Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32332d3233203d3e20323634343530.roa
File:                     3133312e3235352e33382e302f32332d3233203d3e20323634343530.roa (raw, json)
Hash identifier:          DhBwsV8PyKJICz3S5i5wKBaoXxs7yhknJiCEoAjuL4g=
Subject key identifier:   C3:9A:94:C1:5A:F5:C4:CF:A5:3A:9D:9D:5D:7A:E3:82:1B:E8:E0:10
Certificate issuer:       /CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
Certificate serial:       4390236F78BE42EFE0D1BB6466847F8AF5AE375C
Authority key identifier: C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32332d3233203d3e20323634343530.roa
Signing time:             Thu 03 Nov 2022 17:12:33 +0000
ROA not before:           Thu 03 Nov 2022 17:07:33 +0000
ROA not after:            Thu 02 Nov 2023 17:12:33 +0000
asID:                     264450
IP address blocks:        131.255.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:90:23:6f:78:be:42:ef:e0:d1:bb:64:66:84:7f:8a:f5:ae:37:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
        Validity
            Not Before: Nov  3 17:07:33 2022 GMT
            Not After : Nov  2 17:12:33 2023 GMT
        Subject: CN=C39A94C15AF5C4CFA53A9D9D5D7AE3821BE8E010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:cf:56:5c:5b:af:2e:43:a7:83:91:e8:c0:
                    6e:0a:7f:ab:51:5a:73:e7:f2:00:65:30:34:4c:f4:
                    53:9d:35:71:b7:89:34:64:d5:ec:c5:ac:b7:8c:bd:
                    6b:6e:ca:ed:99:c3:10:38:bb:9e:fe:36:82:03:88:
                    1c:37:67:51:67:be:00:61:ad:8a:70:a7:87:29:7b:
                    a6:38:e6:66:93:e2:43:aa:66:76:c2:1b:e9:23:78:
                    c4:62:59:29:20:bf:98:a9:ec:c8:ba:82:74:e1:bd:
                    c3:12:86:f3:96:37:9e:01:7f:41:b8:d4:42:6c:f8:
                    98:97:8f:66:c4:76:d3:82:12:21:5d:39:c5:5b:8d:
                    e1:c4:f2:48:65:e1:a4:5f:27:4c:d8:3d:36:91:79:
                    41:b0:70:49:b9:a7:8c:e7:ce:b0:65:aa:3e:22:b2:
                    19:96:1e:80:84:35:bd:c8:d8:c8:9d:84:16:5d:2a:
                    20:95:8c:57:81:b8:af:79:39:a1:90:2c:9b:84:1c:
                    84:c7:c5:81:15:5d:0b:2b:9d:f6:44:1f:f0:8f:fe:
                    7f:a2:9f:7d:44:d3:c7:fa:0f:f9:fa:6b:c5:a3:32:
                    99:be:2b:64:6c:c0:d5:51:82:b9:fd:d2:87:50:c0:
                    c7:32:55:6e:04:91:b8:0d:9f:46:67:05:e9:1d:1a:
                    63:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9A:94:C1:5A:F5:C4:CF:A5:3A:9D:9D:5D:7A:E3:82:1B:E8:E0:10
            X509v3 Authority Key Identifier:
                keyid:C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32332d3233203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:cb:b5:e1:a8:c7:34:bf:54:a3:a3:9c:be:f5:37:a9:d1:54:
         51:38:07:71:c8:65:c5:aa:4f:90:41:c2:55:c1:98:72:45:7b:
         5c:a5:e5:3b:9a:ef:b1:0c:92:57:7a:2b:1d:a3:ba:df:5e:ec:
         65:c9:8b:80:21:85:c3:83:52:2c:05:0f:aa:92:b4:4e:70:1e:
         36:a9:28:31:fe:93:68:09:bb:42:ae:6e:28:9e:22:1d:6b:f4:
         b8:d7:5b:16:58:32:b7:14:60:ea:32:83:21:06:eb:13:f6:6c:
         6a:c7:1a:73:e0:57:2b:9e:fd:7e:b3:3f:44:9e:dc:a4:64:5f:
         e1:70:47:ce:01:aa:a4:ec:e1:df:d0:8e:e2:92:be:9b:ce:ef:
         5d:58:36:b9:c4:00:4f:3d:0b:fa:2c:fd:10:2e:2c:66:0a:06:
         9a:c6:08:5c:82:7b:13:e2:22:c4:80:d2:bb:21:9f:50:73:db:
         a4:80:30:e1:5e:d5:11:f4:54:ef:45:02:5f:fd:dd:32:84:db:
         ac:44:52:45:a7:2e:65:e3:78:7c:01:b4:4f:7f:19:20:f2:66:
         0a:86:e1:c0:73:9e:3c:21:77:fe:06:51:02:33:12:32:3a:15:
         f0:a7:3c:4c:09:3a:db:1b:8d:5d:1d:46:e1:4e:84:92:51:42:
         1a:8b:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org