Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32322d3232203d3e20323634343931.roa
File:                     3133312e3235352e3137362e302f32322d3232203d3e20323634343931.roa (raw, json)
Hash identifier:          QxBoonf7MAAra2Y78wQry+Yu0zcTyrvrJea95jxbyis=
Subject key identifier:   5B:A4:9D:AA:D8:27:96:B2:76:FA:B2:F0:D7:3A:3E:A4:6C:12:A7:AF
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       03A586AC500F46F097113CD32217DC9C791B0EDD
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32322d3232203d3e20323634343931.roa
Signing time:             Tue 10 Oct 2023 03:11:23 +0000
ROA not before:           Tue 10 Oct 2023 03:06:23 +0000
ROA not after:            Tue 08 Oct 2024 03:11:23 +0000
asID:                     264491
IP address blocks:        131.255.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a5:86:ac:50:0f:46:f0:97:11:3c:d3:22:17:dc:9c:79:1b:0e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:23 2023 GMT
            Not After : Oct  8 03:11:23 2024 GMT
        Subject: CN=5BA49DAAD82796B276FAB2F0D73A3EA46C12A7AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2c:0a:6d:a4:8a:e2:8d:9d:3e:f7:f5:54:70:
                    91:7b:e6:43:4d:e2:92:9d:49:0e:83:30:98:51:5b:
                    fd:31:c1:70:43:51:69:61:e7:7c:f3:e3:cb:96:7a:
                    cd:76:a1:77:c7:b8:06:8e:3b:ca:75:07:d9:86:82:
                    86:46:f5:44:c7:ad:62:3c:d1:67:45:bf:62:d8:62:
                    b6:85:21:8e:8d:8c:35:00:bf:fd:c3:51:dc:a0:5a:
                    e6:6b:25:08:ea:62:2c:e7:78:b8:5c:70:06:c1:97:
                    3d:8a:d8:c4:a7:4d:1c:a1:5a:e8:9e:fd:2a:52:58:
                    7d:e7:40:91:58:b9:4a:33:52:a9:6f:dd:b7:d8:74:
                    d8:52:14:b8:12:27:80:77:73:c2:8d:cb:ca:a8:67:
                    a2:55:2b:ee:56:eb:c0:cb:e2:f2:09:3b:a5:f4:4b:
                    96:26:d4:4b:c0:c2:5c:ef:6a:ba:8d:1c:fc:56:3d:
                    ad:1d:8a:89:36:d6:18:69:3e:e5:61:a5:a6:3d:da:
                    c7:78:66:13:d5:f9:2d:27:30:27:39:b3:63:71:db:
                    c8:2b:cd:c9:70:0b:6b:73:b9:d5:c7:8f:a7:d6:19:
                    9e:a1:d1:87:00:e8:8a:5d:d2:cf:cf:98:2c:73:d2:
                    16:12:36:a9:bb:34:13:0e:9a:b7:2f:41:96:bd:cb:
                    35:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A4:9D:AA:D8:27:96:B2:76:FA:B2:F0:D7:3A:3E:A4:6C:12:A7:AF
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32322d3232203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:86:d7:59:bb:cf:66:83:e2:01:b8:ca:d0:6a:80:8a:12:
         0b:10:5b:9e:79:46:4a:14:57:ac:c3:8e:c7:88:75:9f:1b:37:
         6a:93:1f:2a:73:12:70:3d:dd:8a:cf:10:56:dd:b0:5e:0a:72:
         1e:94:be:57:0f:61:b0:e2:b4:50:67:41:cd:a4:0a:67:49:2b:
         d9:48:a1:0e:18:97:e8:3c:d3:96:ac:58:56:c0:31:6c:94:b4:
         3f:64:9c:7b:cb:03:56:63:b4:4e:99:f5:6f:aa:78:cf:2d:c7:
         00:9d:f4:fc:de:e4:ce:b5:17:d7:85:99:f1:8e:6d:91:fd:66:
         3b:04:75:b5:1f:5f:81:08:01:99:3b:db:f4:53:f1:85:9b:ab:
         5f:35:ed:66:9a:e8:56:7f:b6:82:69:1b:05:40:78:a3:b8:07:
         6d:ae:ce:c9:8c:91:70:5d:75:be:c9:5f:59:cc:40:03:dc:d0:
         b5:b5:01:84:48:a3:b5:cc:3e:fc:e8:ff:6c:be:c9:83:7c:9e:
         1e:94:80:fd:0e:98:7d:2c:9f:b2:18:29:c6:ae:d0:70:54:de:
         89:1d:1b:56:56:16:de:ea:97:f8:80:75:0e:43:02:ff:fe:8d:
         25:0e:00:ec:93:2b:ed:8c:f6:7b:d1:21:06:6c:cc:e3:80:3a:
         d7:38:26:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org