Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/0/3133312e3235352e3235322e302f32322d3234203d3e20323634353034.roa
File:                     3133312e3235352e3235322e302f32322d3234203d3e20323634353034.roa (raw, json)
Hash identifier:          w03gmr4rLaMe2gt0R2j0VvJNDQSELGjW+mpqKv00UHo=
Subject key identifier:   44:39:C9:A8:BB:C8:E6:38:53:6D:61:BE:15:32:8D:44:5F:A3:0B:4C
Certificate issuer:       /CN=9B230F329A09B7FC436A55EBD39182DA62BAC4B4
Certificate serial:       7B8420F231CB5C8FF5E59E16E26E29C9CFFDB0E8
Authority key identifier: 9B:23:0F:32:9A:09:B7:FC:43:6A:55:EB:D3:91:82:DA:62:BA:C4:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B230F329A09B7FC436A55EBD39182DA62BAC4B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/0/3133312e3235352e3235322e302f32322d3234203d3e20323634353034.roa
Signing time:             Mon 03 Apr 2023 13:57:29 +0000
ROA not before:           Mon 03 Apr 2023 13:52:29 +0000
ROA not after:            Mon 01 Apr 2024 13:57:29 +0000
asID:                     264504
IP address blocks:        131.255.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:84:20:f2:31:cb:5c:8f:f5:e5:9e:16:e2:6e:29:c9:cf:fd:b0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B230F329A09B7FC436A55EBD39182DA62BAC4B4
        Validity
            Not Before: Apr  3 13:52:29 2023 GMT
            Not After : Apr  1 13:57:29 2024 GMT
        Subject: CN=4439C9A8BBC8E638536D61BE15328D445FA30B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:d1:b8:01:c9:8b:df:07:3f:3d:02:d7:8e:
                    a2:f5:83:ea:b3:2f:77:ce:e8:11:04:55:73:7b:1a:
                    80:be:ef:45:b9:cf:eb:a3:45:65:26:2b:c9:7a:c8:
                    c9:a8:d6:bb:49:fa:e8:73:da:5f:be:ee:e2:ef:af:
                    44:0b:4a:cc:4c:05:14:d9:12:a3:e1:78:65:6f:99:
                    e9:f3:0a:39:e0:27:24:62:93:58:3e:40:7b:62:78:
                    11:72:0e:9e:df:38:9b:7f:9a:ef:08:ce:15:7f:c2:
                    78:b3:7f:02:b5:12:42:97:18:e1:57:40:e7:f7:35:
                    55:a5:3b:ad:75:bf:74:2e:2f:cd:0f:81:66:89:c1:
                    75:19:9d:40:c7:a2:57:aa:82:b4:90:6e:a7:51:ff:
                    d9:08:58:1d:32:e0:6e:e3:f4:ef:87:bc:6b:74:ca:
                    1a:20:f5:19:20:40:5c:bd:86:7b:34:58:b9:fe:f3:
                    7e:3c:09:f5:c8:b1:14:11:93:55:2a:a1:03:9b:c0:
                    9d:29:24:e2:d1:26:1a:41:07:77:d2:fa:c9:e6:17:
                    6b:44:fd:0e:71:d7:7b:3e:dd:ef:c9:cf:e0:f0:d0:
                    d8:c2:ee:33:7d:b3:3a:3c:4c:73:ac:50:19:76:51:
                    f9:17:cc:46:1a:15:8d:65:63:e3:17:0a:85:5f:64:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:39:C9:A8:BB:C8:E6:38:53:6D:61:BE:15:32:8D:44:5F:A3:0B:4C
            X509v3 Authority Key Identifier:
                keyid:9B:23:0F:32:9A:09:B7:FC:43:6A:55:EB:D3:91:82:DA:62:BA:C4:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/0/9B230F329A09B7FC436A55EBD39182DA62BAC4B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B230F329A09B7FC436A55EBD39182DA62BAC4B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/0/3133312e3235352e3235322e302f32322d3234203d3e20323634353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:74:cd:14:6d:7d:6b:97:de:0a:2f:5a:27:7d:b0:10:88:5a:
         8d:73:e5:83:ce:5c:f5:ef:4c:8a:28:8a:98:84:28:c3:6d:a9:
         f2:3f:5b:43:8d:e1:06:0f:ff:45:51:d0:e6:e1:c6:23:4a:05:
         50:76:01:5a:64:e2:b6:0f:45:cf:42:8f:b7:f5:8f:72:2b:b8:
         e6:6e:b3:ae:2f:33:62:00:f5:7c:5d:54:48:85:54:79:12:ef:
         8e:90:94:07:61:5e:f0:47:60:63:6a:ea:1c:b2:fb:62:4d:50:
         25:bd:0f:d1:ba:1a:8a:41:1e:c3:b9:c0:83:ff:00:9b:47:df:
         5d:4a:29:e3:c7:68:fc:04:6a:f1:00:42:0d:08:d7:19:8e:fd:
         d1:0e:7f:5d:ee:06:93:e0:be:7b:58:de:8e:a8:35:0f:e8:2b:
         f9:1a:e9:51:21:78:19:6b:5e:c7:3f:00:0b:32:8a:af:a9:45:
         06:ce:d8:51:53:f6:ef:f6:65:81:1c:91:d2:dd:8b:fb:bf:ea:
         31:46:ec:7f:64:6d:f0:b7:f5:d9:5c:5c:0c:fa:f8:87:49:6e:
         0c:a9:38:18:ad:dc:b3:d0:09:bc:00:bb:f9:1e:5d:12:fb:c2:
         1c:d6:e6:b8:c3:ca:1e:fb:cd:d3:51:89:35:6f:9b:81:6f:92:
         42:de:8f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org