Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e35302e302f32332d3233203d3e20323634333638.roa
File:                     3133312e3136312e35302e302f32332d3233203d3e20323634333638.roa (raw, json)
Hash identifier:          ZbETRtF8sI3HFt1KX/Ny4jzWrmDsF5+hisA9HAJVSd4=
Subject key identifier:   AD:6B:D9:66:00:BE:75:69:47:0D:44:B8:49:D2:41:AE:09:0B:1B:99
Certificate issuer:       /CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
Certificate serial:       02283887D73975E945FAFF83E55147BFA7C0FE43
Authority key identifier: 8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e35302e302f32332d3233203d3e20323634333638.roa
Signing time:             Tue 05 Mar 2024 17:59:51 +0000
ROA not before:           Tue 05 Mar 2024 17:54:51 +0000
ROA not after:            Tue 04 Mar 2025 17:59:51 +0000
asID:                     264368
IP address blocks:        131.161.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:28:38:87:d7:39:75:e9:45:fa:ff:83:e5:51:47:bf:a7:c0:fe:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
        Validity
            Not Before: Mar  5 17:54:51 2024 GMT
            Not After : Mar  4 17:59:51 2025 GMT
        Subject: CN=AD6BD96600BE7569470D44B849D241AE090B1B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:99:86:ae:76:9c:cf:80:d4:32:53:ba:2f:
                    34:9b:11:97:86:e2:3a:d6:43:a4:12:e2:3a:03:00:
                    a4:58:9c:f1:3c:c3:24:75:3c:81:26:07:2c:14:37:
                    13:19:49:02:0f:77:fe:a8:39:75:50:ed:7f:56:a9:
                    1b:43:19:ae:88:72:06:96:4a:62:a7:a8:4b:a8:19:
                    26:8e:ee:d3:da:f6:07:9c:4a:e0:ff:55:b6:38:15:
                    8a:15:d2:e9:c3:97:a5:76:9f:31:c3:b1:36:9b:b8:
                    b4:c7:14:a1:88:a5:02:ba:96:d0:56:3f:04:c8:88:
                    cb:48:e0:dc:ba:46:a0:25:5e:3a:9c:d1:b8:d7:17:
                    d1:48:7b:5c:1b:ac:70:b5:ab:87:52:32:a7:18:34:
                    a0:7d:9c:77:ef:3d:d2:aa:bb:51:1f:16:76:28:ab:
                    56:55:2b:7d:82:a6:84:8b:e6:4c:d2:10:58:86:e2:
                    c7:8f:e9:81:04:97:c4:c2:21:2e:ed:31:36:34:30:
                    ed:ed:5a:31:1f:15:9d:5d:a2:88:28:81:e5:42:ef:
                    bf:ec:32:b9:ca:f0:3e:d6:96:21:7e:36:35:ab:bc:
                    98:c8:7d:f6:c4:03:e0:6a:da:de:e3:49:e0:f3:c5:
                    f6:62:5d:56:f2:f5:93:f7:74:28:a1:95:d5:cd:72:
                    b5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6B:D9:66:00:BE:75:69:47:0D:44:B8:49:D2:41:AE:09:0B:1B:99
            X509v3 Authority Key Identifier:
                keyid:8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e35302e302f32332d3233203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:1e:b7:b4:1b:44:e7:f6:85:59:8b:06:58:c8:c8:d6:57:99:
         64:6a:b7:0e:33:a8:af:d3:8f:d7:43:68:31:55:15:aa:5c:75:
         02:58:73:39:f5:d4:a7:fa:1a:cf:c3:9e:6e:40:3e:31:dc:b3:
         7c:2c:d3:b1:52:dc:45:99:c2:cd:d1:51:9d:50:a8:c8:b0:32:
         31:eb:dc:d8:d6:6a:99:90:36:c4:a7:74:ea:52:57:0b:69:69:
         6d:9c:fa:92:fc:14:97:69:ae:f0:b9:03:fe:af:f9:40:9f:c2:
         f1:8b:39:14:ba:4f:93:7e:4e:49:34:67:c1:d1:64:70:fb:df:
         03:24:09:c0:3c:75:7d:e7:1e:dd:9e:d4:23:11:7f:61:ab:30:
         8f:b6:45:0d:78:ea:de:92:25:10:ee:5f:c2:2f:bb:5d:d9:11:
         d2:58:91:f9:c1:d6:f0:c2:a8:e0:95:2b:ce:ca:9f:13:6f:3e:
         c4:e9:c0:7e:e8:9e:88:f4:80:ce:70:5d:57:55:17:bc:9a:4d:
         82:25:a1:ae:b1:c3:e0:de:90:74:8e:ec:86:53:14:11:75:bf:
         de:85:a6:be:51:29:4d:e2:36:1c:44:2d:d5:9b:8b:7b:9d:e1:
         e3:ca:53:85:2b:71:e0:2f:69:96:b6:aa:81:aa:56:47:9a:f6:
         91:a9:56:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org