Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130322e302f32342d3234203d3e20323635393035.roa
File:                     3133312e3139362e3130322e302f32342d3234203d3e20323635393035.roa (raw, json)
Hash identifier:          CQY8bsI8SzPertl0cYSzCaoqjF0yQPG6/n23UEpjUVI=
Subject key identifier:   E9:6B:D0:2A:A1:D5:F4:6A:77:35:85:9C:4E:18:31:DF:44:9B:A2:9A
Certificate issuer:       /CN=3D6DB1BC149116AC9490618E05F0ECC88B68F4A4
Certificate serial:       0392F37EDFA2FFA5A4D2615C584D61E88D53A510
Authority key identifier: 3D:6D:B1:BC:14:91:16:AC:94:90:61:8E:05:F0:EC:C8:8B:68:F4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D6DB1BC149116AC9490618E05F0ECC88B68F4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130322e302f32342d3234203d3e20323635393035.roa
Signing time:             Mon 10 Jan 2022 19:27:45 +0000
ROA not before:           Mon 10 Jan 2022 19:22:45 +0000
ROA not after:            Mon 09 Jan 2023 19:27:45 +0000
asID:                     265905
IP address blocks:        131.196.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:92:f3:7e:df:a2:ff:a5:a4:d2:61:5c:58:4d:61:e8:8d:53:a5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D6DB1BC149116AC9490618E05F0ECC88B68F4A4
        Validity
            Not Before: Jan 10 19:22:45 2022 GMT
            Not After : Jan  9 19:27:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:5b:db:1b:e2:c2:fc:a2:41:47:cb:b2:dd:15:
                    c1:00:07:f3:a0:b2:f0:5d:b9:e9:c0:b2:bf:6b:f3:
                    58:05:93:bd:47:3c:d4:5b:fe:9a:f4:a2:2b:fd:7e:
                    54:17:5e:b2:06:d9:93:d7:e6:e7:29:bf:5f:ef:07:
                    d5:55:59:db:11:5e:5c:19:f5:d7:3e:41:1e:b1:39:
                    f9:2c:94:d7:8f:b3:ba:55:4d:d1:6a:a4:47:12:1a:
                    6d:d7:ea:b5:ef:15:31:88:6c:3e:ec:90:33:bf:d4:
                    f4:13:93:8b:47:1a:73:34:c0:cd:9b:d8:1e:59:77:
                    1f:47:97:c2:f5:43:8b:a7:1c:50:ce:99:4c:68:dd:
                    51:87:3d:0f:06:46:88:ff:b8:78:e1:30:b0:01:94:
                    ab:86:d4:20:e8:52:46:ce:17:20:fd:38:95:ab:d0:
                    15:cf:42:4d:05:14:1e:e6:8b:74:46:99:fe:26:df:
                    7f:5f:e1:f5:82:0b:4b:c9:66:5a:32:cc:c4:6f:47:
                    f9:62:01:3c:db:e1:f7:13:3d:37:7c:91:b9:2e:16:
                    c0:6c:56:6d:31:24:1d:2f:33:cf:85:aa:b4:d2:2d:
                    a9:cf:43:d4:7b:ff:b3:63:f3:8d:79:0f:d3:d1:db:
                    42:c7:7d:48:a7:9c:7b:37:e9:e2:92:d6:46:1d:2d:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6B:D0:2A:A1:D5:F4:6A:77:35:85:9C:4E:18:31:DF:44:9B:A2:9A
            X509v3 Authority Key Identifier:
                keyid:3D:6D:B1:BC:14:91:16:AC:94:90:61:8E:05:F0:EC:C8:8B:68:F4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3D6DB1BC149116AC9490618E05F0ECC88B68F4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D6DB1BC149116AC9490618E05F0ECC88B68F4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130322e302f32342d3234203d3e20323635393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:6d:07:50:7f:e0:97:3a:cc:6b:b7:be:ad:a9:41:47:ed:3f:
         90:cc:c4:c3:c9:2e:d2:37:53:f0:df:4a:40:e8:61:da:c7:17:
         7c:c0:e0:c3:c2:2a:23:3b:30:70:db:cd:a6:c8:25:29:7e:17:
         23:de:68:07:d2:0a:82:5b:c9:2f:f7:02:d8:e8:e0:66:e5:69:
         81:65:5e:9a:a6:94:c2:5a:ec:c3:00:7a:c4:a2:44:6d:4a:b5:
         5b:b2:07:43:80:d7:62:49:db:c7:69:d8:e7:da:98:f8:65:9d:
         ed:da:ac:4c:8d:81:31:5d:89:64:a2:b8:19:3d:1a:67:76:9f:
         cd:fc:8e:6a:4f:0b:f3:e0:55:8c:01:60:df:25:2f:a6:f9:8e:
         25:8e:e9:36:d2:1f:4f:75:ec:11:cf:f7:4d:45:d6:3f:9c:17:
         46:b9:9e:9f:10:ce:52:6b:9f:bc:46:45:71:29:a5:1f:86:b9:
         40:fc:63:35:8e:d3:8e:bf:a0:c8:2f:15:7e:c8:c9:23:eb:aa:
         e0:69:b4:28:47:66:cf:99:65:a6:9c:90:01:6d:ee:e3:e8:e3:
         6c:72:29:be:1b:fa:ca:10:cc:b1:f1:08:a5:5b:6d:e8:f5:aa:
         3b:be:91:f8:cf:00:53:3a:0b:64:16:46:b0:20:05:8a:8d:31:
         2d:50:98:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org