Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa
File:                     3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (raw, json)
Hash identifier:          p5WiXPCyj2eUa55jZSu58cjkbBT/FdINvKsJlYW4ZVA=
Subject key identifier:   A9:DB:5D:D9:A1:51:B5:F0:42:04:E6:63:3D:42:AC:9C:DB:F7:50:2C
Certificate issuer:       /CN=3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387
Certificate serial:       13D0A9EF90DE708A2E9A0B1F6019856E44998C4E
Authority key identifier: 3A:2B:D4:B7:FE:56:06:B7:FA:F4:C3:A5:6A:B8:08:25:2E:8D:73:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa
Signing time:             Fri 15 Sep 2023 17:36:29 +0000
ROA not before:           Fri 15 Sep 2023 17:31:29 +0000
ROA not after:            Fri 13 Sep 2024 17:36:29 +0000
asID:                     264350
IP address blocks:        131.108.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d0:a9:ef:90:de:70:8a:2e:9a:0b:1f:60:19:85:6e:44:99:8c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387
        Validity
            Not Before: Sep 15 17:31:29 2023 GMT
            Not After : Sep 13 17:36:29 2024 GMT
        Subject: CN=A9DB5DD9A151B5F04204E6633D42AC9CDBF7502C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:da:09:01:2a:c9:36:95:a5:9d:98:85:cd:
                    fa:0f:68:06:60:eb:e0:55:e4:82:15:d5:9c:ad:52:
                    f5:ff:60:a4:4b:02:e3:c6:78:b5:df:17:f2:d3:76:
                    df:7a:af:d8:66:35:50:a4:4a:da:5f:f2:cc:93:9c:
                    a5:5d:fa:59:d9:07:df:50:93:07:59:3e:f5:a0:dc:
                    d1:19:b4:dd:18:93:85:d5:a5:84:08:d9:27:ca:d3:
                    bc:ba:5a:2c:7c:e9:fb:68:63:f3:50:f2:36:26:ae:
                    b7:ca:95:7c:81:60:17:f7:fa:65:08:62:aa:b7:08:
                    92:86:dc:f2:08:22:4c:ba:57:6d:c4:e3:88:c8:9e:
                    92:58:09:4b:36:ff:6d:68:a3:28:fe:d8:90:ae:85:
                    74:88:68:fb:be:9f:98:02:ec:88:7e:da:70:be:8a:
                    d4:7e:0d:68:f7:b8:29:b2:81:04:03:f3:3f:18:c5:
                    e9:00:ad:24:1b:49:f0:00:bf:06:4b:f0:9b:6d:ac:
                    56:6d:96:7e:19:f5:56:79:e6:d1:9d:c1:53:ae:b6:
                    8e:92:e8:ad:6d:2a:d5:0d:9f:71:d5:6d:16:80:fa:
                    ea:64:ce:e2:d7:48:3d:f9:c7:44:72:7d:d1:e8:4c:
                    7d:9d:04:f0:60:72:b3:ae:84:30:4d:05:73:a1:7c:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DB:5D:D9:A1:51:B5:F0:42:04:E6:63:3D:42:AC:9C:DB:F7:50:2C
            X509v3 Authority Key Identifier:
                keyid:3A:2B:D4:B7:FE:56:06:B7:FA:F4:C3:A5:6A:B8:08:25:2E:8D:73:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:5f:81:25:c1:f3:18:ff:b5:a4:0f:43:e5:2f:29:3d:ce:48:
         88:05:6a:fb:1e:89:a7:53:2c:4f:66:04:e4:91:6b:a9:0c:8c:
         ab:04:77:bf:ae:44:02:b1:46:5d:03:59:a2:38:fc:e7:33:fe:
         9e:01:38:23:78:07:b8:70:85:ba:be:a0:41:ec:c6:23:9b:03:
         ea:ad:b7:d6:c5:16:42:ed:02:ed:26:46:fb:9b:df:8d:9a:be:
         c1:8b:5e:cc:f3:1a:2a:b5:91:b1:4e:1b:6f:73:d4:24:0d:30:
         fb:4f:9d:f1:86:fc:46:1f:2a:26:b1:1c:71:27:38:ee:c9:5b:
         b9:a7:1f:1b:fd:d0:62:16:3a:4b:63:c2:41:33:30:b7:02:ea:
         84:95:6a:9f:af:41:b2:f7:35:91:b6:2b:d5:67:7e:92:c4:85:
         70:5c:d3:4f:e4:7a:54:85:20:9d:30:95:f9:44:8a:46:15:4b:
         5f:b8:48:cb:92:82:25:89:76:7d:01:0c:37:fc:af:4f:80:d8:
         9f:27:a3:bb:8e:72:30:f0:c0:cb:a0:fe:8b:38:35:bd:99:62:
         9e:8b:e3:00:93:d8:ed:35:d4:c2:bf:21:f3:20:2c:3e:32:5e:
         4a:f5:f3:47:ed:a8:37:82:e3:0e:de:91:48:6f:eb:7b:15:d8:
         b0:07:8b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org