Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/0/3133312e3139362e3133362e302f32322d3234203d3e20323635393239.roa
File:                     3133312e3139362e3133362e302f32322d3234203d3e20323635393239.roa (raw, json)
Hash identifier:          ZpJeHzTgBnDX6KWrHLpw0O7wPGuviJdR6VYM5wQiMPE=
Subject key identifier:   B9:77:DA:8E:21:8B:07:3E:CB:6A:DE:B9:20:1C:1A:E0:D6:B5:FA:69
Certificate issuer:       /CN=00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6
Certificate serial:       58BB720DD7E505D1AE87251A929D8F5CBDBFCC07
Authority key identifier: 00:C8:B9:27:A4:A1:4A:57:DD:57:E8:2A:4B:B3:8F:DF:88:BF:AF:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/0/3133312e3139362e3133362e302f32322d3234203d3e20323635393239.roa
Signing time:             Thu 15 Feb 2024 23:35:38 +0000
ROA not before:           Thu 15 Feb 2024 23:30:38 +0000
ROA not after:            Thu 13 Feb 2025 23:35:38 +0000
asID:                     265929
IP address blocks:        131.196.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bb:72:0d:d7:e5:05:d1:ae:87:25:1a:92:9d:8f:5c:bd:bf:cc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6
        Validity
            Not Before: Feb 15 23:30:38 2024 GMT
            Not After : Feb 13 23:35:38 2025 GMT
        Subject: CN=B977DA8E218B073ECB6ADEB9201C1AE0D6B5FA69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:da:bf:50:b1:e0:05:5e:f1:1c:fb:54:1c:
                    82:78:03:33:39:bb:fd:4c:9c:dd:5d:63:9d:64:b0:
                    30:7a:88:b7:cd:da:46:90:1f:a1:a1:d5:b7:7f:4f:
                    84:6b:a2:d5:1f:64:38:f8:a3:e5:14:89:64:5d:3a:
                    a6:f5:51:b5:76:88:3d:5e:33:ef:6d:b9:9f:c8:a6:
                    1a:62:29:f2:0f:ac:c5:c7:f6:d7:12:05:81:0d:34:
                    99:4c:45:ea:cd:32:a0:84:15:b3:32:32:90:70:8a:
                    c3:15:ea:47:6f:9d:d9:78:fd:39:12:45:b0:b8:3a:
                    2b:75:ed:9a:20:62:f8:42:4a:62:47:86:d4:0b:d0:
                    06:69:c2:4e:46:11:49:85:ce:7d:47:f2:31:ca:8d:
                    69:4e:30:2e:9e:b6:a6:dd:8b:a5:02:37:87:10:f9:
                    df:f3:92:fb:b3:a9:3f:ce:b2:62:12:a1:78:00:e8:
                    72:bf:67:b5:6c:b1:27:7a:b2:0f:48:7d:3a:dd:a1:
                    e6:95:d7:06:93:e4:fb:f6:85:e8:c3:32:56:92:76:
                    d8:25:36:9a:17:60:7c:14:c3:b3:04:e2:81:c9:99:
                    0d:80:3c:92:0d:de:8d:be:e0:78:3a:5a:94:7e:f8:
                    25:9e:74:41:ca:c3:18:de:4d:07:a3:c3:f4:c7:dc:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:77:DA:8E:21:8B:07:3E:CB:6A:DE:B9:20:1C:1A:E0:D6:B5:FA:69
            X509v3 Authority Key Identifier:
                keyid:00:C8:B9:27:A4:A1:4A:57:DD:57:E8:2A:4B:B3:8F:DF:88:BF:AF:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/0/00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/0/3133312e3139362e3133362e302f32322d3234203d3e20323635393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:43:a1:03:7e:3d:3d:42:b3:85:e0:e5:97:7a:04:e8:9f:be:
         48:79:22:46:03:83:3a:26:dd:fe:97:67:8c:77:10:65:fe:84:
         6e:0d:83:f9:ff:25:2d:34:02:88:83:d9:97:df:89:9a:87:a3:
         3b:15:f4:88:d3:f5:a7:a1:a3:6b:9d:20:d7:4f:8f:0c:1c:8d:
         6b:94:2a:16:64:cb:4d:5c:04:dc:e6:f0:ba:93:16:6f:3a:8f:
         b6:74:e4:9d:a0:e9:08:5a:83:a2:88:f4:97:0e:51:f7:77:21:
         60:f1:cc:80:9e:97:14:96:01:ad:fe:7e:4e:ce:91:30:d5:df:
         8a:75:43:84:ec:45:d7:45:4d:10:4b:69:8d:f2:92:1b:e2:6e:
         ee:ba:67:1d:5b:30:97:64:e8:7b:df:51:3e:14:c3:c2:e4:c3:
         8c:d0:db:f9:ec:20:5f:9f:19:cc:0d:58:66:45:55:b1:d7:a6:
         55:bb:54:f7:0a:bd:90:47:9c:55:c8:18:e4:28:27:b6:b3:fd:
         8e:90:54:c5:55:14:f5:5b:54:75:ca:b1:64:c3:d9:b0:6c:c0:
         e6:6b:87:ac:2f:fe:62:54:98:ae:1e:13:90:9a:a6:99:06:89:
         55:9a:f1:8c:42:0b:3b:41:a0:3d:3d:13:ea:a0:48:40:7d:80:
         00:00:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org