Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34392e302f32342d3234203d3e20323634333638.roa
File:                     3133312e3136312e34392e302f32342d3234203d3e20323634333638.roa (raw, json)
Hash identifier:          SfAK6aDDItp4Z5aJ9azDKSl27EFsqamYNMLBsS0kWio=
Subject key identifier:   09:B3:59:13:06:83:75:C0:B4:3E:87:28:E6:A2:37:7D:BA:15:77:3D
Certificate issuer:       /CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
Certificate serial:       7496AB69B8FF6308013891C8054DFC321CB8FB14
Authority key identifier: 8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34392e302f32342d3234203d3e20323634333638.roa
Signing time:             Tue 05 Mar 2024 17:59:51 +0000
ROA not before:           Tue 05 Mar 2024 17:54:51 +0000
ROA not after:            Tue 04 Mar 2025 17:59:51 +0000
asID:                     264368
IP address blocks:        131.161.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:96:ab:69:b8:ff:63:08:01:38:91:c8:05:4d:fc:32:1c:b8:fb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
        Validity
            Not Before: Mar  5 17:54:51 2024 GMT
            Not After : Mar  4 17:59:51 2025 GMT
        Subject: CN=09B35913068375C0B43E8728E6A2377DBA15773D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:e1:be:d6:be:e4:c6:ff:e4:4a:93:3f:c7:
                    6a:d0:61:ac:42:0f:03:fe:d5:68:4e:93:1b:f5:33:
                    e3:8d:da:d0:eb:a0:2e:02:b7:8a:10:27:b4:7c:ec:
                    79:84:cd:48:c2:5a:2b:2b:c5:f8:06:3b:a5:ee:ad:
                    65:fa:46:f5:51:a8:0b:b5:44:68:f3:36:69:fd:bd:
                    2e:03:d1:c4:4e:63:2a:03:79:0b:63:b1:0c:96:e3:
                    1f:13:e7:3f:de:51:81:a1:99:82:a7:5e:2d:26:ae:
                    c9:fa:5a:e3:98:9b:95:35:70:39:48:d3:98:c1:c3:
                    10:a2:dc:25:7f:8f:f0:df:5e:2a:a2:f8:1c:19:e2:
                    82:84:fa:1c:63:a7:b3:0a:89:22:a9:e2:a9:84:16:
                    7b:9b:81:66:54:34:35:a7:3b:35:e4:54:78:a3:44:
                    96:68:27:13:cc:4d:eb:fe:40:e5:22:5f:3d:06:8e:
                    2d:f6:3a:4a:55:23:9f:db:ad:fb:a8:45:68:a0:32:
                    81:a5:df:53:f3:8e:14:2c:3a:68:15:62:54:78:d1:
                    a6:de:27:f4:25:cb:88:23:b1:74:e7:45:2b:0a:97:
                    15:c4:ee:55:2a:39:e8:cd:bf:8f:5c:ca:16:a8:d8:
                    bd:1c:dd:9f:9f:35:74:72:ee:72:44:10:50:58:8d:
                    ff:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B3:59:13:06:83:75:C0:B4:3E:87:28:E6:A2:37:7D:BA:15:77:3D
            X509v3 Authority Key Identifier:
                keyid:8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34392e302f32342d3234203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:a2:70:fc:cc:97:95:e6:d1:b7:57:75:7d:01:2d:a8:18:fb:
         11:1a:88:41:5b:fd:b9:ba:2b:e7:85:4f:1a:50:f5:34:19:e5:
         ef:92:e7:20:f0:0d:b8:e9:ec:10:85:f8:6c:56:a9:61:72:2c:
         87:2c:41:aa:71:ce:54:5a:98:34:c6:2d:86:11:79:42:21:da:
         f7:eb:69:cb:2e:8a:48:61:0c:8f:40:dd:11:30:da:dd:cf:9e:
         cb:8f:a5:e1:75:1d:d3:b0:9f:60:6a:27:02:5e:c5:ec:48:fb:
         65:62:f8:56:a3:07:4e:3b:fe:3f:77:05:a2:24:f1:79:d8:a6:
         fd:c6:7c:a0:9d:f5:21:cb:7d:bf:7d:e2:6c:ee:10:1d:34:92:
         fb:83:de:6e:28:93:f2:ba:36:e4:a4:2d:38:57:bb:11:d1:53:
         b5:cc:b0:b7:d0:6b:b7:9b:be:29:2a:fd:2a:9d:28:23:c4:aa:
         1a:41:5c:36:06:a4:f0:24:af:ac:70:31:a8:a1:68:50:a1:61:
         21:8e:f5:12:91:84:c1:1c:8d:71:4e:46:c4:45:c5:be:2f:a0:
         e7:07:12:49:d8:80:b7:3a:8e:6f:52:21:c4:19:d4:24:aa:76:
         c1:63:98:35:ee:5a:45:2a:b5:96:c9:ee:d9:3b:5f:0d:6b:13:
         60:73:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org