d9:2e:
                    4c:cd:96:3c:a8:99:99:02:ee:af:09:59:ea:3d:e6:
                    f4:62:52:9a:c2:39:9d:03:33:e6:6b:a0:56:ee:ca:
                    f7:82:aa:2f:cc:da:f9:f4:7f:9d:33:d4:f3:d2:cb:
                    26:9c:1e:e1:79:2a:4e:8a:3c:18:42:4c:89:03:72:
                    24:84:20:cb:1a:dc:cf:40:db:9c:1e:42:4a:ca:94:
                    bd:b6:f1:a5:72:8d:c2:cf:1c:2f:2b:7d:8a:ee:db:
                    6d:6f:62:a2:ab:91:2b:1a:7b:ce:a5:cf:e5:0d:38:
                    86:e0:8c:0d:4e:6b:53:9b:70:9c:4f:bc:a7:bb:30:
                    1e:97:6c:61:c8:d1:99:94:6f:8a:b1:77:27:1a:5b:
                    b4:90:c6:07:d8:9a:d4:1e:2e:97:0f:e8:06:8b:71:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B1:BB:85:D3:C1:52:28:6B:82:EB:F3:68:2A:1E:A4:99:30:DB:B0
            X509v3 Authority Key Identifier:
                keyid:3D:6D:B1:BC:14:91:16:AC:94:90:61:8E:05:F0:EC:C8:8B:68:F4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3D6DB1BC149116AC9490618E05F0ECC88B68F4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D6DB1BC149116AC9490618E05F0ECC88B68F4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130302e302f32342d3234203d3e20323635393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:bd:54:05:a3:20:07:73:75:71:fe:bf:a2:87:62:c0:0e:ab:
         4b:d5:59:e0:00:50:fa:dd:07:ff:a8:13:4c:5d:2e:1f:19:50:
         a5:64:ce:5d:5a:da:03:c2:b9:1a:6c:6b:28:68:a8:7c:84:87:
         54:c5:e1:b4:d6:b6:f2:26:45:74:17:5f:f1:37:90:3c:f9:90:
         eb:01:3c:33:e0:5f:73:b0:11:8c:9a:f5:42:a3:95:cb:a0:e7:
         b8:62:c9:e7:32:d1:93:74:07:e1:d8:24:27:15:66:f9:8d:98:
         e3:88:74:94:30:40:8e:af:5d:fa:74:dc:74:5c:e0:48:03:4b:
         56:5f:83:f6:62:e7:bb:5d:05:8a:79:e2:6f:84:4d:dc:57:b2:
         9b:b7:e3:bb:87:e1:9d:b2:68:cc:1e:be:ee:a4:b9:95:7d:83:
         c6:a5:69:b8:2e:91:a1:e7:ba:9f:1b:4d:33:9e:b0:5b:4f:af:
         b8:86:fd:e3:5d:39:19:c9:ea:e2:ac:64:37:e1:d7:91:a6:bf:
         d8:ad:7b:1e:f0:71:59:85:9d:40:63:31:f4:99:b8:d0:67:80:
         52:e7:78:28:13:da:37:89:ec:2b:fa:81:b9:13:55:ae:7e:f7:
         b0:ef:e3:5c:1c:8c:e9:1f:f3:92:fc:6d:86:a9:81:60:4d:8e:
         c1:9f:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org