Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137372e302f32342d3234203d3e20323634343931.roa
File:                     3133312e3235352e3137372e302f32342d3234203d3e20323634343931.roa (raw, json)
Hash identifier:          hGPlJ2ZC7Bq1ZyaHU0FoIda3U3Ud6/AhFYDbnwHRuOQ=
Subject key identifier:   1D:B2:C5:98:41:32:76:BD:08:06:C1:33:90:A5:B1:09:4E:A2:51:FB
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       3A2DAC0BD97BFC5874F831FC9ED5D7B69591903D
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137372e302f32342d3234203d3e20323634343931.roa
Signing time:             Mon 07 Feb 2022 12:09:18 +0000
ROA not before:           Mon 07 Feb 2022 12:04:18 +0000
ROA not after:            Mon 06 Feb 2023 12:09:18 +0000
asID:                     264491
IP address blocks:        131.255.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2d:ac:0b:d9:7b:fc:58:74:f8:31:fc:9e:d5:d7:b6:95:91:90:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:18 2022 GMT
            Not After : Feb  6 12:09:18 2023 GMT
        Subject: CN=1DB2C598413276BD0806C13390A5B1094EA251FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:50:be:8e:b7:66:89:9a:00:ce:7e:43:d5:
                    bf:36:99:bc:b7:5d:c8:3b:f0:da:8d:b3:b7:99:0c:
                    b0:d4:97:53:51:18:08:5c:99:e5:21:9d:1a:fc:2b:
                    13:27:64:1e:9d:dd:8e:4e:cf:e6:ed:c5:f9:91:56:
                    3d:db:2a:46:2b:99:d6:cc:f2:a7:67:5a:7e:f8:2c:
                    7e:72:d1:ad:dd:fa:b2:51:f8:e2:7a:05:cf:d0:d3:
                    af:45:c5:65:79:71:c6:2c:2d:28:44:b4:8d:36:40:
                    2b:e9:2f:fb:a8:e6:a3:55:d3:cb:1f:cf:bf:21:23:
                    7d:64:5d:53:86:a4:f3:b5:35:f6:21:da:8e:16:36:
                    7e:2a:c6:a2:bc:41:2d:5c:e9:a2:a6:38:b0:95:4c:
                    7a:bc:8a:10:1a:02:ee:59:91:0d:83:9f:cc:78:42:
                    6f:88:d4:c8:d9:0a:f2:42:c4:a9:d5:6c:1f:25:d1:
                    5d:6d:41:23:f3:fe:91:04:72:9b:f6:d5:15:c9:d5:
                    80:e3:a7:c8:b0:09:57:7c:32:9d:5f:9a:ee:97:81:
                    c9:63:9e:05:4c:01:16:ca:8b:c0:66:a8:85:13:4c:
                    2f:4e:82:74:7e:ea:98:32:58:a9:93:1d:2c:db:9f:
                    91:cf:69:7f:d8:ca:e1:7a:a0:f3:fe:fe:57:bb:7a:
                    62:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B2:C5:98:41:32:76:BD:08:06:C1:33:90:A5:B1:09:4E:A2:51:FB
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137372e302f32342d3234203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:10:f7:71:52:98:ce:f1:a1:45:39:cd:2b:ee:f6:99:03:b9:
         f3:c6:01:52:7c:5c:94:6c:a7:88:b8:23:07:b1:05:e7:7d:d7:
         6e:12:8a:44:65:11:1e:fa:fb:b2:11:2e:8a:17:3b:0e:ad:5f:
         45:18:03:79:7f:3f:79:8b:49:31:b3:21:7e:bd:52:81:b7:e2:
         f5:d9:2b:9e:2c:06:4a:95:01:10:7f:b9:d7:bf:3b:b9:3b:ca:
         a4:09:25:12:d2:0e:0b:44:88:a6:52:be:c6:6d:d9:7f:82:38:
         0f:cf:80:79:1b:ee:e8:31:76:7b:a2:d4:f4:ea:89:8a:3c:7d:
         4b:e2:c7:16:ba:91:23:0b:36:86:d4:66:0a:3c:d6:1d:38:fe:
         d2:ba:46:3f:8f:6e:b6:f9:59:01:d2:37:f9:7f:73:1f:db:fa:
         c9:f0:17:4e:97:9b:43:71:53:f9:ba:dc:9d:79:cc:e7:4a:83:
         13:bf:5e:d1:b8:60:3e:b9:89:95:73:a1:92:fe:4b:e5:f7:6d:
         42:5a:a2:ee:8c:cd:48:b3:7b:59:c6:b4:60:2d:cf:d0:65:c1:
         9e:fe:a3:c4:06:fd:a9:80:60:39:fc:50:e7:d3:66:7c:75:73:
         88:d6:79:85:d7:b5:6d:5c:d5:29:23:42:86:49:83:63:ae:e5:
         06:59:d8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org