Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133342e302f32332d3233203d3e20323632323933.roa
File:                     3133312e3136312e3133342e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          +xN6YrWIGqouEAWDPMxA97Wpqq8k3w/AnqTwqYXRl3s=
Subject key identifier:   D7:E8:44:32:6D:11:CB:43:AB:02:95:E8:43:1C:1A:E6:9D:42:20:73
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       747423BCB27DF09FFF77F5A0FA1EC7DC34268EF7
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133342e302f32332d3233203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:37 +0000
ROA not before:           Tue 02 Jan 2024 21:11:37 +0000
ROA not after:            Tue 31 Dec 2024 21:16:37 +0000
asID:                     262293
IP address blocks:        131.161.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:74:23:bc:b2:7d:f0:9f:ff:77:f5:a0:fa:1e:c7:dc:34:26:8e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:37 2024 GMT
            Not After : Dec 31 21:16:37 2024 GMT
        Subject: CN=D7E844326D11CB43AB0295E8431C1AE69D422073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:13:5d:32:59:b4:da:76:63:ee:02:3f:e0:ed:
                    b7:50:97:99:89:ff:04:a6:2c:66:da:0b:0b:61:9a:
                    e8:c9:e8:a7:6c:30:9e:35:54:dc:95:f7:89:f9:62:
                    f4:f0:18:12:64:c6:4b:df:d5:22:7a:21:9d:1a:0a:
                    0e:71:2c:23:df:65:7f:ff:a3:85:3d:9c:9d:db:c0:
                    3b:98:41:79:8d:09:e0:21:03:69:89:43:6f:38:95:
                    2e:8b:e7:1b:fc:18:56:70:b5:a7:9d:68:02:1e:81:
                    c5:2a:8c:e5:2d:d5:c3:cb:ad:92:0f:9b:b1:b8:a6:
                    8f:a9:cf:3a:e8:85:ad:77:df:a6:f9:5d:46:45:c7:
                    a1:59:5f:66:96:7a:dd:c2:07:53:c4:45:a9:66:f4:
                    ec:37:b4:4a:09:97:42:15:2d:1f:fb:e6:2d:57:bb:
                    7b:f1:85:4a:a9:1f:5d:f0:f9:f2:af:08:d6:b2:65:
                    90:25:1b:7f:4e:33:d8:7d:5f:17:0c:c4:86:31:a0:
                    51:28:53:09:f3:d1:96:b1:2c:c7:d8:de:b0:9c:1a:
                    93:c1:d3:02:12:78:db:0e:61:39:08:de:1f:b6:1d:
                    c9:77:2c:bd:13:df:38:42:b3:17:23:b5:59:3b:2b:
                    78:c6:21:da:08:f2:b2:60:1a:75:0e:88:cc:92:2d:
                    e7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E8:44:32:6D:11:CB:43:AB:02:95:E8:43:1C:1A:E6:9D:42:20:73
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133342e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:51:4a:58:9e:74:78:79:3f:d9:fe:1f:7f:13:f7:48:91:12:
         ac:bc:f9:0a:de:13:12:ed:6b:80:1d:59:c4:77:a4:90:39:87:
         44:35:a7:c3:64:14:08:38:f8:67:ae:0f:8c:14:c3:db:f0:8b:
         34:ad:ff:bb:39:df:f9:e8:dc:64:4e:3c:62:a4:57:e7:f4:92:
         f5:62:27:10:e1:81:d4:d6:fd:58:b8:5d:5c:78:6e:d7:7e:e0:
         df:a3:1c:27:45:82:0c:fa:7c:cb:4e:cd:0d:92:f2:a4:9b:3a:
         af:be:27:10:13:11:24:e6:6d:ef:e7:be:bc:13:7e:6c:86:4d:
         41:99:ae:70:d2:70:c4:76:53:3f:f5:29:b0:2d:34:70:d5:b8:
         9d:1d:6b:4e:16:5f:6c:06:8a:4e:65:ac:f3:03:a2:20:02:f0:
         34:6b:ab:18:93:05:e3:02:80:fe:06:97:3b:31:d5:34:9c:79:
         73:96:73:ce:03:54:13:da:9a:3f:71:7f:c1:9e:a4:b2:a0:7e:
         1a:3c:16:e6:ec:a1:ad:9b:78:56:70:17:7c:5e:df:75:e1:4d:
         44:40:00:5a:3b:8c:8a:26:76:71:5a:d6:cd:45:1d:3c:aa:4c:
         ab:52:0e:d7:e3:fc:04:2f:50:f6:4f:df:0e:6b:42:ae:27:51:
         1b:24:8c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org