Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32342d3234203d3e20323634343931.roa
File:                     3133312e3235352e3137362e302f32342d3234203d3e20323634343931.roa (raw, json)
Hash identifier:          NouUTAIJKK3MJuAkXzlfQCmfy05MYYV6cqCWqOOg+p0=
Subject key identifier:   4E:18:CC:D8:6A:0C:7D:6E:3D:A5:1E:6F:D1:99:E9:43:CA:5A:54:85
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       42637CAFDC30B764DC214206F80CD0AE7E09D4CF
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32342d3234203d3e20323634343931.roa
Signing time:             Mon 07 Feb 2022 12:09:20 +0000
ROA not before:           Mon 07 Feb 2022 12:04:20 +0000
ROA not after:            Mon 06 Feb 2023 12:09:20 +0000
asID:                     264491
IP address blocks:        131.255.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:63:7c:af:dc:30:b7:64:dc:21:42:06:f8:0c:d0:ae:7e:09:d4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:20 2022 GMT
            Not After : Feb  6 12:09:20 2023 GMT
        Subject: CN=4E18CCD86A0C7D6E3DA51E6FD199E943CA5A5485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:e8:b2:dc:52:40:7b:76:d9:84:55:47:2a:
                    af:e5:4b:8c:74:bb:3a:07:44:40:1a:1d:c7:9a:43:
                    f8:eb:4e:f8:b3:55:af:4a:87:5d:05:73:50:82:06:
                    b0:5e:11:a0:6a:db:48:e0:ab:37:43:b9:d3:af:d0:
                    37:e5:75:9f:7f:b5:91:bc:3f:fb:b5:47:b7:d6:f1:
                    91:8c:aa:cb:b0:e5:78:f9:33:1a:a9:eb:fc:22:23:
                    51:b0:72:33:c4:f0:ac:67:c5:76:84:a1:1c:38:57:
                    f2:dc:22:07:87:a5:ee:ba:36:3b:b8:89:79:5d:2a:
                    31:48:92:18:d6:fd:71:aa:5f:71:7f:26:0c:66:7a:
                    ee:99:44:49:49:3a:c4:9e:a1:53:ce:28:8a:67:32:
                    34:95:68:46:98:c3:ef:61:fc:ae:b6:f0:09:ac:7a:
                    c2:6e:af:ed:02:4a:85:c7:19:f0:01:8b:cb:56:d7:
                    f5:0b:d8:32:52:45:32:5b:b3:1a:a5:81:4d:24:7e:
                    24:8c:b1:16:72:cc:cf:19:da:10:6f:dc:25:57:13:
                    aa:89:3d:43:ad:02:a9:94:0b:c2:6b:94:40:1f:e7:
                    26:33:82:e2:48:7e:2d:6c:a9:59:61:38:46:c6:e9:
                    2d:a8:87:66:bb:6d:d1:b0:aa:1b:4c:ed:6c:3e:4f:
                    df:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:18:CC:D8:6A:0C:7D:6E:3D:A5:1E:6F:D1:99:E9:43:CA:5A:54:85
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32342d3234203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:da:ce:5a:93:92:14:f1:0f:05:3a:6d:ac:9a:fc:33:e7:1b:
         97:3d:4a:d5:66:a4:bb:56:19:09:a5:32:de:de:30:d2:30:cf:
         e1:62:58:72:3d:d4:cd:b9:23:f4:13:e7:b6:37:f1:5b:f6:9f:
         1a:6f:e8:1a:f2:16:63:e8:fb:aa:a4:6c:5d:1d:c2:57:68:d8:
         09:c8:56:51:8a:3b:f5:3a:d9:98:ce:d4:0c:06:6e:f7:0c:72:
         b0:e2:03:07:20:d7:2f:3b:5b:5d:19:9a:ef:8d:4c:39:08:3f:
         e3:5a:e8:f9:f4:89:60:2b:b9:73:c5:e5:2e:d4:ae:06:21:2a:
         38:78:ef:bb:68:dd:bb:83:7f:c1:0f:bb:61:16:a3:f1:af:9a:
         fc:27:c9:e1:e6:51:7c:f8:33:19:3d:02:d5:22:38:24:8b:8d:
         58:d2:be:ab:e8:3e:2a:d4:a0:56:4c:a7:e4:d9:b7:1e:e1:e0:
         ca:4d:77:69:19:9e:e1:57:c6:fd:86:f5:9f:ab:30:f0:c9:f0:
         c4:e7:1d:bf:16:d5:97:6d:be:e1:15:32:a4:fa:8f:83:ff:ef:
         18:0e:9d:5b:98:8a:58:5e:0d:a5:77:4e:3e:7e:7a:ec:a9:49:
         e4:67:d8:f5:ec:49:02:1e:d0:2d:2c:df:d1:12:09:72:b5:6c:
         a0:c5:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org