Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/3133312e3130382e3235342e302f32342d3234203d3e203631363934.roa
File:                     3133312e3130382e3235342e302f32342d3234203d3e203631363934.roa (raw, json)
Hash identifier:          PAXMZSKrgr9EppvzVNrU1GG6KgyYh7XScnTl4vKMbt8=
Subject key identifier:   05:34:18:08:91:08:FA:BB:E2:AB:FC:57:7D:19:40:93:B5:8C:4B:AE
Certificate issuer:       /CN=4954164C92FA51462EBE84A75D28E2891F0752CF
Certificate serial:       3F5B2B7F40FB0F28D7288DB76D2325E0E1B9A8D1
Authority key identifier: 49:54:16:4C:92:FA:51:46:2E:BE:84:A7:5D:28:E2:89:1F:07:52:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4954164C92FA51462EBE84A75D28E2891F0752CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/3133312e3130382e3235342e302f32342d3234203d3e203631363934.roa
Signing time:             Wed 23 Aug 2023 15:24:27 +0000
ROA not before:           Wed 23 Aug 2023 15:19:27 +0000
ROA not after:            Wed 21 Aug 2024 15:24:27 +0000
asID:                     61694
IP address blocks:        131.108.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5b:2b:7f:40:fb:0f:28:d7:28:8d:b7:6d:23:25:e0:e1:b9:a8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4954164C92FA51462EBE84A75D28E2891F0752CF
        Validity
            Not Before: Aug 23 15:19:27 2023 GMT
            Not After : Aug 21 15:24:27 2024 GMT
        Subject: CN=053418089108FABBE2ABFC577D194093B58C4BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:d1:57:c3:82:45:b3:f4:a8:9e:c1:17:de:
                    60:69:96:97:b4:68:cb:a9:fa:84:68:8a:4b:33:c6:
                    7b:31:15:7f:21:fe:da:fc:4e:15:53:63:91:cb:2f:
                    5f:6f:42:04:49:25:90:c0:7e:27:37:8e:c0:4c:c7:
                    ec:a7:1c:68:66:4d:95:91:cb:ab:93:5a:84:d5:2f:
                    2a:2b:00:24:6d:41:4c:a7:6a:5a:9b:32:b1:e5:16:
                    ff:e8:9c:9c:e6:5e:b9:28:1c:ae:13:6b:25:d3:35:
                    64:d2:a0:a5:cb:69:98:2b:95:3e:59:0e:40:84:ed:
                    93:17:0e:70:b5:e1:e8:18:7c:aa:7c:af:d9:c5:49:
                    41:ac:e7:f8:1a:bf:69:49:de:6a:be:62:22:aa:68:
                    fe:8d:ab:e4:a8:a1:d0:24:79:60:09:e5:5a:90:5b:
                    35:cc:7c:90:ad:a9:b4:4a:3f:cc:f0:f5:e5:22:d9:
                    b5:bc:66:03:37:60:e4:9c:42:7d:72:05:cc:c6:a6:
                    db:e1:7e:7c:3f:17:42:1f:eb:82:e0:ff:e9:31:40:
                    0e:9e:e6:9e:d0:9a:8f:f3:34:fb:4c:b3:00:78:e1:
                    42:f0:45:eb:c7:a0:ef:2e:c4:17:58:40:fa:b5:ab:
                    2a:74:63:81:19:3b:95:31:29:ff:96:c1:63:0b:b2:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:34:18:08:91:08:FA:BB:E2:AB:FC:57:7D:19:40:93:B5:8C:4B:AE
            X509v3 Authority Key Identifier:
                keyid:49:54:16:4C:92:FA:51:46:2E:BE:84:A7:5D:28:E2:89:1F:07:52:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/4954164C92FA51462EBE84A75D28E2891F0752CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4954164C92FA51462EBE84A75D28E2891F0752CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/3133312e3130382e3235342e302f32342d3234203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b5:0e:c0:14:77:e0:65:15:64:20:4c:5a:15:c7:b0:bd:a2:
         d6:b2:d7:b9:15:30:44:ad:25:42:79:6a:28:1a:b8:bb:ad:d0:
         5e:42:b5:01:d6:0e:87:d0:8b:a6:0f:95:d2:75:15:6f:af:2b:
         19:13:b3:f6:a5:08:89:ca:8f:18:fd:2c:5a:2c:81:38:be:14:
         f1:4d:04:3a:14:53:1f:b3:5d:25:cb:80:0d:ef:e7:ec:cd:75:
         29:5a:5c:89:ec:8a:3b:6e:fd:88:42:0a:6a:d7:c6:21:ff:d1:
         bb:d0:4e:5c:3e:27:bb:99:da:1a:76:ec:ab:fa:ec:12:35:b3:
         cd:d9:9e:2c:42:53:6a:b2:fb:49:8b:a7:da:43:42:03:53:bf:
         5e:8c:ea:29:cf:1c:13:66:b0:99:ff:ae:a9:1a:f5:aa:5d:2a:
         8a:78:25:63:8f:a3:76:98:08:20:49:50:1f:ea:71:93:2c:11:
         b0:ee:97:95:9c:08:bf:42:04:c5:25:f3:d3:63:dc:0f:19:f3:
         77:3b:1b:4b:0f:fb:1c:01:5a:42:c8:10:44:38:f6:69:40:36:
         df:a2:d6:ab:ac:ab:f9:db:9d:31:3c:ba:d1:99:bf:96:32:da:
         f8:7c:52:57:78:ba:f4:5b:2e:74:3b:73:fe:7e:72:72:b2:db:
         ed:d6:b6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org