Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa
File:                     3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier:          4ZugIdttAYARQW14sVWTQo4DfonBhclLGCdv6LCovH0=
Subject key identifier:   38:47:3A:81:6B:E5:02:56:D8:AE:A6:77:7D:69:00:F4:10:85:7B:B4
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       5129D653D187ED2B1CC210A90E4D3FB1467B2E36
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa
Signing time:             Fri 15 Mar 2024 16:30:22 +0000
ROA not before:           Fri 15 Mar 2024 16:25:22 +0000
ROA not after:            Fri 14 Mar 2025 16:30:22 +0000
asID:                     22177
IP address blocks:        131.100.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:29:d6:53:d1:87:ed:2b:1c:c2:10:a9:0e:4d:3f:b1:46:7b:2e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Mar 15 16:25:22 2024 GMT
            Not After : Mar 14 16:30:22 2025 GMT
        Subject: CN=38473A816BE50256D8AEA6777D6900F410857BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:f1:c7:0b:e3:00:08:fc:65:aa:f7:0d:42:
                    44:ab:3c:8b:34:7c:2e:97:f0:2f:ee:9a:00:4f:9f:
                    75:78:ff:f2:76:62:8a:09:67:89:1f:ea:72:aa:5f:
                    35:fc:70:8b:7f:5c:01:57:ea:dd:6d:c1:6a:22:10:
                    24:f9:52:83:13:48:ee:ff:e2:54:a3:8d:d5:20:33:
                    21:bc:cd:14:e6:24:74:25:5a:d9:89:db:8e:3d:96:
                    ad:96:8f:85:3f:33:66:7e:fd:16:2b:f9:6d:c4:56:
                    06:89:5e:07:c0:c7:d7:29:8e:b3:e6:2e:a2:99:e4:
                    ee:2e:d3:87:b1:9d:04:54:83:9b:af:a2:c9:f2:67:
                    86:56:94:8d:26:ea:b8:90:45:96:a9:88:a0:88:80:
                    d2:bc:51:a6:bb:c3:ad:bb:7c:1b:e8:09:c1:5e:88:
                    bf:7d:2a:54:9f:40:d4:63:ad:6a:d2:f4:a4:2f:7d:
                    c0:42:9e:4f:cc:6a:4e:9a:76:2a:d6:ff:51:ec:e2:
                    ce:9c:35:f3:61:fd:51:5d:8f:11:8d:4c:22:bc:f3:
                    36:d5:e9:59:c2:53:3f:0d:cf:01:70:e2:7e:15:af:
                    84:05:b1:fa:cb:ea:b8:68:dd:0c:ea:ff:72:6b:ce:
                    e3:53:f8:c9:b7:32:91:1a:62:f4:88:25:83:bf:11:
                    28:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:47:3A:81:6B:E5:02:56:D8:AE:A6:77:7D:69:00:F4:10:85:7B:B4
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:b3:93:3c:2f:d8:a7:c3:fe:46:e3:bf:4f:30:9a:53:55:
         5c:8a:9a:78:40:2d:e6:69:b2:3c:6f:bc:e1:e3:f7:e2:bb:35:
         6e:4b:4b:b3:69:13:ae:85:e8:18:e5:89:3c:fe:c6:ab:6d:22:
         d6:e8:c9:29:e7:8a:b5:28:f1:39:24:f1:39:7b:2f:80:42:0f:
         f7:e7:fc:c0:88:46:bd:08:75:bc:8e:4c:23:9b:ce:4e:2f:b9:
         b4:ca:c0:fe:a1:c5:ff:1b:47:26:0e:ee:e6:74:f7:99:40:87:
         39:27:b2:7c:46:03:5a:7c:3f:23:e8:ec:1f:52:19:f9:3f:4b:
         05:59:ab:c7:b6:e1:3f:8a:a4:47:54:7c:6e:1f:f7:18:56:34:
         a8:1f:14:4e:74:d3:e1:b2:67:51:fb:05:c8:ca:66:03:ed:c0:
         2d:8e:2d:43:44:c2:e8:fd:26:76:db:3e:a2:60:0e:a9:a6:71:
         f0:bb:c8:c8:9f:e8:60:7a:cd:44:82:34:1f:7c:8d:27:55:21:
         4c:64:d1:9a:fd:8f:a5:d9:93:64:bc:1a:73:f8:d7:06:ab:fa:
         42:f1:36:d0:b5:08:09:e2:15:92:39:d5:ae:63:a8:91:94:c8:
         5c:22:b9:49:6a:15:dc:b0:ba:0b:57:3b:23:dc:9c:d7:e8:87:
         8d:b2:4e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org