Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa
File:                     3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          zkHwF+m+DzOOZSllyiYWPMp0FfoRNFuReeX+shq+9EA=
Subject key identifier:   95:2B:6E:14:9C:74:CD:1A:D7:3C:D3:CB:95:11:E2:AD:69:73:01:6E
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       43645D22360B8188E1F65011B9EDA0F7A397CBB4
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa
Signing time:             Fri 30 Jun 2023 18:11:25 +0000
ROA not before:           Fri 30 Jun 2023 18:06:25 +0000
ROA not after:            Fri 28 Jun 2024 18:11:25 +0000
asID:                     61672
IP address blocks:        131.108.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:64:5d:22:36:0b:81:88:e1:f6:50:11:b9:ed:a0:f7:a3:97:cb:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Jun 30 18:06:25 2023 GMT
            Not After : Jun 28 18:11:25 2024 GMT
        Subject: CN=952B6E149C74CD1AD73CD3CB9511E2AD6973016E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ff:61:09:b0:21:d0:00:92:fe:cc:07:6d:0a:
                    b4:28:de:e1:a1:34:d5:b8:8f:3d:42:d0:59:ce:36:
                    84:d2:02:e0:22:70:c1:c4:a9:c5:da:bd:68:a3:2c:
                    67:ad:99:9c:cb:4d:a5:9d:e7:87:7c:6d:21:e0:0d:
                    4c:9d:31:6a:71:99:76:35:b9:94:6e:13:63:5e:29:
                    93:8b:fb:d9:90:82:1f:41:a7:ae:3c:37:c5:13:3b:
                    49:e8:60:34:9e:fe:e3:fd:49:de:f1:41:9e:94:0a:
                    af:6f:17:42:6b:14:ee:53:14:0f:f7:c5:75:c2:58:
                    d6:6c:64:d2:cc:a1:8c:14:a8:0b:1b:41:5b:88:08:
                    77:99:e5:1b:e2:66:e2:54:ec:67:29:74:8b:c5:73:
                    7e:ed:d0:70:0e:07:62:e0:d6:e4:43:f3:c2:09:99:
                    e7:a5:43:75:36:e9:f9:ab:c0:02:3e:6d:bd:ee:fe:
                    e2:5c:72:eb:b5:ad:a1:44:a7:6d:ec:8d:8a:26:fb:
                    35:3d:b3:38:99:2e:a6:99:d0:b6:81:25:23:d4:a8:
                    39:41:55:ca:19:d3:15:7c:33:b2:1f:7c:93:99:1f:
                    66:51:25:55:6c:55:cd:f9:83:6c:33:55:9b:c9:d2:
                    67:db:43:6f:cc:55:9b:bc:40:5c:eb:e3:7c:f0:b8:
                    11:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2B:6E:14:9C:74:CD:1A:D7:3C:D3:CB:95:11:E2:AD:69:73:01:6E
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:28:12:2c:7e:5e:f0:a2:4b:07:22:ff:07:ff:82:eb:02:c4:
         52:fe:3e:ed:b1:80:2f:48:d2:82:2a:51:5f:74:26:ef:09:96:
         d2:31:d8:fd:6e:3c:21:5e:6d:cd:cd:50:cb:a8:d7:ba:fa:59:
         f8:02:2f:af:3a:04:d4:87:1b:f7:fc:b6:b2:dd:73:dc:b0:48:
         07:ff:51:7e:49:0b:d3:6a:73:15:0d:f2:75:b8:c7:e1:5c:c6:
         69:34:fa:59:e0:ac:10:ef:38:20:91:59:4f:3c:ab:56:ff:4c:
         66:35:97:47:ed:14:2b:06:87:4d:35:2a:f0:7d:80:a1:ff:02:
         48:49:98:34:b4:e3:4c:98:06:40:5d:88:a6:42:12:e2:be:49:
         1b:9d:53:62:94:38:d4:ba:f5:0f:63:b6:65:06:fe:66:eb:77:
         54:1b:13:78:fa:b9:b0:c4:60:79:f5:8f:93:85:03:c0:b1:67:
         38:88:0d:9b:1a:61:6f:3a:9f:92:7f:b5:59:f6:21:7e:b9:bf:
         78:db:3b:2e:8c:cf:6f:a8:30:c7:2b:47:4a:45:13:cd:11:89:
         aa:bb:64:fc:c4:c8:ad:e3:ac:e9:40:39:a9:dc:64:d8:52:e1:
         99:f1:10:a9:77:4e:bf:8f:62:67:b9:e4:ab:f2:29:96:ce:23:
         22:00:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org