Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3133312e3235352e3231342e302f32332d3233203d3e20323634343938.roa
File:                     3133312e3235352e3231342e302f32332d3233203d3e20323634343938.roa (raw, json)
Hash identifier:          m0NAracohvQ1XLvBuo1NoVKR95RcS/mY2W4rEcfkYzY=
Subject key identifier:   8A:A2:10:F4:A2:08:70:99:2F:9E:1D:DA:15:FA:C0:A5:05:45:AA:FF
Certificate issuer:       /CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Certificate serial:       428010BF40EC4793CA16401D82F0FFD5E25A3713
Authority key identifier: 1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3133312e3235352e3231342e302f32332d3233203d3e20323634343938.roa
Signing time:             Thu 20 Apr 2023 19:16:21 +0000
ROA not before:           Thu 20 Apr 2023 19:11:21 +0000
ROA not after:            Thu 18 Apr 2024 19:16:21 +0000
asID:                     264498
IP address blocks:        131.255.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:80:10:bf:40:ec:47:93:ca:16:40:1d:82:f0:ff:d5:e2:5a:37:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
        Validity
            Not Before: Apr 20 19:11:21 2023 GMT
            Not After : Apr 18 19:16:21 2024 GMT
        Subject: CN=8AA210F4A20870992F9E1DDA15FAC0A50545AAFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:14:3f:75:fb:d6:87:02:b2:e1:8a:6f:9c:
                    72:58:3c:5f:79:46:0f:86:62:75:a4:e0:59:4b:a4:
                    f1:c7:61:3f:bb:76:92:be:0d:b3:3a:c0:b5:ef:0e:
                    5c:fe:99:3b:ca:e7:31:0a:c5:d9:b2:56:ca:4d:21:
                    62:11:06:43:77:29:9c:92:6c:2d:84:63:38:e4:16:
                    30:53:16:92:90:68:13:06:ee:28:64:d6:e9:ab:1d:
                    d3:0a:b9:05:e3:8f:29:21:07:5e:53:61:9c:c9:c2:
                    d4:5f:63:f3:3e:83:44:a5:ea:08:85:82:c7:26:dc:
                    40:b6:a1:e4:99:b0:d6:c2:05:50:c7:eb:68:67:db:
                    bc:88:f4:ba:bc:bc:c0:3c:74:4a:41:c6:6a:67:19:
                    93:66:90:0b:a9:52:28:d1:ce:92:98:fe:04:86:ca:
                    bd:33:b0:97:27:55:19:e8:72:ae:b0:6f:06:59:6a:
                    63:36:89:8d:a1:69:d3:e0:1c:d3:14:fa:e2:bf:08:
                    21:f0:c6:d9:70:06:9b:06:1e:fc:d5:ff:13:f5:52:
                    d3:19:0d:f1:0b:b9:ed:1e:4f:bb:27:c4:8c:11:44:
                    bd:54:1d:58:d6:f3:81:a4:ff:bb:7c:a9:eb:c3:c0:
                    c0:75:7d:f5:4f:62:17:93:8d:a0:fa:ba:f9:79:b7:
                    49:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A2:10:F4:A2:08:70:99:2F:9E:1D:DA:15:FA:C0:A5:05:45:AA:FF
            X509v3 Authority Key Identifier:
                keyid:1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3133312e3235352e3231342e302f32332d3233203d3e20323634343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:73:3f:53:78:79:9a:46:c1:24:41:17:bd:3e:c2:ab:0a:4d:
         86:4e:90:7c:ff:6f:95:d6:d5:32:8b:ad:8d:cb:6e:0c:4d:51:
         58:c4:51:ba:65:2d:fd:91:b0:d2:da:d6:0b:d3:90:6f:b3:46:
         6a:e8:fe:6e:6f:38:c9:ef:c1:1d:44:df:f1:ea:3b:4e:7d:49:
         fb:85:12:2c:47:27:bf:95:8a:87:b3:29:63:f6:2f:ee:6f:26:
         ae:63:80:e6:59:bc:20:4f:3b:77:b2:9d:a9:fc:cf:89:3e:78:
         6b:22:2d:a2:ca:63:88:88:7f:70:7f:5d:fc:1d:31:47:84:db:
         e0:21:2f:ed:6b:0b:8c:7c:04:14:69:9e:7f:82:f6:7e:00:87:
         3b:93:a9:25:b3:43:b7:70:cb:56:c1:66:ef:61:f8:a0:09:ba:
         6b:bb:19:37:15:01:75:38:4c:0d:80:bf:fa:31:b9:da:dc:1a:
         c0:ac:d9:e5:17:4b:ac:41:58:7a:dc:07:5b:8d:da:0b:aa:ca:
         06:a0:95:8c:e0:8b:d5:fd:3f:5c:57:bc:0c:ac:40:26:8e:e7:
         42:aa:23:0b:ef:c6:a0:36:e9:bc:8b:21:ae:c2:32:04:d5:10:
         8b:ef:2c:1e:98:69:68:6d:65:6b:25:bd:ff:ed:0b:e3:6d:21:
         57:46:39:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org