Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/0/3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa
File:                     3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa (raw, json)
Hash identifier:          BszvjVMlIaWBEis54JczkdMvaoicfZ06PenogToTVvM=
Subject key identifier:   E9:B2:FB:B2:D1:E1:CB:6B:B2:B5:BF:EA:B9:B2:E8:34:02:72:AF:35
Certificate issuer:       /CN=FCB34B81E3C561DC6345161BD5466F6D7B4A984A
Certificate serial:       2FFC7016C1C10ACE83D837749BB8D62D95F92FCA
Authority key identifier: FC:B3:4B:81:E3:C5:61:DC:63:45:16:1B:D5:46:6F:6D:7B:4A:98:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCB34B81E3C561DC6345161BD5466F6D7B4A984A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/0/3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa
Signing time:             Wed 27 Dec 2023 05:05:36 +0000
ROA not before:           Wed 27 Dec 2023 05:00:36 +0000
ROA not after:            Wed 25 Dec 2024 05:05:36 +0000
asID:                     264444
IP address blocks:        131.221.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fc:70:16:c1:c1:0a:ce:83:d8:37:74:9b:b8:d6:2d:95:f9:2f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB34B81E3C561DC6345161BD5466F6D7B4A984A
        Validity
            Not Before: Dec 27 05:00:36 2023 GMT
            Not After : Dec 25 05:05:36 2024 GMT
        Subject: CN=E9B2FBB2D1E1CB6BB2B5BFEAB9B2E8340272AF35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:2a:e3:c9:f7:18:27:45:4d:19:41:7f:96:
                    66:e0:32:17:2f:3f:cf:2c:c5:2f:fe:77:84:42:b8:
                    65:35:a6:8f:dd:99:e3:ac:c3:82:79:5b:cc:d6:00:
                    c2:cf:a5:0d:d2:34:4b:18:cc:13:81:36:15:fd:7d:
                    65:63:ef:1c:aa:43:e0:3a:87:b8:35:52:21:e5:b1:
                    d6:ff:9f:ec:ca:ee:09:02:e9:91:07:06:19:45:4b:
                    76:3b:5c:58:a1:f1:a3:f8:da:fc:a3:84:ae:ae:ed:
                    ef:ec:be:43:ff:49:38:23:b9:97:e4:1b:ab:6e:d4:
                    31:7c:57:e5:c3:03:36:8d:76:e7:19:30:7c:19:d5:
                    af:33:bc:12:a3:6d:39:ab:b5:c8:8f:c7:46:bd:5d:
                    e2:11:f6:64:75:70:13:c2:90:ac:e1:23:44:5d:e2:
                    c4:28:6e:fe:ce:01:11:2b:78:dc:6b:d8:b0:f9:26:
                    56:74:b5:35:7c:04:8e:ef:57:4f:6a:af:fa:c2:fd:
                    56:b0:30:37:cf:33:7d:eb:88:db:dd:74:d7:82:44:
                    5a:ba:79:69:e0:b1:ec:f7:c6:a4:78:ba:06:09:d1:
                    46:76:a2:71:a1:1d:2a:8e:5c:c1:b9:22:4b:fa:2d:
                    15:5f:3b:08:cd:88:15:62:02:af:11:cf:e6:5b:a3:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B2:FB:B2:D1:E1:CB:6B:B2:B5:BF:EA:B9:B2:E8:34:02:72:AF:35
            X509v3 Authority Key Identifier:
                keyid:FC:B3:4B:81:E3:C5:61:DC:63:45:16:1B:D5:46:6F:6D:7B:4A:98:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/0/FCB34B81E3C561DC6345161BD5466F6D7B4A984A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCB34B81E3C561DC6345161BD5466F6D7B4A984A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/0/3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:b1:ff:ec:0b:d2:61:58:73:98:ce:8d:2f:1c:76:b9:22:64:
         8d:66:98:b7:30:43:b7:ee:33:86:45:a7:dd:86:cc:4f:d4:0e:
         4a:84:08:0d:6d:4f:7e:58:2f:c3:25:ed:e0:41:46:18:e2:9d:
         1d:a1:42:35:1a:7e:5c:c6:18:13:93:6f:97:74:6a:6b:09:3e:
         bd:ba:16:d7:dc:ab:3c:e3:e0:47:2e:d4:25:e9:cf:fd:a6:d4:
         68:e4:b0:63:f2:47:4a:17:89:66:ba:81:03:c2:ba:07:29:8f:
         6b:0e:89:73:98:36:20:36:b8:6f:58:43:2a:c8:2d:82:d1:d2:
         ee:07:39:ae:94:01:ad:1d:a1:57:64:03:06:54:f6:bb:0c:2d:
         c5:41:7f:28:37:9e:25:7a:34:a6:ab:19:12:55:14:0a:b5:77:
         80:16:d8:ba:cd:52:22:0c:cc:16:a9:2a:39:c6:08:36:f6:40:
         27:26:72:37:4a:76:4c:5e:f3:2a:a2:e6:49:bf:f3:19:6c:d0:
         55:7d:0e:83:5d:9e:9a:1a:ad:90:b0:9b:d5:5b:cc:76:8c:9a:
         6c:33:1b:6a:d2:d3:fc:96:2b:79:14:e9:d8:70:1b:11:f0:39:
         d6:99:ae:6d:ec:bf:65:16:46:4a:5a:a4:42:fe:2d:36:7e:96:
         33:33:db:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org