Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3133312e3235352e3134342e302f32322d3234203d3e20323634343835.roa
File:                     3133312e3235352e3134342e302f32322d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          R2bkX/ThFlFVgsr5krZqZMPSyY+oe9S98PFmDZRap3Y=
Subject key identifier:   19:FB:22:F6:5B:6E:64:E0:90:5D:9B:78:A0:09:EF:C8:C2:A3:46:61
Certificate issuer:       /CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
Certificate serial:       52E7538DC4E62F2302EF81EFC372BA4126AA5532
Authority key identifier: 6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3133312e3235352e3134342e302f32322d3234203d3e20323634343835.roa
Signing time:             Fri 29 Mar 2024 14:30:01 +0000
ROA not before:           Fri 29 Mar 2024 14:25:01 +0000
ROA not after:            Fri 28 Mar 2025 14:30:01 +0000
asID:                     264485
IP address blocks:        131.255.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e7:53:8d:c4:e6:2f:23:02:ef:81:ef:c3:72:ba:41:26:aa:55:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
        Validity
            Not Before: Mar 29 14:25:01 2024 GMT
            Not After : Mar 28 14:30:01 2025 GMT
        Subject: CN=19FB22F65B6E64E0905D9B78A009EFC8C2A34661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:0c:15:eb:a9:4b:db:4b:81:eb:cc:06:77:
                    61:00:75:34:b8:f5:e1:88:a1:92:84:4f:e5:8a:68:
                    16:ac:da:7c:42:68:ab:34:96:e3:33:60:b0:95:79:
                    be:c4:e0:18:cb:05:1d:29:a1:90:86:3e:c0:c6:99:
                    fb:f7:8f:88:1a:17:30:0b:59:09:1f:77:34:bd:1f:
                    de:52:f1:cf:ab:e4:3d:d3:7c:7e:71:7a:0e:d8:18:
                    d7:fb:70:85:53:e2:3d:a7:2b:2f:64:6b:d1:0e:be:
                    43:2b:3b:0d:a4:12:6e:d1:f4:3f:c5:58:9e:55:93:
                    6d:4b:23:c3:0b:fe:4d:98:66:37:22:e4:e6:94:68:
                    cc:77:5b:64:73:55:f9:62:a9:e1:ae:b4:3f:75:50:
                    1c:5c:c8:35:bf:d8:10:7a:79:80:75:28:36:be:e1:
                    24:16:e0:7f:66:dc:4a:96:21:b3:48:63:63:9f:20:
                    c1:4a:99:04:e2:89:ae:09:fe:bb:94:c4:2d:22:f2:
                    3f:0e:9a:6a:6e:bb:fc:50:db:2a:24:e7:1b:b6:3d:
                    34:d8:06:ab:75:92:2d:b9:b8:f8:a6:f9:cd:58:49:
                    32:db:97:c9:cf:08:21:20:68:f4:96:d9:7b:c0:f6:
                    ef:76:18:31:c5:7e:65:07:af:a9:85:ee:49:48:40:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FB:22:F6:5B:6E:64:E0:90:5D:9B:78:A0:09:EF:C8:C2:A3:46:61
            X509v3 Authority Key Identifier:
                keyid:6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3133312e3235352e3134342e302f32322d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:fc:60:9c:a4:4e:c8:63:5b:24:a5:1e:14:91:d2:f9:8d:fc:
         2c:59:fa:b2:49:a8:3b:32:6b:6b:ef:da:63:81:78:7e:2b:4a:
         bb:e0:b2:06:d2:74:2f:45:be:df:56:48:47:f7:08:d3:25:c2:
         82:df:3e:06:4f:1c:a4:76:5b:43:fc:ce:41:d5:e3:0c:78:00:
         33:02:51:bc:7f:8b:67:b5:7e:ca:7f:f6:35:5b:61:3e:71:12:
         ef:68:a7:f7:79:89:41:2b:8f:9c:b8:da:83:b0:64:e9:a3:a9:
         15:d6:a3:47:68:5c:53:38:3e:75:60:de:07:f6:16:59:d4:dc:
         72:0a:12:f8:99:57:59:01:27:e6:8b:4b:a0:b6:f0:e4:95:04:
         95:22:73:78:c7:b1:70:4a:62:5a:a6:94:46:48:73:c7:e6:88:
         77:c3:4f:7f:2f:98:ed:2b:34:c2:2e:bb:45:9f:5a:3a:25:f0:
         05:cd:b8:96:04:ec:83:e6:ac:6f:80:ca:cc:2e:80:44:85:ed:
         aa:3f:9c:76:d0:39:e2:ef:d6:e6:9f:d3:d2:31:71:fe:e3:9c:
         8e:8c:58:fc:34:9e:98:6c:03:d1:ba:24:01:b6:67:c9:e8:4c:
         e2:46:82:75:e1:60:ea:d6:eb:d3:c2:e7:0a:9e:76:17:b4:93:
         25:48:26:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:33 2024 by rpki-client on console-fra.rpki-client.org