Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3133312e3139362e37362e302f32322d3232203d3e20323632393932.roa
File:                     3133312e3139362e37362e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          aO1+8JoONGwbT7I+S2oMBxBFCaXZ/ZKi/Q/K3n97aXU=
Subject key identifier:   E2:BA:3F:FB:91:17:8A:6E:43:E8:A9:46:58:86:0F:FE:22:C8:03:0F
Certificate issuer:       /CN=D25FB7A3641FB6992609C3E87677747FD5176120
Certificate serial:       49E49439D16963421CC70FE55EBB02FB0C3B3BBB
Authority key identifier: D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3133312e3139362e37362e302f32322d3232203d3e20323632393932.roa
Signing time:             Sat 17 Dec 2022 23:32:45 +0000
ROA not before:           Sat 17 Dec 2022 23:27:45 +0000
ROA not after:            Sat 16 Dec 2023 23:32:45 +0000
asID:                     262992
IP address blocks:        131.196.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e4:94:39:d1:69:63:42:1c:c7:0f:e5:5e:bb:02:fb:0c:3b:3b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25FB7A3641FB6992609C3E87677747FD5176120
        Validity
            Not Before: Dec 17 23:27:45 2022 GMT
            Not After : Dec 16 23:32:45 2023 GMT
        Subject: CN=E2BA3FFB91178A6E43E8A94658860FFE22C8030F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:ef:7e:fd:5a:56:65:17:ae:1c:a5:5e:99:
                    44:77:b2:95:c9:52:47:52:af:9d:32:94:a8:3f:13:
                    f4:e3:db:b1:cd:c4:01:b4:15:2f:3b:ee:89:a2:4e:
                    2d:3b:a7:f5:93:4d:85:70:b0:1d:ec:c4:97:71:48:
                    2c:eb:6b:e7:4e:1c:54:e7:58:34:a0:da:0e:59:ba:
                    53:0c:74:3a:0e:5f:86:e1:87:5a:f6:96:25:59:cf:
                    85:4c:47:ed:c5:e2:ad:9a:0c:77:03:eb:26:b3:fb:
                    d6:e0:14:d7:73:81:74:79:36:23:25:e6:47:d2:e6:
                    91:0d:e3:13:a4:4f:6b:d0:46:a1:e7:c3:b3:1a:be:
                    75:86:c1:b6:71:48:d9:7b:6a:cb:bc:b8:e3:61:22:
                    1f:e2:4a:56:89:23:fb:ed:ec:5d:40:1d:c6:51:7e:
                    4a:12:20:ed:b7:23:6f:fe:a1:08:2a:ca:f6:76:fe:
                    36:5c:f3:21:72:a0:c7:e2:74:02:ff:da:a6:84:a7:
                    df:7c:24:13:b3:35:9b:6a:73:d7:e4:89:d1:e2:db:
                    8a:df:2e:b5:ad:64:a9:4d:a6:a7:e5:a0:7d:38:c0:
                    d0:07:b3:e4:63:5d:0e:89:94:e6:34:68:5d:78:d9:
                    ec:62:86:29:26:ad:08:3f:f7:0a:d0:d4:f8:9c:23:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BA:3F:FB:91:17:8A:6E:43:E8:A9:46:58:86:0F:FE:22:C8:03:0F
            X509v3 Authority Key Identifier:
                keyid:D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3133312e3139362e37362e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:2a:a4:d0:6b:05:57:db:30:cc:d9:c7:c0:77:f0:f6:29:0a:
         88:13:12:02:02:4b:56:7a:24:66:79:73:bc:0b:4a:56:8b:2f:
         27:2b:72:9c:a0:c7:c8:4f:9a:de:1e:51:92:82:fb:50:3c:06:
         b5:c7:89:a3:33:5f:00:1d:35:c5:d8:bd:a0:1f:25:a2:e7:c1:
         94:b8:e9:75:8f:03:56:6d:6e:2c:76:d4:3f:88:e8:69:af:33:
         ee:0c:50:81:7a:aa:05:b3:98:40:97:fe:1f:34:1b:92:ca:c5:
         ef:8c:d5:24:8c:b5:26:ca:40:99:d6:79:1f:96:d4:c1:46:8e:
         93:a0:ec:84:dc:bb:07:7e:c4:d5:c0:73:9e:6c:57:a5:2d:2d:
         9f:72:00:7d:a9:a9:ba:cc:2e:7b:dc:06:39:82:4a:52:d4:ea:
         3c:14:53:b9:28:3f:94:8a:09:56:e9:ac:09:31:eb:22:bf:67:
         71:76:8a:d9:96:ce:0b:86:00:2c:83:6b:42:c3:9a:fd:d8:86:
         4a:a1:0f:7a:41:e8:c2:48:b7:a4:75:90:d3:54:2a:71:52:c8:
         71:6d:4e:fd:73:6f:0c:10:d8:5b:59:d6:c6:d2:0a:ba:8e:58:
         47:2c:8a:17:4b:7a:71:81:ff:7b:b9:c6:74:5f:ee:18:2b:56:
         ba:65:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org