Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/3133312e3130302e33322e302f32322d3332203d3e203631373436.roa
File:                     3133312e3130302e33322e302f32322d3332203d3e203631373436.roa (raw, json)
Hash identifier:          oNt6FHaTnqTwUy1eRSZz4WKji3rI0JmT6KVu2YRCXLc=
Subject key identifier:   40:6C:0E:FE:31:F3:8A:95:35:89:3F:96:A9:15:FB:DA:B5:43:13:45
Certificate issuer:       /CN=758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC
Certificate serial:       2D248DFCB02B61EDFDCB62DEA441E020B94013A9
Authority key identifier: 75:8B:C6:FB:BB:A9:BB:DA:0A:75:71:23:B6:6C:9A:CE:FA:6F:B0:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/3133312e3130302e33322e302f32322d3332203d3e203631373436.roa
Signing time:             Sat 01 Jul 2023 12:29:25 +0000
ROA not before:           Sat 01 Jul 2023 12:24:25 +0000
ROA not after:            Sat 29 Jun 2024 12:29:25 +0000
asID:                     61746
IP address blocks:        131.100.32.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:24:8d:fc:b0:2b:61:ed:fd:cb:62:de:a4:41:e0:20:b9:40:13:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC
        Validity
            Not Before: Jul  1 12:24:25 2023 GMT
            Not After : Jun 29 12:29:25 2024 GMT
        Subject: CN=406C0EFE31F38A9535893F96A915FBDAB5431345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:be:7a:dc:3a:6e:26:01:65:29:e5:a9:1a:
                    3e:89:a4:d4:35:bd:d2:52:df:35:07:ff:2c:3a:b0:
                    90:8e:31:41:53:55:2f:ea:6c:4a:05:24:ff:78:b8:
                    1e:d6:be:b9:0f:51:9d:16:50:7f:9e:89:b2:12:92:
                    60:62:86:09:4c:63:ee:1d:cc:70:66:34:fc:b2:e7:
                    f2:2f:b4:4b:4c:89:b3:b8:64:45:12:a9:d9:75:5d:
                    6a:ec:f1:ec:55:5c:d4:f2:8a:d4:04:a0:26:48:6e:
                    47:20:2e:9e:97:a3:61:39:c0:a1:26:02:78:31:87:
                    bd:e1:ce:36:18:bd:41:7e:9d:2c:64:e9:9b:69:c1:
                    9d:9b:2a:42:c0:cd:44:8f:fc:07:77:89:ab:82:35:
                    ff:3d:df:7a:74:73:8d:c3:61:53:65:73:5f:4b:0e:
                    50:0c:56:8e:82:f8:23:6f:04:af:eb:e8:fa:e2:7e:
                    64:c8:e3:e5:4e:28:f4:32:01:ca:92:40:c0:a4:c4:
                    1b:c3:09:33:a1:07:e5:86:bc:96:a6:e5:c8:7e:6a:
                    bb:61:fc:49:9f:83:65:66:14:61:0b:b2:3b:b0:40:
                    a5:45:5a:e9:8c:7e:b4:de:cf:5f:e1:dd:a6:91:98:
                    3c:0e:05:57:d2:ad:c1:1b:86:11:e3:dd:ac:fe:72:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6C:0E:FE:31:F3:8A:95:35:89:3F:96:A9:15:FB:DA:B5:43:13:45
            X509v3 Authority Key Identifier:
                keyid:75:8B:C6:FB:BB:A9:BB:DA:0A:75:71:23:B6:6C:9A:CE:FA:6F:B0:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/3133312e3130302e33322e302f32322d3332203d3e203631373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:4f:06:49:b5:6f:4e:cb:a7:05:b0:67:0a:f4:05:83:a8:
         bc:5a:65:e4:69:76:c1:25:07:0d:63:ff:66:a8:97:cf:ed:f7:
         32:e6:ba:36:5c:83:7e:42:68:5d:da:65:f3:d1:de:bb:81:02:
         cc:78:66:aa:d0:18:c0:c5:7f:22:b0:2f:b4:4e:f6:b7:bf:38:
         0d:60:f3:cc:b8:44:e9:c2:24:b3:c9:a5:c3:68:59:95:7b:75:
         50:c2:24:eb:4b:69:df:ec:70:dc:15:7e:42:b1:eb:ff:c6:f4:
         6d:33:c5:80:43:ca:ac:f1:0c:55:ba:fa:ac:58:76:b1:4f:3a:
         c8:65:8b:55:82:db:42:7a:0a:8b:fe:90:11:5d:c5:2e:ac:09:
         71:5e:8b:1e:26:93:c3:9e:bd:6d:03:c4:dc:ef:ba:6b:71:6b:
         86:25:4c:1b:4b:f6:85:b6:8b:43:52:97:00:46:85:a2:fa:d9:
         db:8f:2a:02:62:0d:08:7f:5c:63:35:88:62:16:ff:e5:e3:db:
         63:a1:6d:2d:f0:e7:44:92:39:f3:93:fd:67:f6:60:68:6e:ee:
         a6:36:c4:3f:90:fa:8f:66:e7:c7:0b:da:f0:9f:57:78:73:c6:
         f6:8e:aa:29:1a:34:79:3f:80:9b:12:3d:e2:3b:aa:1c:a9:03:
         db:bb:4d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org