Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/0/3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa
File:                     3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa (raw, json)
Hash identifier:          EqehU0ihuSh/aWF2XMPpRdgpFSTh4C9PAGy7X+ZzsTI=
Subject key identifier:   65:AC:13:EA:13:7F:C3:ED:68:EE:F7:65:1B:38:21:04:BC:65:69:E9
Certificate issuer:       /CN=47F9E465C80D7A0251BED3AD4BC98C2F2B85253F
Certificate serial:       562FEA7D6A77ED0F9CF951DD8E0B3271F76C511D
Authority key identifier: 47:F9:E4:65:C8:0D:7A:02:51:BE:D3:AD:4B:C9:8C:2F:2B:85:25:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47F9E465C80D7A0251BED3AD4BC98C2F2B85253F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/0/3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa
Signing time:             Thu 31 Aug 2023 15:00:00 +0000
ROA not before:           Thu 31 Aug 2023 14:55:00 +0000
ROA not after:            Thu 29 Aug 2024 15:00:00 +0000
asID:                     262630
IP address blocks:        131.100.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2f:ea:7d:6a:77:ed:0f:9c:f9:51:dd:8e:0b:32:71:f7:6c:51:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F9E465C80D7A0251BED3AD4BC98C2F2B85253F
        Validity
            Not Before: Aug 31 14:55:00 2023 GMT
            Not After : Aug 29 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:15:e7:72:d0:fa:d7:ce:f1:c6:32:19:9b:
                    89:8a:a9:e5:37:25:2e:42:6a:b2:f6:ae:ce:33:6f:
                    aa:79:d0:2d:d5:64:52:bb:2b:6b:de:11:23:64:14:
                    37:b9:f7:a0:d9:57:c9:af:df:67:00:a4:41:df:7d:
                    a4:92:bd:d8:ef:3b:e3:99:08:c0:c4:da:7d:f1:5a:
                    73:16:85:a6:2a:cb:72:fb:d3:a6:cf:94:a9:60:55:
                    37:f3:14:44:67:a1:df:a2:42:96:6d:ad:ff:9e:7b:
                    37:76:4d:c1:76:1a:6f:90:b4:8d:62:e1:95:a4:c7:
                    81:3b:79:45:e8:e9:40:a4:f5:a6:3d:93:91:b3:06:
                    c3:85:b0:5a:65:79:7f:a2:47:6e:ed:85:57:be:74:
                    1c:d4:96:bc:cd:11:a8:49:3c:7c:5e:a8:9f:69:7a:
                    4d:b6:e0:82:15:0f:e9:11:02:3a:13:49:54:82:75:
                    53:85:51:9a:56:22:37:3c:d9:de:60:40:2c:46:b0:
                    6e:37:37:35:12:b0:d2:02:33:1c:57:67:25:04:51:
                    6c:d8:16:b2:ba:fe:89:2f:a1:a0:09:30:35:5a:07:
                    2d:71:b7:b0:50:2d:a7:0a:46:f4:c6:a8:b6:b4:f9:
                    c7:85:bf:f1:ad:d8:e2:eb:95:34:fb:d7:4d:98:17:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AC:13:EA:13:7F:C3:ED:68:EE:F7:65:1B:38:21:04:BC:65:69:E9
            X509v3 Authority Key Identifier:
                keyid:47:F9:E4:65:C8:0D:7A:02:51:BE:D3:AD:4B:C9:8C:2F:2B:85:25:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/0/47F9E465C80D7A0251BED3AD4BC98C2F2B85253F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47F9E465C80D7A0251BED3AD4BC98C2F2B85253F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/0/3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:7e:6f:f9:19:fa:10:9a:7f:61:c5:f6:39:ca:8a:fa:35:83:
         d1:bb:5c:f5:0f:f6:1e:45:1a:d2:f5:c1:52:4a:6b:3b:2f:06:
         28:e6:c6:6b:48:4e:a0:5b:42:3e:0e:a6:eb:0c:94:ff:bd:8f:
         1d:b4:2a:0e:4c:80:88:0e:78:41:91:86:5d:44:9d:a6:c8:45:
         68:03:01:d9:6d:13:b8:06:e0:bc:19:2c:aa:6d:d5:77:84:13:
         4b:fd:73:8f:d2:e1:9f:0d:2e:ac:f3:37:cc:d1:96:c2:ab:bd:
         59:88:31:6f:88:09:be:f7:d7:f3:98:89:60:2c:63:a5:a5:7c:
         9a:56:6d:c5:c7:49:ff:82:92:ea:c1:c5:00:2a:2c:d1:e0:fa:
         54:39:2c:92:ff:4a:3b:37:12:40:29:38:db:b6:48:54:1d:55:
         b0:33:f3:23:d8:e4:5b:a8:74:56:b6:a2:d5:ad:46:74:75:8c:
         f9:03:60:f6:51:10:1e:6f:ac:1a:e6:05:d6:7f:33:5a:a9:d2:
         42:09:86:85:b1:80:ed:0a:69:bc:ae:51:66:7d:aa:3a:c5:5a:
         26:fc:8e:93:9a:4c:f1:b4:c7:70:07:12:d1:0b:ed:9b:95:27:
         81:df:2b:0d:53:f5:6b:30:c8:bb:74:7e:e3:57:99:16:9d:a7:
         7a:0c:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:04 2024 by rpki-client on console.sobornost.net