Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/0/3133312e3130382e3232382e302f32322d3234203d3e20323634333532.roa
File:                     3133312e3130382e3232382e302f32322d3234203d3e20323634333532.roa (raw, json)
Hash identifier:          XL4IPMihTqGMva6Nk6g9VUy7OkLyTntFpfkhI7DSoG4=
Subject key identifier:   5A:1B:25:31:CB:DE:60:72:CD:C2:9D:64:AC:1F:D5:E9:11:5E:6A:20
Certificate issuer:       /CN=C18C1318757B221116457DC9E4FC357DB6F285A1
Certificate serial:       780BC570280A606D4A80BE21098B864BDCF91593
Authority key identifier: C1:8C:13:18:75:7B:22:11:16:45:7D:C9:E4:FC:35:7D:B6:F2:85:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C18C1318757B221116457DC9E4FC357DB6F285A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/0/3133312e3130382e3232382e302f32322d3234203d3e20323634333532.roa
Signing time:             Tue 29 Jun 2021 12:05:27 +0000
ROA not before:           Tue 29 Jun 2021 12:00:27 +0000
ROA not after:            Tue 28 Jun 2022 12:05:27 +0000
asID:                     264352
IP address blocks:        131.108.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0b:c5:70:28:0a:60:6d:4a:80:be:21:09:8b:86:4b:dc:f9:15:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C18C1318757B221116457DC9E4FC357DB6F285A1
        Validity
            Not Before: Jun 29 12:00:27 2021 GMT
            Not After : Jun 28 12:05:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:b6:94:08:b5:f4:41:a9:02:26:aa:95:ec:
                    92:02:75:27:96:f0:1e:b5:45:3d:c8:a6:f3:21:b6:
                    40:b1:ba:99:1a:e3:4d:db:98:78:6c:8b:48:e0:5b:
                    03:d2:35:74:3c:0b:f1:79:91:82:66:da:46:05:17:
                    b1:e5:3e:11:06:0a:d3:89:04:b0:7d:d1:08:92:da:
                    14:13:17:97:19:0f:46:01:ad:06:93:fb:96:40:57:
                    8c:7f:aa:ea:e8:fc:dd:cb:9d:9e:64:a6:63:b3:56:
                    b1:e0:c0:4c:06:a9:fe:ea:60:49:39:49:87:0f:9a:
                    3e:9f:eb:59:61:d9:89:46:46:80:01:ed:2a:cf:e7:
                    54:85:10:b4:c4:57:3f:24:1e:ce:7d:10:f4:46:7b:
                    10:e9:30:50:01:08:bd:2a:90:80:a6:be:12:c8:48:
                    9d:bf:5f:5b:d6:3a:21:d2:55:2b:d4:13:49:70:55:
                    39:b7:08:de:6b:f6:4b:da:96:03:ab:0a:41:7b:5c:
                    4a:59:2e:c8:79:b0:1c:2e:ad:e1:6c:bb:a8:46:62:
                    29:25:56:d1:10:c3:fc:28:7c:56:a7:2b:b4:0d:f2:
                    23:16:59:f7:64:5b:a6:cc:df:8c:b6:52:27:e3:29:
                    35:ec:ac:20:bf:1b:a7:6a:20:3f:48:28:8d:63:84:
                    b6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1B:25:31:CB:DE:60:72:CD:C2:9D:64:AC:1F:D5:E9:11:5E:6A:20
            X509v3 Authority Key Identifier:
                keyid:C1:8C:13:18:75:7B:22:11:16:45:7D:C9:E4:FC:35:7D:B6:F2:85:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/0/C18C1318757B221116457DC9E4FC357DB6F285A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C18C1318757B221116457DC9E4FC357DB6F285A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/0/3133312e3130382e3232382e302f32322d3234203d3e20323634333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:09:bd:01:5e:c6:ed:93:8a:5c:78:4f:26:9c:7e:63:aa:23:
         91:eb:1a:3b:f2:f7:42:ca:05:6c:08:bd:28:13:40:0b:e3:fa:
         b7:79:d6:eb:ac:0c:0a:04:ee:b6:b7:c7:ff:94:c7:52:f8:32:
         a7:ac:fc:2f:04:3b:58:2a:87:ea:e4:1c:4b:62:b2:d4:67:09:
         17:80:41:44:d0:d0:82:5c:a3:56:57:4d:c6:e4:e5:04:92:f8:
         bb:eb:dd:7a:90:69:4c:68:75:40:61:33:81:ef:96:6d:ce:db:
         1e:f9:38:42:d9:4f:6b:b4:aa:fd:39:33:74:27:fd:97:24:62:
         8d:e3:85:20:35:b3:8f:82:19:0a:d0:f6:59:fd:78:42:e5:dc:
         48:11:1c:8d:01:ac:81:ef:59:88:de:3d:bf:31:24:8e:e6:3b:
         e7:71:08:5b:c1:03:17:78:6d:a1:a5:a2:60:74:ac:77:b8:8f:
         f9:c3:8f:cc:78:9c:6c:ec:04:20:25:a4:1a:fc:56:7a:4b:f9:
         66:2a:b5:2f:d5:10:89:c8:69:ea:05:0a:8e:c0:1b:6b:01:4a:
         18:2c:e0:98:87:71:4d:b0:60:c6:ce:be:ba:ad:12:80:31:d7:
         e0:5d:64:2e:f7:fe:e0:bb:d9:e1:21:f1:68:5b:fa:55:31:c0:
         44:86:80:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org