Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32342d3234203d3e20323634343530.roa
File:                     3133312e3235352e33382e302f32342d3234203d3e20323634343530.roa (raw, json)
Hash identifier:          wUoWlrgEksBhnLxtmeV96yqkqClU7W2OnYU0XOYHarc=
Subject key identifier:   85:24:32:42:0E:52:F1:B6:CF:F3:3B:7B:93:6C:FB:05:56:EC:5E:04
Certificate issuer:       /CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
Certificate serial:       7AF409EE4194044E524D5474A28C995BBCFB67A6
Authority key identifier: C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32342d3234203d3e20323634343530.roa
Signing time:             Thu 03 Nov 2022 17:12:56 +0000
ROA not before:           Thu 03 Nov 2022 17:07:56 +0000
ROA not after:            Thu 02 Nov 2023 17:12:56 +0000
asID:                     264450
IP address blocks:        131.255.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f4:09:ee:41:94:04:4e:52:4d:54:74:a2:8c:99:5b:bc:fb:67:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
        Validity
            Not Before: Nov  3 17:07:56 2022 GMT
            Not After : Nov  2 17:12:56 2023 GMT
        Subject: CN=852432420E52F1B6CFF33B7B936CFB0556EC5E04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:49:0a:69:43:18:1c:80:32:1a:29:fd:13:
                    76:4a:e8:f1:9c:fe:4f:d6:b8:d4:7e:3a:64:76:32:
                    82:7e:1c:51:d5:6a:12:77:46:96:34:a6:0f:73:d6:
                    f2:14:22:d0:4c:ed:96:f0:a8:9a:3e:7d:85:59:20:
                    1d:f5:aa:a0:55:65:ea:9e:3d:56:df:ec:e1:d0:b6:
                    58:01:35:87:e7:36:9c:19:c6:d5:76:88:9b:32:ad:
                    82:6c:ef:04:8e:c6:28:37:7d:22:5a:27:92:2b:11:
                    3e:8a:97:62:e5:f4:08:a9:b4:28:cb:8a:e8:e0:2f:
                    28:c9:c7:51:fe:6f:25:10:e3:61:22:01:81:44:52:
                    f7:f9:3a:2b:28:1e:80:ff:06:e7:d0:a4:06:e4:15:
                    b6:a9:b0:4f:fe:c3:a7:1b:d0:04:e6:d4:c1:d7:41:
                    37:55:e1:92:54:9e:0a:06:6a:f6:70:8b:3f:ec:c5:
                    69:85:7b:8d:9c:ad:8e:d3:25:4c:8e:1d:6a:4b:10:
                    8e:fe:23:08:c9:b6:d8:8d:09:b9:a4:01:cc:24:d4:
                    04:64:e4:76:62:00:f2:da:7e:d7:98:e0:15:64:b7:
                    b9:d6:9f:ba:41:29:48:45:42:69:1f:2e:3b:e8:47:
                    3a:eb:22:ce:26:4b:83:68:50:79:16:e8:e1:94:75:
                    e3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:24:32:42:0E:52:F1:B6:CF:F3:3B:7B:93:6C:FB:05:56:EC:5E:04
            X509v3 Authority Key Identifier:
                keyid:C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32342d3234203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:56:a9:24:ed:c2:87:81:d0:1e:9b:c4:11:23:bc:c0:d6:8d:
         2d:8a:58:d6:1f:a1:a7:dd:18:e6:de:d2:8e:ba:76:be:48:f2:
         08:3b:ea:76:78:8e:d6:94:29:e9:73:47:38:7b:87:0a:fd:78:
         86:c2:63:d6:2f:0b:66:64:02:a7:9c:35:0d:5a:29:fa:64:f7:
         6b:85:fb:21:f5:13:8c:a2:0f:ba:a6:02:8e:9e:c3:c5:32:27:
         3c:15:b5:c6:61:21:6e:6e:20:e7:38:01:81:f1:ac:d5:b8:c6:
         39:20:fe:11:f4:f8:a4:a1:a7:2e:a3:96:e3:3a:5f:bd:4d:9d:
         92:27:8b:55:38:c1:0f:f7:91:e5:b4:31:0c:89:89:64:54:2e:
         de:04:14:59:7a:44:15:3b:37:d6:6d:aa:dc:b9:73:92:30:c1:
         ec:69:73:9b:97:db:91:60:f8:c2:3e:05:23:f8:76:86:35:e8:
         41:73:b8:b8:ef:05:2f:f4:83:59:cd:4f:75:6f:d7:64:48:7a:
         5f:fe:36:6d:fa:95:6a:04:25:d2:c2:89:1f:67:8b:89:4f:6b:
         fd:82:4b:05:f1:13:cf:3a:69:fc:6e:36:a2:34:d9:97:47:e5:
         62:df:00:47:46:b2:91:21:88:af:5a:b7:15:d0:bc:1f:54:45:
         e9:a2:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org