Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3133312e3235352e3231322e302f32322d3234203d3e20323634343938.roa
File:                     3133312e3235352e3231322e302f32322d3234203d3e20323634343938.roa (raw, json)
Hash identifier:          ulbRgvfWRtkKU7vl0SAC+CwTxdo1CwchPt2YMon1M8Q=
Subject key identifier:   58:89:0C:29:91:EC:F9:1B:6F:69:CF:11:2E:81:6B:EF:88:9E:7D:5D
Certificate issuer:       /CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Certificate serial:       70E19CEB23D13621AFAECC3F719E4206872D3E61
Authority key identifier: 1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3133312e3235352e3231322e302f32322d3234203d3e20323634343938.roa
Signing time:             Thu 18 May 2023 13:52:41 +0000
ROA not before:           Thu 18 May 2023 13:47:41 +0000
ROA not after:            Thu 16 May 2024 13:52:41 +0000
asID:                     264498
IP address blocks:        131.255.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e1:9c:eb:23:d1:36:21:af:ae:cc:3f:71:9e:42:06:87:2d:3e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
        Validity
            Not Before: May 18 13:47:41 2023 GMT
            Not After : May 16 13:52:41 2024 GMT
        Subject: CN=58890C2991ECF91B6F69CF112E816BEF889E7D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:76:ca:58:07:65:13:00:b4:a0:49:e3:6d:93:
                    99:f0:a7:2b:10:83:2e:b2:b8:ec:78:28:24:40:f4:
                    5f:e7:b4:be:d6:56:9a:8b:49:4a:ff:e4:31:04:71:
                    b7:4e:50:57:d9:d1:98:c5:ac:39:d5:43:0e:e4:3d:
                    a6:90:e5:4f:4e:f1:83:b4:8c:ae:d5:b9:ab:18:4d:
                    7e:17:75:08:e3:17:01:78:c6:a1:df:92:58:68:03:
                    a9:2f:c4:c2:df:31:d8:aa:85:b6:17:b3:91:95:48:
                    40:05:59:44:5a:37:2b:cc:3e:98:d0:35:a7:d1:a6:
                    99:6b:13:d3:b7:66:da:d6:6c:79:ba:14:6e:8d:af:
                    2b:90:12:25:fa:8d:97:84:ea:57:17:1b:50:da:63:
                    6a:85:90:95:84:c9:d4:5e:97:74:93:ba:11:00:36:
                    81:a2:b0:59:ef:9f:b6:1e:32:4e:e9:43:17:08:05:
                    1c:40:b7:d3:6b:72:3f:17:98:4b:35:c3:11:f1:ec:
                    3e:31:ab:d8:4d:35:06:49:a9:c7:a8:28:e7:5d:c9:
                    76:07:96:30:1d:9f:bc:9f:69:3b:62:1b:21:b7:b8:
                    d6:c7:fd:03:83:46:ec:d6:fc:f4:86:6c:64:6b:0d:
                    0b:93:8c:aa:f1:01:6c:f7:61:ae:ac:0c:22:03:ca:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:89:0C:29:91:EC:F9:1B:6F:69:CF:11:2E:81:6B:EF:88:9E:7D:5D
            X509v3 Authority Key Identifier:
                keyid:1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3133312e3235352e3231322e302f32322d3234203d3e20323634343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:7a:12:60:2c:d4:85:82:8f:a0:c5:f6:2e:1b:11:1c:77:c9:
         4f:ea:4d:b5:bf:1f:e4:f9:f1:34:96:c1:28:7f:8b:eb:f7:50:
         50:dc:22:5d:2b:71:82:ff:6e:22:90:75:77:9c:35:6e:a2:4e:
         7b:7b:dc:5a:e0:a4:c8:08:ad:17:19:02:0c:48:1e:cd:5d:01:
         e9:42:64:19:f5:1f:6a:5b:ad:6f:98:d5:69:e8:03:88:48:67:
         37:dc:35:05:fb:f0:d4:05:19:b1:cb:46:91:b9:29:d8:0b:0e:
         4e:d1:07:23:a4:da:aa:1e:1f:1c:55:a8:17:32:bb:4f:5b:b9:
         6e:03:59:f5:e7:21:cf:b8:45:cf:9a:4a:2d:da:26:70:b8:0e:
         98:fe:31:15:87:b9:43:9f:8f:aa:4d:64:32:29:ed:26:61:4b:
         58:a1:1d:3d:d0:cf:84:9f:bf:f7:d1:37:1b:a6:81:c1:70:76:
         61:25:14:0c:45:a8:0b:11:8d:83:1e:6a:50:d0:39:f5:f7:40:
         5a:3c:91:3b:d6:f2:5f:9c:2c:a1:5a:70:16:fb:2c:f3:2b:c0:
         da:0f:91:f7:66:2f:72:31:b2:7c:1c:28:16:d3:77:20:2f:ea:
         32:18:6e:e2:f5:a0:21:b0:be:6a:c2:ce:a6:96:1a:9a:9d:b2:
         60:89:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org