Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/1/3133312e3136312e39322e302f32322d3332203d3e20323634333937.roa
File:                     3133312e3136312e39322e302f32322d3332203d3e20323634333937.roa (raw, json)
Hash identifier:          li/AwGj3tUzKvSDs0hCNB9ZjZEBMf7Gn+RTxj9oUNR8=
Subject key identifier:   5A:60:55:4B:92:68:1A:EC:C5:CB:2C:E7:9B:96:52:09:AA:3F:17:5F
Certificate issuer:       /CN=1CAB310013886E30E4BDF71E98FF8E2A2B06C01F
Certificate serial:       20AC333B6DEDFBEA33ED2EC2AE64D3408549A869
Authority key identifier: 1C:AB:31:00:13:88:6E:30:E4:BD:F7:1E:98:FF:8E:2A:2B:06:C0:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CAB310013886E30E4BDF71E98FF8E2A2B06C01F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/1/3133312e3136312e39322e302f32322d3332203d3e20323634333937.roa
Signing time:             Fri 30 Jun 2023 01:09:03 +0000
ROA not before:           Fri 30 Jun 2023 01:04:03 +0000
ROA not after:            Fri 28 Jun 2024 01:09:03 +0000
asID:                     264397
IP address blocks:        131.161.92.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ac:33:3b:6d:ed:fb:ea:33:ed:2e:c2:ae:64:d3:40:85:49:a8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CAB310013886E30E4BDF71E98FF8E2A2B06C01F
        Validity
            Not Before: Jun 30 01:04:03 2023 GMT
            Not After : Jun 28 01:09:03 2024 GMT
        Subject: CN=5A60554B92681AECC5CB2CE79B965209AA3F175F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:7b:95:30:c7:9e:5d:0a:8b:a9:dc:a0:34:
                    99:32:b2:ff:23:ab:a4:d9:41:b7:7c:a1:e2:67:df:
                    7d:6e:07:0e:1f:00:16:8b:4f:e7:f4:9d:15:9a:a8:
                    e8:b0:2e:e5:49:81:1a:b9:41:ea:9c:b8:a1:96:b7:
                    42:94:e9:d2:3e:ef:62:ee:13:52:21:ed:e0:5b:19:
                    e7:44:c4:40:37:a6:3d:39:a5:d7:a9:f9:99:29:8a:
                    1f:91:f6:59:ab:63:a0:cb:9f:6a:20:55:fb:a4:fe:
                    16:a4:ce:80:39:d6:7e:9b:8b:45:ba:44:24:28:71:
                    c6:24:0c:b4:35:b1:0d:c7:73:d3:97:4b:c3:f6:e9:
                    5a:c8:10:c0:c8:7d:1c:ef:23:d9:aa:f5:7a:a6:d9:
                    a2:6d:3c:0c:13:b2:7b:23:3b:10:6d:97:12:b8:01:
                    41:d9:ba:ee:a1:ad:b7:7e:2d:7b:3f:97:50:71:35:
                    33:bd:74:34:83:4d:8e:f0:50:7e:51:cb:bd:7f:ee:
                    50:0b:b1:8c:89:98:52:48:b9:81:f8:55:70:d7:db:
                    df:f4:ce:b2:43:0b:bc:f0:67:08:2c:6b:7a:94:ee:
                    2b:28:69:1c:ee:a4:34:b1:90:e8:60:50:4a:25:69:
                    56:f6:80:43:0c:42:c8:cd:af:8d:e2:55:9d:4d:9f:
                    4d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:60:55:4B:92:68:1A:EC:C5:CB:2C:E7:9B:96:52:09:AA:3F:17:5F
            X509v3 Authority Key Identifier:
                keyid:1C:AB:31:00:13:88:6E:30:E4:BD:F7:1E:98:FF:8E:2A:2B:06:C0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/1/1CAB310013886E30E4BDF71E98FF8E2A2B06C01F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CAB310013886E30E4BDF71E98FF8E2A2B06C01F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/1/3133312e3136312e39322e302f32322d3332203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:82:16:20:ab:6c:f3:bf:57:e5:09:52:26:43:bd:25:81:db:
         92:0f:90:f8:33:0d:ff:59:72:a5:ea:83:c9:ee:28:fb:c4:e6:
         f6:ba:13:47:63:c5:1f:25:93:2e:0c:83:92:1c:7c:c1:d5:ee:
         c2:e7:07:81:1a:f3:d9:fa:16:03:c9:b7:e5:9a:e8:c2:a5:2e:
         28:fe:3a:ea:09:38:33:e6:a8:4c:25:4a:07:3e:67:29:80:13:
         5f:e2:b0:a6:f0:3a:2c:40:71:52:88:6b:bd:0f:e3:0b:26:e7:
         d4:51:f0:2d:6e:e2:6d:22:79:1c:ac:c0:3f:78:0c:21:83:f3:
         20:54:f3:2d:46:56:8e:87:e6:a8:af:8b:90:ac:53:dd:54:cc:
         c6:e8:cc:40:5e:19:fd:d2:1f:a9:32:7b:f7:68:1b:28:35:f7:
         6a:33:54:51:6b:21:50:58:63:5a:6b:b5:bb:ed:a8:31:21:ba:
         46:ce:2c:76:85:3c:d0:23:99:08:82:65:6c:22:d1:4f:fc:da:
         99:71:ed:e5:56:3e:cd:5c:0f:89:8f:d5:99:eb:c3:b0:65:56:
         59:ed:da:98:d8:13:fd:4b:32:e3:55:b2:fc:9b:9f:43:8e:1c:
         cf:1c:f4:a6:52:7e:5a:de:57:7e:a3:7b:b1:be:9a:85:26:12:
         cf:02:d4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org