Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbBRkz4PStMDzQ66kKRRc8PUVtcqBnvnN5Giesrk7RWS/0/3133312e3136312e34342e302f32322d3234203d3e20323634333632.roa
File:                     3133312e3136312e34342e302f32322d3234203d3e20323634333632.roa (raw, json)
Hash identifier:          ZFbnFhbruRqlPvtA9F/NStClhsZE82Y1z1KEtbjiMnA=
Subject key identifier:   81:1A:D5:29:6C:A1:17:9D:6D:52:87:D9:4C:BF:CB:2B:A5:15:9D:1E
Certificate issuer:       /CN=99487EFA912E00AC9506A56F1CC72C307CC80658
Certificate serial:       7906F9D664591DF630FBEDAC7CE740FBFB21942E
Authority key identifier: 99:48:7E:FA:91:2E:00:AC:95:06:A5:6F:1C:C7:2C:30:7C:C8:06:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99487EFA912E00AC9506A56F1CC72C307CC80658.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbBRkz4PStMDzQ66kKRRc8PUVtcqBnvnN5Giesrk7RWS/0/3133312e3136312e34342e302f32322d3234203d3e20323634333632.roa
Signing time:             Wed 02 Mar 2022 12:57:49 +0000
ROA not before:           Wed 02 Mar 2022 12:52:49 +0000
ROA not after:            Wed 01 Mar 2023 12:57:49 +0000
asID:                     264362
IP address blocks:        131.161.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:06:f9:d6:64:59:1d:f6:30:fb:ed:ac:7c:e7:40:fb:fb:21:94:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99487EFA912E00AC9506A56F1CC72C307CC80658
        Validity
            Not Before: Mar  2 12:52:49 2022 GMT
            Not After : Mar  1 12:57:49 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6d:9c:98:c0:b1:8f:c6:48:ff:23:65:18:f7:
                    94:1b:fe:88:8b:1a:af:1d:71:a2:3c:20:a6:5f:41:
                    cf:0e:dc:39:26:6f:c9:69:7d:a5:3f:ed:a2:04:43:
                    79:2e:84:1f:3b:ba:a3:8b:6c:80:56:65:6d:f0:8c:
                    19:fb:5e:20:c1:93:e3:ff:6f:c0:fb:ce:aa:c1:63:
                    f4:08:9b:14:f7:c7:8f:ac:a2:42:4d:5d:d6:06:a1:
                    12:e5:f0:cb:b2:e7:2d:b2:b7:78:37:eb:0d:9f:92:
                    91:72:84:7b:4a:01:78:db:8f:01:53:75:13:31:72:
                    92:db:76:60:e9:4a:ec:cf:d9:0e:46:54:6d:16:a0:
                    11:7e:e5:86:ee:76:64:8e:ad:78:41:d9:cb:18:a8:
                    bd:03:aa:a7:c2:ff:e8:13:90:2e:3e:8f:88:18:83:
                    3a:16:db:63:41:03:12:6f:04:6d:42:63:de:f5:73:
                    c8:66:f8:f8:4f:18:95:56:22:8f:bc:5b:04:d3:3e:
                    6e:c3:a3:2f:9b:0d:76:27:79:08:57:8d:46:ad:10:
                    3a:2a:29:34:09:13:25:bf:aa:67:de:de:99:cd:f9:
                    ad:fc:7d:59:07:08:1e:17:29:2f:9c:37:45:61:ad:
                    7c:54:ce:82:90:3d:1f:29:36:38:4e:54:d1:89:85:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1A:D5:29:6C:A1:17:9D:6D:52:87:D9:4C:BF:CB:2B:A5:15:9D:1E
            X509v3 Authority Key Identifier:
                keyid:99:48:7E:FA:91:2E:00:AC:95:06:A5:6F:1C:C7:2C:30:7C:C8:06:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbBRkz4PStMDzQ66kKRRc8PUVtcqBnvnN5Giesrk7RWS/0/99487EFA912E00AC9506A56F1CC72C307CC80658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99487EFA912E00AC9506A56F1CC72C307CC80658.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbBRkz4PStMDzQ66kKRRc8PUVtcqBnvnN5Giesrk7RWS/0/3133312e3136312e34342e302f32322d3234203d3e20323634333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:d4:bd:7d:d7:51:fc:97:6b:5d:21:65:64:51:29:93:2c:0b:
         e6:80:5d:6c:12:52:37:c1:f7:8d:e3:ca:df:c7:2a:a2:dd:ea:
         c3:23:c2:00:86:dc:7b:61:03:0e:b6:87:08:48:11:85:2a:4c:
         e4:1a:1e:cc:aa:c7:a1:16:d7:4f:96:6f:1a:52:15:66:9e:30:
         b5:91:f2:a6:ed:8d:ad:f2:9a:97:6c:dd:a5:ab:ee:a4:14:fa:
         0e:1a:dc:42:db:8d:85:3b:7f:f8:6c:2a:f6:2b:39:0c:30:18:
         a3:40:91:10:08:e8:ac:1c:47:51:a3:7d:88:d0:5d:d4:50:84:
         40:ad:fa:73:4d:e3:1b:d6:fc:b3:d8:cb:0d:1c:8a:ad:fe:63:
         b5:7e:37:b1:20:86:da:83:f4:26:94:df:50:54:b8:8c:8f:c2:
         dc:ea:1e:91:39:38:46:7d:0e:cc:6e:c9:98:db:fc:35:66:47:
         90:81:c2:4e:ff:07:d5:14:ba:37:94:9c:28:e6:2e:e5:78:99:
         31:a8:f2:ad:24:d4:d2:d1:23:bf:ac:1e:47:db:18:b2:e1:d9:
         16:6d:a5:47:57:0b:1e:07:d5:81:55:4e:3f:e8:c6:49:af:ec:
         65:64:71:ad:d1:a4:d4:c1:fb:71:00:75:4f:a8:d5:96:00:13:
         bb:8d:94:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org