Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136362e302f32332d3233203d3e203631363738.roa
File:                     3133312e3130382e3136362e302f32332d3233203d3e203631363738.roa (raw, json)
Hash identifier:          VQouJyMcoioQJ5n9/BeaZn91wyeNMZ/CCIocA/O+VVI=
Subject key identifier:   70:CF:04:0F:43:78:16:0B:B0:90:C8:3D:DD:2D:16:49:52:DC:E8:84
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       6193BD3FCAAB0E5F7976F62DFC6302663A938F1A
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136362e302f32332d3233203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:44:36 +0000
ROA not before:           Tue 24 Oct 2023 12:39:36 +0000
ROA not after:            Tue 22 Oct 2024 12:44:36 +0000
asID:                     61678
IP address blocks:        131.108.166.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:93:bd:3f:ca:ab:0e:5f:79:76:f6:2d:fc:63:02:66:3a:93:8f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:39:36 2023 GMT
            Not After : Oct 22 12:44:36 2024 GMT
        Subject: CN=70CF040F4378160BB090C83DDD2D164952DCE884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:71:f1:75:5a:44:81:78:c0:f9:60:af:aa:
                    7b:0b:22:25:39:48:fe:e9:c2:75:39:13:72:ee:e8:
                    01:3d:72:c1:57:c6:b0:e2:0c:f1:df:fb:08:d4:13:
                    16:da:ca:b9:47:74:af:8c:bc:c1:63:06:19:91:35:
                    65:0b:4b:32:52:2b:b6:e0:99:03:8f:02:27:ea:b6:
                    b9:a5:a1:cc:ed:4a:88:bd:47:ae:d4:4b:33:ef:8b:
                    fb:b2:6e:0e:f2:9a:74:a5:94:59:b6:94:b9:e1:f4:
                    a2:ec:ea:3c:ee:ad:1f:8d:2e:00:7b:e2:e9:48:15:
                    41:53:4a:82:f1:46:23:54:61:57:76:10:ed:b4:e3:
                    8e:6b:3f:c5:3c:0c:5b:04:63:23:ea:69:d6:1b:21:
                    24:75:cf:d2:eb:59:e5:03:57:59:fd:8e:df:8e:ac:
                    d4:fd:cc:1e:af:80:13:c6:20:45:2d:13:e6:5b:2f:
                    34:06:f5:56:8d:38:85:11:bc:8c:87:aa:02:b2:89:
                    f6:ab:50:31:0e:68:93:30:47:de:4d:68:87:cd:0c:
                    55:dc:1a:f1:b2:53:d2:4e:a9:cf:c1:40:bb:9e:82:
                    57:84:bd:1f:00:76:2a:2a:f8:5d:b4:a3:31:98:1f:
                    cf:03:67:22:77:68:80:3e:81:17:80:c9:cf:82:ec:
                    70:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CF:04:0F:43:78:16:0B:B0:90:C8:3D:DD:2D:16:49:52:DC:E8:84
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136362e302f32332d3233203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:b4:5b:5d:02:97:f6:d0:a1:b5:27:75:71:5b:bc:09:38:c5:
         a6:1a:a3:5c:74:53:09:e0:57:6a:e7:e5:e9:91:ce:71:49:42:
         1d:cd:13:3c:a8:67:17:4c:04:e7:cd:c7:91:93:cc:c2:2f:89:
         55:09:2f:55:0b:57:08:4e:78:db:5a:fb:a9:1a:f1:54:d2:8b:
         d9:a0:20:a0:a5:3c:b8:87:61:6b:32:a6:9d:b8:19:dc:1e:d2:
         ff:1d:84:87:88:c2:36:23:39:ad:e3:6e:33:dd:61:a9:e2:5f:
         f4:d8:76:39:cd:de:fb:90:6a:2e:36:eb:60:34:cd:cd:d1:b3:
         ec:62:e3:a2:f9:92:79:20:ca:ed:53:de:2e:0e:5b:2a:91:0c:
         47:31:e1:c6:7b:4f:51:1c:30:d5:13:ec:05:d7:44:5d:d9:f3:
         3d:04:04:c6:b1:ba:35:11:68:ef:b9:f2:e7:d9:69:8a:e7:27:
         2c:e7:14:83:08:20:e1:8c:3b:fd:e0:3d:0f:7c:46:40:8b:cc:
         d3:1c:fc:e1:d7:c0:c0:e0:06:b4:97:e7:5c:dc:1f:af:4b:99:
         ac:d1:24:c7:b5:6d:08:b6:cb:a2:f9:70:41:cf:80:9d:ff:92:
         3e:cc:51:64:31:24:54:2f:25:1e:9a:c8:50:d1:20:59:4a:36:
         c7:30:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org