Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34382e302f32342d3234203d3e20323634333638.roa
File:                     3133312e3136312e34382e302f32342d3234203d3e20323634333638.roa (raw, json)
Hash identifier:          C7npKnDewxy01DtOXU23NrM0CxeqnAegfS1OeYuWNJM=
Subject key identifier:   40:96:50:AA:8D:3A:13:8D:28:FE:04:F0:95:5F:96:E6:F3:07:44:C6
Certificate issuer:       /CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
Certificate serial:       3F212981EDF386F25A90EB1321AE8D6D29E04157
Authority key identifier: 8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34382e302f32342d3234203d3e20323634333638.roa
Signing time:             Tue 05 Mar 2024 17:59:51 +0000
ROA not before:           Tue 05 Mar 2024 17:54:51 +0000
ROA not after:            Tue 04 Mar 2025 17:59:51 +0000
asID:                     264368
IP address blocks:        131.161.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:21:29:81:ed:f3:86:f2:5a:90:eb:13:21:ae:8d:6d:29:e0:41:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
        Validity
            Not Before: Mar  5 17:54:51 2024 GMT
            Not After : Mar  4 17:59:51 2025 GMT
        Subject: CN=409650AA8D3A138D28FE04F0955F96E6F30744C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:37:71:5f:5b:89:b0:33:6d:bd:92:a9:18:
                    bd:8e:a4:01:53:c9:5a:6c:d8:7b:1f:e7:b1:e0:c6:
                    e5:4a:2e:12:ad:1f:f9:d5:b8:b8:a4:1f:6a:d3:6a:
                    82:89:8d:6b:cf:98:23:f8:24:bc:e7:f6:6d:d4:25:
                    bf:00:cd:e7:08:fc:65:76:3d:15:26:dc:84:c3:8c:
                    c3:14:c5:eb:e2:cd:90:ea:83:58:95:0d:b3:7c:92:
                    bd:b4:cd:80:ed:10:9b:68:59:a8:b5:f4:ea:58:e9:
                    73:2f:2f:27:d3:ec:e9:fe:ce:d6:3c:f1:63:17:e3:
                    f3:b7:bd:e5:c2:d3:68:ef:3b:54:27:29:14:d2:c8:
                    d0:8d:d4:e3:c3:37:f9:64:d9:38:a7:d0:14:b0:56:
                    a8:fb:81:6a:d9:c9:f0:72:a5:36:33:f5:41:06:cd:
                    a7:ec:3f:20:c6:68:c5:0d:8c:8a:5c:3f:5a:6f:82:
                    4c:29:c4:2c:1a:49:99:88:0f:d4:be:96:ef:26:48:
                    d3:80:65:9c:9f:c1:45:51:df:1b:df:10:40:6c:6d:
                    60:22:38:4b:22:7c:7a:ac:d2:d3:6b:7a:3b:7e:6c:
                    42:fc:5d:0f:88:bc:79:96:d1:0a:e4:8d:7b:0d:45:
                    50:d5:1f:53:ae:a4:a4:8e:22:53:ac:62:6e:35:a8:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:96:50:AA:8D:3A:13:8D:28:FE:04:F0:95:5F:96:E6:F3:07:44:C6
            X509v3 Authority Key Identifier:
                keyid:8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34382e302f32342d3234203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:a1:ec:28:ce:ad:2d:90:c0:1e:31:9c:17:88:68:eb:ea:a5:
         58:c1:3e:66:17:f6:bc:eb:c8:1e:6c:21:56:9c:62:3b:98:06:
         64:5c:53:eb:99:e2:32:65:92:b7:10:23:59:aa:6c:74:38:fb:
         79:04:35:6c:51:d2:86:69:5a:86:9d:0e:71:d9:a8:96:2c:cb:
         07:9c:ef:db:b5:e9:c3:86:79:dd:d7:86:7e:ed:ec:4f:a9:82:
         2b:3c:b1:78:16:04:29:a4:cb:ec:78:f3:dd:6d:2a:2b:4c:5a:
         88:be:fb:45:f9:71:ba:30:6e:0e:10:90:68:a4:df:45:a7:92:
         53:c5:d7:a4:19:47:d8:c8:89:11:98:e4:f2:b3:96:80:6a:13:
         75:bd:af:fd:d1:63:c9:b7:23:e2:10:e1:5a:07:8e:2a:75:2d:
         11:9b:eb:35:86:b9:6f:b9:19:5e:51:c2:98:da:09:56:ee:b4:
         27:ae:29:48:2f:f5:c7:79:e4:be:b7:80:5b:62:0f:c4:9e:03:
         b5:ba:5e:7b:7b:1c:a2:af:fe:ac:c8:5c:a7:3b:65:da:ed:5c:
         aa:b0:4b:37:73:f5:ba:35:82:a9:77:cb:62:39:04:15:25:83:
         a1:ad:59:55:35:48:fd:20:b5:06:1d:ea:56:49:ee:d0:64:bc:
         36:85:fd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org