Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/3133312e3136312e36342e302f32322d3233203d3e20323634333639.roa
File:                     3133312e3136312e36342e302f32322d3233203d3e20323634333639.roa (raw, json)
Hash identifier:          YXK4b4Od30M+vZRQ8d40NcKtl03nZJH2gi9U0Nd1EHk=
Subject key identifier:   97:68:1D:FB:02:51:D4:E7:A5:8F:4A:3E:B3:FC:49:92:6B:F2:82:7F
Certificate issuer:       /CN=0EF712BCF8F56EDB537B38403CD033E8F6D632CD
Certificate serial:       502768D2650A9C4FA03C9222F68D94FCE4364597
Authority key identifier: 0E:F7:12:BC:F8:F5:6E:DB:53:7B:38:40:3C:D0:33:E8:F6:D6:32:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF712BCF8F56EDB537B38403CD033E8F6D632CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/3133312e3136312e36342e302f32322d3233203d3e20323634333639.roa
Signing time:             Thu 31 Aug 2023 13:04:57 +0000
ROA not before:           Thu 31 Aug 2023 12:59:57 +0000
ROA not after:            Thu 29 Aug 2024 13:04:57 +0000
asID:                     264369
IP address blocks:        131.161.64.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:27:68:d2:65:0a:9c:4f:a0:3c:92:22:f6:8d:94:fc:e4:36:45:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EF712BCF8F56EDB537B38403CD033E8F6D632CD
        Validity
            Not Before: Aug 31 12:59:57 2023 GMT
            Not After : Aug 29 13:04:57 2024 GMT
        Subject: CN=97681DFB0251D4E7A58F4A3EB3FC49926BF2827F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:0f:1b:03:08:25:78:80:b3:2d:36:19:a0:
                    55:cf:7b:40:82:ee:9e:fe:75:10:b4:61:2c:af:ef:
                    05:70:8d:4a:5b:0a:f0:89:20:d6:fd:ae:a9:22:e7:
                    ed:7d:5c:f4:9b:eb:04:3e:0c:59:dc:5f:15:c0:69:
                    01:69:cc:f3:26:4e:69:b9:af:ef:ed:2d:d4:1c:64:
                    7d:e4:a0:85:5e:41:c6:12:bf:25:52:12:c9:e5:b5:
                    b1:b3:4c:52:0c:93:8e:64:9f:2f:13:dd:38:49:dd:
                    7e:4f:7d:96:c8:28:ae:c7:0e:48:68:43:f0:cd:6a:
                    c4:ab:74:4a:e5:32:4c:86:62:9a:2a:56:3b:87:d8:
                    25:95:8a:3b:f9:8b:2d:72:7d:86:30:83:c9:f8:11:
                    bc:83:ac:b7:2d:2b:a9:24:b9:c1:db:14:34:d7:fa:
                    8c:28:79:f6:14:41:dc:2b:6d:41:0b:d0:98:4a:be:
                    32:9a:d5:40:f0:48:68:0b:29:ab:b7:bb:d6:3e:16:
                    ec:12:cf:f1:41:04:cf:2e:a8:ef:4d:e0:0f:a1:c8:
                    1d:ab:54:75:bb:af:b3:47:f3:71:de:40:9b:3f:13:
                    4f:8b:e0:e2:67:16:cb:b1:60:4d:76:69:a4:89:f9:
                    69:69:89:08:7f:e8:af:18:0e:0e:cb:07:3f:5e:d1:
                    3d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:68:1D:FB:02:51:D4:E7:A5:8F:4A:3E:B3:FC:49:92:6B:F2:82:7F
            X509v3 Authority Key Identifier:
                keyid:0E:F7:12:BC:F8:F5:6E:DB:53:7B:38:40:3C:D0:33:E8:F6:D6:32:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/0EF712BCF8F56EDB537B38403CD033E8F6D632CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF712BCF8F56EDB537B38403CD033E8F6D632CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/3133312e3136312e36342e302f32322d3233203d3e20323634333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:8a:fd:54:4d:1e:61:12:bd:0e:8f:16:d7:d2:4f:6a:ca:
         fb:45:c5:c2:c3:c5:34:d4:ab:bf:fc:b5:7a:33:56:b7:b5:18:
         b5:84:8f:fc:a4:14:58:cb:03:10:c7:09:45:35:fd:e9:3d:49:
         7f:e1:39:bd:00:6a:71:16:35:5d:99:ab:04:0e:93:c2:b8:01:
         27:22:41:db:0e:c8:99:ec:69:bf:f5:e6:b1:a5:78:69:b6:23:
         34:f4:1d:af:ea:1f:e8:7d:6e:ea:d2:8b:6d:f6:15:11:20:c5:
         58:5b:cf:86:9d:1d:a2:5f:23:3a:a5:ff:e5:74:1f:2e:d7:72:
         6c:85:cd:fb:14:0e:7f:2c:a9:cf:24:79:0e:c1:6e:87:e0:21:
         9a:ec:db:a9:98:ec:87:99:92:04:92:88:2f:76:53:ba:bc:02:
         ab:4f:1c:5a:4e:c3:1f:b2:0e:70:16:6c:c9:2f:32:2b:79:8f:
         b4:c9:6a:7f:55:81:dc:6f:8f:39:77:78:47:76:bd:53:f1:d2:
         3f:df:60:e2:2d:c8:0a:f8:2d:7b:68:0c:98:eb:0c:e4:c2:fa:
         76:3d:60:76:c9:b5:21:ec:44:2f:48:67:9b:9f:56:d7:df:8e:
         bf:66:5c:08:2b:44:87:73:4a:be:0a:3a:22:d7:80:51:f6:d2:
         ee:c1:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org