Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtaffT4ZFf66HkoYhjv1Y43AgsFfkn3nLHMs8XisrEBC/0/3133312e3235352e3131322e302f32322d3234203d3e20323634343837.roa
File:                     3133312e3235352e3131322e302f32322d3234203d3e20323634343837.roa (raw, json)
Hash identifier:          9v+SRW+6CYLTygSH+vR9YAGL8i4YbczhTmRZDD9/4IQ=
Subject key identifier:   07:85:1D:AE:EC:53:C4:55:F2:A4:ED:17:B9:FB:F1:63:8F:49:33:1B
Certificate issuer:       /CN=B0CDEA6D9AD63C5D3D8FAB5565DEF0FD114F9591
Certificate serial:       404F4EE9557CA7A1B06960880B4E012C3B00CC9C
Authority key identifier: B0:CD:EA:6D:9A:D6:3C:5D:3D:8F:AB:55:65:DE:F0:FD:11:4F:95:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0CDEA6D9AD63C5D3D8FAB5565DEF0FD114F9591.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtaffT4ZFf66HkoYhjv1Y43AgsFfkn3nLHMs8XisrEBC/0/3133312e3235352e3131322e302f32322d3234203d3e20323634343837.roa
Signing time:             Thu 22 Feb 2024 17:34:40 +0000
ROA not before:           Thu 22 Feb 2024 17:29:40 +0000
ROA not after:            Thu 20 Feb 2025 17:34:40 +0000
asID:                     264487
IP address blocks:        131.255.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4f:4e:e9:55:7c:a7:a1:b0:69:60:88:0b:4e:01:2c:3b:00:cc:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CDEA6D9AD63C5D3D8FAB5565DEF0FD114F9591
        Validity
            Not Before: Feb 22 17:29:40 2024 GMT
            Not After : Feb 20 17:34:40 2025 GMT
        Subject: CN=07851DAEEC53C455F2A4ED17B9FBF1638F49331B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:97:82:4d:1e:e3:36:37:6b:58:e4:d2:98:
                    fb:f4:1b:95:a6:ba:af:29:2e:91:b4:22:b6:5f:c7:
                    99:b5:87:b5:7e:69:69:68:5a:e8:89:18:e0:e5:f2:
                    df:9a:13:73:0d:19:28:0f:b4:a3:50:81:b5:db:13:
                    11:78:80:33:7c:66:a3:b1:a3:e3:4d:d3:e8:69:d8:
                    40:10:56:1b:08:5c:1f:5f:5e:54:ed:9b:ab:da:a6:
                    f9:32:d0:ad:d2:28:79:d4:36:36:6e:08:ea:ef:37:
                    43:a6:bb:7e:52:3b:b1:fe:0c:26:cf:ce:1a:07:ab:
                    7a:48:48:1e:c3:f8:27:69:ad:e3:78:61:57:f3:c2:
                    1b:13:70:11:3a:3f:bb:a3:70:c2:d3:bc:1c:42:2d:
                    f1:61:d1:af:0f:2c:b4:45:72:4a:cc:18:db:04:23:
                    0a:d2:1a:40:31:74:53:c3:0a:31:bd:de:46:40:15:
                    77:83:e8:64:15:62:ba:55:e9:0b:3d:e3:68:7d:3a:
                    4f:a7:51:90:0d:fc:9d:e7:76:ca:0f:5f:59:78:57:
                    1e:ad:a6:70:dc:cc:65:45:c9:89:4f:72:ac:30:30:
                    f9:b2:ac:0a:19:47:e1:3d:0c:5b:1c:2b:08:74:00:
                    7e:0d:1b:07:94:16:91:bc:2b:37:06:41:c3:4d:f7:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:85:1D:AE:EC:53:C4:55:F2:A4:ED:17:B9:FB:F1:63:8F:49:33:1B
            X509v3 Authority Key Identifier:
                keyid:B0:CD:EA:6D:9A:D6:3C:5D:3D:8F:AB:55:65:DE:F0:FD:11:4F:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtaffT4ZFf66HkoYhjv1Y43AgsFfkn3nLHMs8XisrEBC/0/B0CDEA6D9AD63C5D3D8FAB5565DEF0FD114F9591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0CDEA6D9AD63C5D3D8FAB5565DEF0FD114F9591.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtaffT4ZFf66HkoYhjv1Y43AgsFfkn3nLHMs8XisrEBC/0/3133312e3235352e3131322e302f32322d3234203d3e20323634343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:f1:7a:8b:e9:b9:99:93:2b:f0:38:4f:c0:b7:d2:c6:d2:d4:
         60:16:fb:43:ca:10:fe:6b:43:f4:46:07:9d:cd:a4:13:97:51:
         57:9f:b9:19:34:38:35:37:14:10:eb:7c:4f:a8:0f:17:ab:6e:
         13:13:e4:6d:f4:02:8b:a5:a1:a9:3c:f5:1f:05:c2:fc:be:5a:
         3a:22:1a:ec:24:2d:a5:d4:52:f5:ef:8c:e6:16:ce:60:33:61:
         05:c2:f8:1e:c4:a5:39:23:ff:29:e5:29:24:f4:73:13:57:49:
         92:48:da:4d:b2:89:7b:93:8c:07:64:bb:c6:bc:79:aa:ac:1d:
         cd:d2:0d:aa:73:9b:4c:06:ac:4f:8e:61:3a:aa:84:46:4f:bf:
         9c:b6:29:75:94:de:c2:22:2c:58:08:87:b9:1e:61:93:b3:46:
         1a:20:38:ec:8e:a4:d4:0d:2b:ba:d0:20:78:c9:ed:ac:e6:5e:
         e6:e2:ff:96:e6:70:47:d1:2a:04:0c:8b:ec:85:2c:86:20:cb:
         5f:a0:79:fd:18:ea:3c:67:68:9d:74:35:54:58:df:e8:fd:33:
         36:51:a6:2c:82:a4:b2:78:08:de:68:9e:d8:98:bf:84:a5:68:
         5b:24:66:e3:e3:90:f9:55:36:0e:7b:a5:98:d9:d3:e9:75:da:
         f8:02:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org