Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa
File:                     3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa (raw, json)
Hash identifier:          WqdtXtI9rqZPny1zXV16H1IVf1bwjLC5tLYIhv2t9SM=
Subject key identifier:   B1:A9:36:96:38:02:E9:CA:0A:10:10:F6:8E:38:DB:36:02:7D:81:80
Certificate issuer:       /CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
Certificate serial:       741320647C74D1E88C0E6155DB6D839F05E9ECAE
Authority key identifier: E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa
Signing time:             Sun 12 Nov 2023 19:40:19 +0000
ROA not before:           Sun 12 Nov 2023 19:35:19 +0000
ROA not after:            Sun 10 Nov 2024 19:40:19 +0000
asID:                     28658
IP address blocks:        131.221.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:13:20:64:7c:74:d1:e8:8c:0e:61:55:db:6d:83:9f:05:e9:ec:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Validity
            Not Before: Nov 12 19:35:19 2023 GMT
            Not After : Nov 10 19:40:19 2024 GMT
        Subject: CN=B1A936963802E9CA0A1010F68E38DB36027D8180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:bf:1f:43:ff:33:e1:c4:fd:57:7d:f3:6b:
                    7f:83:85:7a:95:4c:63:6b:e9:77:c3:e1:53:d9:2d:
                    c9:10:26:dd:c4:38:a2:35:44:35:22:63:e8:fd:eb:
                    98:db:20:f3:fd:54:ec:41:ee:5e:f2:65:8c:d5:59:
                    b1:f0:d8:1f:32:9b:09:3c:ad:14:22:52:98:3e:85:
                    26:c2:c9:42:31:53:46:68:4d:6e:88:ed:22:e9:15:
                    e3:67:d1:fa:8f:e3:a6:4d:b5:62:a2:a6:80:f9:dd:
                    aa:b6:d5:14:6b:cf:8d:be:f6:87:23:bf:c5:f3:6b:
                    87:d1:9f:7a:aa:00:f9:3e:3e:19:3b:f1:5b:93:1f:
                    8b:ff:8e:47:b3:c2:d7:bb:1c:68:4a:1d:a1:a1:bb:
                    9c:7e:17:f8:16:90:b9:7b:ac:de:78:5f:51:c8:ea:
                    46:49:2b:20:d2:74:42:fd:21:6a:99:c7:9f:11:37:
                    d5:ce:77:3a:69:53:82:a8:a6:ce:9a:73:6e:e1:b0:
                    0c:b5:43:b3:20:2e:76:6f:38:3e:23:7e:ca:09:33:
                    19:df:63:05:0e:2f:e3:1e:02:95:45:0d:ea:bb:24:
                    61:b3:a5:1f:0e:25:ed:48:6c:e6:ca:23:15:af:67:
                    7a:17:30:81:3c:81:01:40:9e:45:4a:70:2f:c5:9d:
                    cd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A9:36:96:38:02:E9:CA:0A:10:10:F6:8E:38:DB:36:02:7D:81:80
            X509v3 Authority Key Identifier:
                keyid:E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:fa:22:bf:b1:5c:45:44:3b:fa:21:ae:c1:54:be:17:33:8d:
         05:b8:e4:00:3b:4f:b3:6c:06:67:15:2a:1a:f5:17:79:40:84:
         d1:87:27:aa:3f:88:9c:57:4b:43:ad:ab:59:0c:f6:5f:6e:e5:
         c0:64:85:2c:c3:5a:c4:b3:ca:81:73:6a:81:cd:53:86:6b:a0:
         0a:b9:ab:f6:61:aa:2c:11:27:83:bc:12:43:25:f0:95:e1:5a:
         17:99:42:64:97:d9:35:46:2a:fd:c9:12:45:08:c5:64:ae:78:
         6b:b4:9b:aa:a1:13:0b:22:3d:ab:b5:6f:35:6f:14:9f:27:c8:
         b7:eb:ef:0b:96:01:32:80:cf:2b:3d:88:18:46:95:47:88:85:
         b0:b6:c0:14:7b:73:3d:78:ae:4d:d8:03:61:4f:ec:90:02:bc:
         3e:43:2f:b2:29:05:8f:fa:89:cd:2e:32:a4:11:20:b5:a8:fb:
         41:17:54:f5:a8:c7:bc:b5:f9:04:b2:ab:66:11:83:23:c1:5f:
         ff:85:38:8e:0b:cf:37:16:b8:37:b9:83:e8:1a:8a:5b:39:99:
         e3:63:61:36:1b:d0:34:85:9c:6f:8c:80:a1:4b:d7:c5:07:f0:
         a0:9e:c3:26:a8:fe:71:95:19:0f:e0:a5:e3:dc:63:89:c7:f2:
         d3:f3:3e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org