Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/3133312e3139362e35362e302f32322d3234203d3e20323637333537.roa
File:                     3133312e3139362e35362e302f32322d3234203d3e20323637333537.roa (raw, json)
Hash identifier:          fSpN3K78sp0dU6WGmvr1KzZvFa+K1dNOd+Qnskss294=
Subject key identifier:   92:76:B2:AE:B2:F8:38:A2:B7:FE:E3:3B:D8:D7:6C:3C:6C:F7:22:75
Certificate issuer:       /CN=84F3B80D33C175446949AD1A64A94D5860E586A9
Certificate serial:       298E6B43679EADFF60462D7AFF34F8E37AA0FCC9
Authority key identifier: 84:F3:B8:0D:33:C1:75:44:69:49:AD:1A:64:A9:4D:58:60:E5:86:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84F3B80D33C175446949AD1A64A94D5860E586A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/3133312e3139362e35362e302f32322d3234203d3e20323637333537.roa
Signing time:             Fri 26 Jan 2024 12:51:56 +0000
ROA not before:           Fri 26 Jan 2024 12:46:56 +0000
ROA not after:            Fri 24 Jan 2025 12:51:56 +0000
asID:                     267357
IP address blocks:        131.196.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8e:6b:43:67:9e:ad:ff:60:46:2d:7a:ff:34:f8:e3:7a:a0:fc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F3B80D33C175446949AD1A64A94D5860E586A9
        Validity
            Not Before: Jan 26 12:46:56 2024 GMT
            Not After : Jan 24 12:51:56 2025 GMT
        Subject: CN=9276B2AEB2F838A2B7FEE33BD8D76C3C6CF72275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a7:96:57:f0:2f:d6:f4:2a:07:55:21:6b:d4:
                    be:21:ea:ca:67:18:f6:54:6b:4e:01:b5:62:3b:81:
                    ea:da:7a:ba:6a:0f:0d:89:d2:3f:da:54:8a:cf:ed:
                    5f:70:14:cd:55:a5:b4:ef:fb:0a:d5:3a:07:f8:5e:
                    51:e9:13:94:12:d6:8c:83:51:b5:d5:2a:17:2d:d9:
                    4f:80:be:41:6e:8c:ce:50:eb:82:31:1a:f3:5b:50:
                    ec:4d:c9:30:75:42:e7:31:8e:78:e9:0b:c5:be:7e:
                    9d:30:d0:c9:b8:e4:89:c0:ce:ea:34:aa:4f:f5:ad:
                    7f:77:3d:71:24:7a:5f:c5:32:95:c9:ec:4b:f0:66:
                    e8:c5:fa:2b:f3:21:31:c5:18:f6:ce:61:f9:d9:cf:
                    04:d9:63:e5:36:b4:7f:69:89:8b:3b:34:f4:4a:83:
                    78:1f:88:a2:e1:a3:dc:89:47:ba:a1:b1:b4:7d:90:
                    4b:a0:14:da:73:63:7c:14:2a:a1:ad:5d:eb:5e:0e:
                    8e:16:80:01:8f:eb:0f:ed:36:33:46:3f:3b:d0:b7:
                    c6:fb:b3:22:72:a3:59:ac:c3:3c:14:0c:6a:1a:e6:
                    b4:bc:87:68:7b:3c:d3:5b:6b:2d:70:85:e0:6b:0b:
                    ea:f2:e4:9d:54:2e:9e:67:0a:36:a8:e8:99:e0:42:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:76:B2:AE:B2:F8:38:A2:B7:FE:E3:3B:D8:D7:6C:3C:6C:F7:22:75
            X509v3 Authority Key Identifier:
                keyid:84:F3:B8:0D:33:C1:75:44:69:49:AD:1A:64:A9:4D:58:60:E5:86:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/84F3B80D33C175446949AD1A64A94D5860E586A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84F3B80D33C175446949AD1A64A94D5860E586A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/3133312e3139362e35362e302f32322d3234203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:3c:0a:21:08:71:aa:ff:0e:82:07:ed:89:c0:94:6c:fa:39:
         31:d1:44:14:0b:ec:0e:2a:05:7f:9b:73:1a:16:d6:d2:c3:eb:
         8f:a2:d1:bf:e9:58:90:eb:6d:6d:8c:73:9f:2a:2c:7f:35:00:
         29:a0:b1:13:e0:d9:93:82:4e:05:80:db:67:34:5b:c6:f6:16:
         ad:32:1b:ab:ba:5c:a7:06:54:7b:5c:cf:c0:e5:8f:93:db:0e:
         7e:5a:d1:60:fe:52:1b:4c:04:76:6e:e5:ce:cf:2d:1c:6c:c0:
         ac:35:eb:c1:a8:04:dd:80:18:8d:ad:0b:48:cc:40:63:a1:c7:
         25:0b:cd:d0:20:6f:ef:53:31:a4:12:60:41:81:99:af:5a:0e:
         09:dd:dc:0a:32:af:ef:95:45:11:b0:f8:3d:11:08:4a:88:1a:
         65:99:7a:e0:ac:c0:30:7c:5d:00:ef:ea:b9:bf:de:06:36:51:
         8e:9f:4a:48:a8:3a:1e:0b:c6:70:4b:00:d4:27:d2:4e:ff:ef:
         ae:12:38:44:71:af:b4:e9:52:1d:2f:1a:1c:56:7f:16:a3:5f:
         8d:aa:3c:4b:8b:f0:5f:5a:1d:7d:17:e2:6c:a1:8b:71:cb:37:
         73:23:2c:0d:5a:80:0f:17:b3:0f:14:a6:3f:79:b7:d9:d8:37:
         fd:bf:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org