Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137382e302f32332d3233203d3e20323634343931.roa
File:                     3133312e3235352e3137382e302f32332d3233203d3e20323634343931.roa (raw, json)
Hash identifier:          lexqvxFeM/tx4eSKG6gvwbTTRqSfo5VW8dLhW2oXxH0=
Subject key identifier:   C5:22:7F:4F:E7:41:71:3F:39:50:F6:1C:5D:B7:00:E0:0E:D1:99:8E
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       5F2CB269ACB56200D556CE2D7141729FA8BC9A93
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137382e302f32332d3233203d3e20323634343931.roa
Signing time:             Tue 10 Oct 2023 03:11:24 +0000
ROA not before:           Tue 10 Oct 2023 03:06:24 +0000
ROA not after:            Tue 08 Oct 2024 03:11:24 +0000
asID:                     264491
IP address blocks:        131.255.178.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2c:b2:69:ac:b5:62:00:d5:56:ce:2d:71:41:72:9f:a8:bc:9a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:24 2023 GMT
            Not After : Oct  8 03:11:24 2024 GMT
        Subject: CN=C5227F4FE741713F3950F61C5DB700E00ED1998E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:df:1d:ba:b9:2a:ba:4c:c3:26:6b:e8:d5:
                    ca:b3:76:d4:7b:d7:a7:27:51:17:63:d9:14:2f:b8:
                    ab:03:88:41:fb:36:12:d2:5a:c0:e5:a4:b3:87:7c:
                    87:4a:71:a1:89:0a:30:cb:f4:2b:3f:d3:17:a0:ef:
                    59:0b:f6:e8:71:b8:c3:c4:5f:f7:f4:fb:52:68:61:
                    c9:ef:b8:90:4f:d8:4c:e3:c0:63:97:03:18:6e:f8:
                    00:3c:14:a4:74:d3:a0:bd:dc:a7:5c:72:17:4e:bc:
                    54:20:23:ac:dc:f9:a1:17:db:e2:a1:17:d0:49:a6:
                    82:f1:a9:37:78:62:99:c2:7e:1f:3a:3c:29:45:7f:
                    d4:94:0c:3a:de:8e:8b:e5:bf:e6:66:9a:65:a2:64:
                    0f:8c:22:6d:22:5a:b2:f9:0a:15:12:a1:5c:4c:3f:
                    ad:e1:0f:6b:a1:8c:d1:b7:19:52:82:d5:3b:26:8c:
                    41:ab:57:79:15:39:f9:59:20:13:af:58:5d:2a:22:
                    8e:af:f3:7d:94:21:2e:68:2c:47:31:3f:91:fc:b7:
                    d3:c5:8f:7b:8d:cd:a8:3e:03:c1:a4:b4:af:6e:2e:
                    48:2a:f1:09:64:44:3b:93:68:f1:05:92:70:2c:cd:
                    37:c9:2c:2f:86:ba:24:dc:06:fb:ac:f2:91:3a:b6:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:22:7F:4F:E7:41:71:3F:39:50:F6:1C:5D:B7:00:E0:0E:D1:99:8E
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137382e302f32332d3233203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:1c:ba:7f:e5:8a:07:bf:34:94:1c:c3:b7:16:d9:b7:f9:e0:
         89:4e:61:2b:ff:2e:88:a9:53:ef:c0:b1:fc:3f:5c:c3:53:57:
         c3:62:bc:ab:31:dd:6f:b1:e4:ba:56:62:1e:ad:4d:93:f9:70:
         f8:1a:2e:cf:a0:6f:6a:06:44:d7:6f:bf:68:4e:39:43:76:a5:
         bb:16:25:94:56:d9:e4:03:31:b5:a9:be:ef:0c:21:1e:4f:a9:
         7c:4f:86:19:78:50:78:10:b4:33:fe:75:55:83:99:2c:1b:30:
         aa:e6:fc:fb:44:be:83:37:3b:ca:ea:16:84:4c:bb:db:a4:8a:
         29:7a:74:30:61:bf:9b:28:5b:73:1a:46:9f:e0:b7:c3:99:ea:
         90:79:e6:0a:62:c1:5e:f4:f5:c8:4d:fa:9f:5c:b8:05:76:50:
         0d:47:e8:a8:3b:6b:20:7d:f4:e5:9d:dd:6f:ce:66:e5:a6:9c:
         96:ed:06:b3:62:63:79:95:03:42:3c:8f:ce:dc:94:f1:1d:3d:
         21:15:b2:88:9b:d3:13:cc:fa:cf:9e:40:c0:92:e9:ed:e2:15:
         66:28:be:26:60:9c:98:0d:be:2b:38:d6:33:52:15:27:ac:96:
         1a:bd:0e:83:3e:0b:c5:54:7b:da:82:80:33:8a:53:7d:fe:f6:
         de:b3:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org