Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/3133312e3130302e35362e302f32322d3234203d3e20323632333233.roa
File:                     3133312e3130302e35362e302f32322d3234203d3e20323632333233.roa (raw, json)
Hash identifier:          Sh9sMESSMm4GNn18mNItpvTfv26OY4xm8DotJHOTd/g=
Subject key identifier:   7C:71:4C:BC:63:DD:8B:7A:12:AB:D2:30:DB:3E:3C:A5:99:1A:47:E2
Certificate issuer:       /CN=F4A13298B8B1DBC0257898EF603127C38CA91069
Certificate serial:       779FCD7CFEFD7BF2CB5A7FB06EADBF7EE3B795CD
Authority key identifier: F4:A1:32:98:B8:B1:DB:C0:25:78:98:EF:60:31:27:C3:8C:A9:10:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4A13298B8B1DBC0257898EF603127C38CA91069.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/3133312e3130302e35362e302f32322d3234203d3e20323632333233.roa
Signing time:             Wed 31 Jan 2024 11:55:08 +0000
ROA not before:           Wed 31 Jan 2024 11:50:08 +0000
ROA not after:            Wed 29 Jan 2025 11:55:08 +0000
asID:                     262323
IP address blocks:        131.100.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9f:cd:7c:fe:fd:7b:f2:cb:5a:7f:b0:6e:ad:bf:7e:e3:b7:95:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4A13298B8B1DBC0257898EF603127C38CA91069
        Validity
            Not Before: Jan 31 11:50:08 2024 GMT
            Not After : Jan 29 11:55:08 2025 GMT
        Subject: CN=7C714CBC63DD8B7A12ABD230DB3E3CA5991A47E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b2:47:e7:0e:ea:3e:b1:7b:d3:88:3c:01:4a:
                    d3:0f:92:bd:29:93:fa:20:66:17:b1:b3:7a:a0:72:
                    8e:59:ba:2e:22:8f:80:be:99:71:fd:93:35:b9:d2:
                    d9:a5:86:f4:d1:d1:e7:fd:1b:81:a4:6c:ce:3c:12:
                    bd:af:ce:09:67:6a:15:75:b3:04:4f:e6:9a:ed:0b:
                    df:94:46:15:99:7e:93:35:0a:4c:27:fd:88:45:d8:
                    55:e0:35:0f:a2:69:3d:b0:58:c7:f3:28:87:11:eb:
                    cd:6c:ae:a9:34:c4:be:d9:02:ee:fd:7b:82:e1:c1:
                    08:3b:73:a1:91:1d:f2:ee:75:83:74:b5:12:85:59:
                    6d:f8:d3:4e:b9:fd:88:77:c5:ef:1c:40:c0:be:28:
                    6e:00:8e:d2:d7:31:19:30:77:00:d5:56:8d:22:8d:
                    4d:07:2f:80:16:06:e1:9c:1b:59:a7:e0:45:bb:bd:
                    dd:59:34:94:00:8f:45:65:be:7d:ab:6b:bd:89:de:
                    67:f8:17:38:37:87:f0:d8:ce:29:3d:13:1a:aa:bf:
                    1f:c5:5f:3a:db:72:46:0c:6f:72:8c:f8:d1:98:ca:
                    62:79:f6:00:16:e5:77:49:5b:c3:af:53:ef:68:7b:
                    5e:cf:b7:a2:ab:d6:ca:6c:80:44:c4:29:c3:16:d7:
                    0d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:71:4C:BC:63:DD:8B:7A:12:AB:D2:30:DB:3E:3C:A5:99:1A:47:E2
            X509v3 Authority Key Identifier:
                keyid:F4:A1:32:98:B8:B1:DB:C0:25:78:98:EF:60:31:27:C3:8C:A9:10:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/F4A13298B8B1DBC0257898EF603127C38CA91069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4A13298B8B1DBC0257898EF603127C38CA91069.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/3133312e3130302e35362e302f32322d3234203d3e20323632333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:8d:16:88:a3:04:df:e8:ce:f6:01:91:fd:6b:5f:d6:b8:63:
         29:34:ae:aa:53:2e:77:b7:f4:41:c7:c6:89:73:16:f9:ca:08:
         e6:05:0b:ce:62:e5:df:e4:49:36:c8:7e:45:1b:db:e7:e3:7b:
         1f:42:4b:56:ba:bf:95:d1:f8:cc:af:6e:8e:49:ce:02:c3:38:
         69:1a:93:7b:fc:b7:82:b6:07:a9:e2:7c:4f:0d:a8:33:95:f1:
         d3:a9:b1:4d:8a:5b:7d:17:e3:bd:59:32:fd:b1:12:9a:05:e8:
         f1:ac:15:57:79:aa:2a:eb:40:d5:af:4b:7b:40:5f:18:0d:e0:
         7c:08:fe:6b:7d:98:52:03:9c:d0:ef:06:85:95:61:58:ce:90:
         06:0e:e1:a5:e3:20:b0:12:52:53:c0:4c:c4:45:5b:fd:59:dc:
         1b:16:8f:a0:8d:58:dd:9a:5f:aa:54:b8:5b:ac:cc:22:d9:48:
         69:44:4c:e8:49:e4:3f:fe:38:dd:5a:1c:0b:ed:a2:e7:21:41:
         9b:1b:39:75:f2:98:89:8e:10:7e:85:90:c1:01:d4:a1:22:72:
         21:79:7e:4c:03:f7:25:b6:af:fe:3a:69:c8:9d:9a:a4:62:7c:
         30:da:07:ab:6c:18:ef:26:dd:1c:77:3d:84:16:5b:01:06:00:
         a6:b9:50:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org