Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/3133312e302e3232382e302f32322d3234203d3e203631373039.roa
File:                     3133312e302e3232382e302f32322d3234203d3e203631373039.roa (raw, json)
Hash identifier:          CenwyFPWrX+sn9sewvUyJ1RVlqcSOa/C6ThchLSEsog=
Subject key identifier:   92:58:64:95:9C:D5:A5:96:D2:9B:63:21:A1:E2:B7:54:D1:F8:43:76
Certificate issuer:       /CN=7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2
Certificate serial:       4DC6C0796FFEE8F210A291557D593501DFF58C65
Authority key identifier: 7F:AA:1B:D0:4E:1D:F2:F0:6C:FF:F3:D8:DB:64:D2:7A:3F:4B:6D:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/3133312e302e3232382e302f32322d3234203d3e203631373039.roa
Signing time:             Thu 28 Mar 2024 21:04:15 +0000
ROA not before:           Thu 28 Mar 2024 20:59:15 +0000
ROA not after:            Thu 27 Mar 2025 21:04:15 +0000
asID:                     61709
IP address blocks:        131.0.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c6:c0:79:6f:fe:e8:f2:10:a2:91:55:7d:59:35:01:df:f5:8c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2
        Validity
            Not Before: Mar 28 20:59:15 2024 GMT
            Not After : Mar 27 21:04:15 2025 GMT
        Subject: CN=925864959CD5A596D29B6321A1E2B754D1F84376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:78:af:d9:f4:b9:d5:65:53:d1:2e:48:a8:
                    91:b7:1c:e0:d9:65:41:c6:b4:ba:fa:81:b2:af:b0:
                    11:70:64:fb:f3:c3:fb:c5:cf:00:b3:bd:e7:f8:6b:
                    d6:db:37:ae:e0:59:46:8c:82:a8:30:1f:ed:77:8c:
                    26:a1:44:93:04:c6:35:c9:97:b9:6e:38:43:a2:d2:
                    f7:3d:b8:ac:be:06:d6:6d:7a:3a:e2:b0:6c:9f:8f:
                    01:3f:41:88:2f:bd:9a:87:af:63:b4:c2:ea:9f:8c:
                    8c:11:98:97:61:b6:74:04:ce:5d:c7:9d:ba:8e:81:
                    8b:2b:ac:91:d6:47:57:be:2e:c8:c5:39:53:34:66:
                    d4:b9:7a:92:83:6c:03:50:22:1e:95:aa:42:f4:bc:
                    88:4a:66:40:ec:0b:07:db:6e:e2:7d:8f:f3:76:49:
                    c3:de:4a:4b:31:14:60:c2:4d:40:06:06:82:a4:c8:
                    3f:61:80:d8:13:95:d2:c3:38:ef:7d:fe:41:74:71:
                    9d:c1:46:84:c7:6c:80:a1:7f:36:6a:f5:35:6f:dc:
                    22:8a:fa:4d:5b:ab:c5:1e:30:84:77:01:5e:2e:9f:
                    20:46:60:6e:d8:d6:30:69:1f:88:65:ed:d5:23:d5:
                    58:95:fe:2e:34:e3:2e:ca:64:e5:59:c6:91:72:05:
                    76:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:58:64:95:9C:D5:A5:96:D2:9B:63:21:A1:E2:B7:54:D1:F8:43:76
            X509v3 Authority Key Identifier:
                keyid:7F:AA:1B:D0:4E:1D:F2:F0:6C:FF:F3:D8:DB:64:D2:7A:3F:4B:6D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/3133312e302e3232382e302f32322d3234203d3e203631373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:cf:7d:b6:7e:e0:3a:65:be:d1:ea:b5:f6:0d:f1:d4:fe:ec:
         1f:b4:fd:24:89:a4:4d:cd:b5:1b:63:ad:19:1b:0f:e3:7d:d7:
         c0:5a:bc:b8:5c:e1:28:4d:ac:87:1b:29:e2:bf:e6:e4:8c:26:
         76:73:37:00:c3:e6:f4:ca:b6:f5:bb:53:d7:c7:f8:45:da:56:
         f3:b3:ba:67:2e:1b:e7:b0:23:58:9a:63:8c:25:ea:19:43:dd:
         5a:c6:49:a0:f9:d4:20:a4:cd:43:21:8d:53:6f:3e:d0:b3:d7:
         5d:2a:d3:c2:33:50:81:a8:99:16:1c:f6:cc:38:b2:4e:09:4b:
         7f:03:9a:24:ee:f5:dc:1d:bf:51:b3:fe:49:c1:76:e4:fb:be:
         e3:83:ee:27:de:d7:bb:25:a3:6c:0d:7b:2b:c4:d6:e1:e3:11:
         7b:3e:75:6a:24:4d:16:e9:97:f4:07:64:59:09:e9:69:7f:04:
         d5:6e:1f:e6:d4:69:64:d8:30:40:5f:17:bf:6d:1c:a1:a4:3d:
         2e:c0:5c:a1:21:f5:38:d2:91:0c:c8:f0:94:32:d8:89:59:2c:
         d9:59:51:a6:23:f1:90:b0:2f:38:c3:b8:2e:7a:81:fc:11:01:
         40:f1:d0:dc:63:c9:32:82:2d:b4:0c:1c:03:c1:bc:76:6f:91:
         06:4c:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org